Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa
File: 9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa (raw, json)
Hash identifier: JqMnNAfYohpq5p9xGUNkWhTIf4I0ZOzwXCoRl9+THz8=
Subject key identifier: DB:93:F4:79:08:43:3B:28:52:53:E0:AF:26:16:6B:BD:8C:36:DA:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51D7395DACA29C4CA03152F7F49859FECA269F41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa
Signing time: Fri 07 Aug 2026 04:40:30 +0000
ROA not before: Fri 07 Aug 2026 04:40:30 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d7:39:5d:ac:a2:9c:4c:a0:31:52:f7:f4:98:59:fe:ca:26:9f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:30 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e43145656dd0803c7a46a9c2c383e21bc806741a14f275b0d08ce978e156fcdb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:41:78:91:47:88:e5:2b:86:af:1a:7e:6b:
2b:80:73:1b:79:3d:4b:56:6d:0d:be:5d:d9:8b:fd:
f4:07:5e:68:b7:bb:63:cb:9d:87:65:a7:f4:47:a6:
cf:ef:fb:48:07:ed:82:5a:47:f0:3a:5f:02:84:1a:
34:d5:f1:ce:f6:8c:02:83:7b:8e:4a:87:62:75:cf:
70:48:56:df:67:92:b7:dd:2f:4b:65:61:be:72:e6:
75:a1:01:3d:35:d5:3b:a7:a6:fa:30:56:eb:85:a1:
f7:e9:31:16:74:2d:f3:fb:94:0a:40:35:d0:37:83:
22:47:78:4e:1f:fc:ed:16:fe:21:33:f9:8c:e4:c7:
df:2e:17:6d:8d:bb:f8:58:f3:5a:29:55:cd:de:72:
7d:43:26:54:6f:13:55:00:dc:cb:28:64:c3:7f:93:
c0:12:91:a5:c2:ad:b4:bb:c2:95:db:75:a3:e6:fb:
6c:fb:8a:70:bb:9f:16:02:04:1b:2d:81:4d:f3:f7:
80:7e:04:c5:84:48:dd:12:7e:73:b1:d6:18:89:c1:
c0:b1:13:4b:f8:03:b9:f4:c8:29:31:69:64:1e:dc:
e0:13:68:19:05:ab:c6:9c:e8:59:63:24:e3:7b:e3:
66:f9:2c:3d:e0:f2:b6:38:1d:57:26:c6:7d:73:be:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:F4:79:08:43:3B:28:52:53:E0:AF:26:16:6B:BD:8C:36:DA:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fd987fa-30e8-40bc-89c2-d89705d5fb83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:e2:07:58:26:cd:f9:58:e3:cc:54:f6:91:de:20:fb:ca:b5:
08:b9:9c:71:b7:16:17:91:45:07:fb:fa:b4:13:b7:ca:4b:7d:
63:88:52:df:a3:63:df:9f:14:48:11:78:16:3c:69:e4:a4:4c:
5e:f7:2b:95:3b:ae:21:4d:e2:9c:89:8b:6c:c6:82:c3:3a:50:
34:7f:08:8d:59:65:8d:42:2b:3e:ec:6a:92:79:cc:7f:1f:aa:
aa:c9:4e:e3:fa:e3:7a:8b:19:70:93:6d:a2:25:22:e2:50:f4:
53:5e:a3:51:42:ef:87:a0:d3:d1:ac:8c:e0:4e:7d:09:ae:0a:
a8:65:c7:e3:22:ba:38:63:90:ec:83:ab:d5:ad:57:cc:21:07:
6b:8e:d3:71:70:7a:03:69:33:14:c7:43:4c:a5:83:28:29:bc:
c4:cf:82:22:e6:cb:c7:51:c1:f2:58:3d:fa:b6:9e:0d:e5:e8:
76:b5:53:0d:79:64:29:d8:41:ab:03:51:e2:64:c5:ae:fe:48:
5b:fe:a5:74:36:1d:c9:b0:a9:0c:e9:e7:92:2d:32:6a:02:69:
ed:82:dc:d1:0d:14:1b:c4:4e:6a:43:f4:c9:cc:9c:d0:e4:c2:
be:05:b1:99:3e:ac:55:a5:66:ae:9e:bf:db:7f:12:d4:6b:38:
e7:97:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:03 2026 by rpki-client