Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
File: 9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa (raw, json)
Hash identifier: XyB1//wh44LB6kZJ5nRHtAta6bF8eX/xmhYBoGbxnY0=
Subject key identifier: 4E:2D:A4:36:BE:71:2F:5B:07:DC:4C:2C:A4:26:CB:86:8B:E5:35:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F6D9AF145DDEAF7BE5F1D7D08E04FC43E66A5AB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
Signing time: Mon 03 Aug 2026 02:00:07 +0000
ROA not before: Mon 03 Aug 2026 02:00:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6d:9a:f1:45:dd:ea:f7:be:5f:1d:7d:08:e0:4f:c4:3e:66:a5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=03a940beaece954c682acd32e91a5124fd1f317b44c382cb7c522ebf01ae18d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:5f:d1:a3:9c:6a:4d:b7:80:b7:cd:cc:81:
64:cf:b0:16:10:05:13:e8:b5:29:5d:0a:c9:cc:78:
ca:c3:f4:64:5d:cb:39:0b:90:4b:dc:1d:dc:1f:2a:
c3:87:17:ce:3f:54:e1:e2:25:2f:6e:64:c8:63:e6:
60:34:03:7d:03:11:60:e9:9f:04:dd:36:75:e7:3a:
fd:41:ae:37:c9:ef:b8:1f:f7:70:c2:43:89:36:72:
95:31:e4:4a:7d:ca:d7:a7:53:cc:21:56:49:d1:4f:
31:20:3c:ac:db:08:7d:3c:ba:e6:30:c6:fb:0f:df:
a7:9c:ca:ff:cc:1a:1d:d3:65:f7:2e:04:40:0b:6b:
0f:f0:5b:af:ca:35:d5:76:65:de:3f:48:79:b2:5e:
43:56:3d:c4:1d:af:86:df:9d:f3:97:8a:f3:27:07:
59:42:1d:eb:2c:bb:88:27:a7:38:c8:31:7a:1e:19:
18:df:94:73:d1:a4:92:a6:29:2b:d5:46:e1:f6:a4:
18:f0:80:b2:8d:6f:4b:6e:63:ca:e4:e0:18:35:86:
6b:e6:88:e1:c7:a5:7a:ec:93:bf:08:87:56:53:56:
6a:7b:dc:05:0f:e2:96:66:4d:d4:48:79:b2:47:95:
aa:57:64:36:e1:cb:62:ea:fc:f5:fc:eb:d2:1d:90:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:A4:36:BE:71:2F:5B:07:DC:4C:2C:A4:26:CB:86:8B:E5:35:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:e000::/48
Signature Algorithm: sha256WithRSAEncryption
a2:f5:d6:20:2d:29:80:e7:59:4a:cd:5a:00:44:8c:a8:f3:8b:
29:8d:00:96:60:d1:9d:64:68:90:d9:9a:6f:fd:0e:68:a2:b5:
44:5f:91:27:12:fc:14:74:5d:a2:0e:40:7a:d2:75:90:52:0f:
6c:6c:df:6b:73:6e:a9:45:02:67:c4:ec:c1:f4:10:a3:3b:3a:
76:20:76:62:35:b6:b3:28:ea:09:eb:23:1f:cf:38:15:75:a9:
53:6c:cf:a9:0c:0f:90:40:20:66:49:55:37:70:b7:5a:cd:bc:
66:b4:e3:5b:1d:c9:6f:36:48:2a:71:56:3a:40:0e:8d:24:21:
41:b1:94:c5:6a:63:8a:9b:f6:1c:69:df:6b:90:2e:f7:c4:c5:
0f:96:62:f1:78:6b:f6:6d:cf:47:dd:6a:da:e7:6f:ed:05:da:
da:0d:14:80:15:64:d9:06:e9:f3:20:a7:3a:57:90:90:62:43:
29:75:1e:89:31:9d:dd:4c:61:c6:04:76:06:32:71:d0:18:5b:
b7:37:c2:3d:60:b2:c1:b9:eb:1f:25:37:eb:25:5e:9a:8b:e1:
69:46:16:23:61:37:e5:90:89:2b:4a:bf:f9:40:ac:b0:a2:5b:
3c:3e:a3:c7:a4:c6:48:e1:6a:cf:fd:49:89:df:6a:87:f4:3a:
95:78:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:19 2026 by rpki-client