Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
File: a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json)
Hash identifier: JpUy9EdnEOczDbNd5iql5yxWpPM4W5VcgqIJ2OHL/CM=
Subject key identifier: 71:5F:77:E3:DA:4A:35:30:00:11:71:D2:E4:F5:77:DD:8D:B9:73:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B14871AF2EB864E8BD0994E8F55158C9D5D5FDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
Signing time: Fri 07 Aug 2026 05:40:11 +0000
ROA not before: Fri 07 Aug 2026 05:40:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:14:87:1a:f2:eb:86:4e:8b:d0:99:4e:8f:55:15:8c:9d:5d:5f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=20bb326ae748b911036ca4ccca7be42e90e34503a0520ae7ab99f7dab9b2c0bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:dd:29:96:f2:e2:5d:89:cf:a2:c6:11:55:
5e:6d:f3:10:d8:f7:0f:6f:cb:6a:be:00:0a:11:91:
bf:23:89:90:e8:65:19:52:b8:fc:1d:1a:79:04:49:
fb:5d:10:61:ae:58:b9:8b:24:66:3b:3d:d0:a7:f0:
8d:40:8b:50:6d:b8:e6:0a:76:9a:de:9b:f7:a2:8c:
b1:ac:b9:6a:4d:73:5b:05:a0:46:7a:e6:90:f9:c7:
2c:1c:ab:ab:e8:07:95:19:b9:02:12:fb:a7:47:ee:
d0:53:82:83:c0:87:60:af:08:13:e6:40:18:0d:39:
c7:e7:8a:26:2f:27:ed:aa:c2:da:e1:ec:4d:a4:8d:
cb:ac:ec:2d:50:bb:27:9c:cd:41:5d:15:32:7b:ea:
79:d4:02:ba:f8:c8:8e:58:67:01:87:c7:7b:58:d5:
65:2b:64:48:63:fc:90:8e:f0:ae:ca:5b:55:2c:db:
04:35:c7:21:fb:4f:37:dd:ea:52:81:aa:02:0e:e7:
f1:76:e0:e4:fb:ff:bb:b7:5c:ee:53:72:6a:5c:8a:
c9:8d:ab:f0:48:ea:a5:34:55:a5:40:59:50:44:24:
7f:7c:50:51:ea:dc:0e:2f:9d:9e:ce:e1:7b:d0:73:
d1:1f:d2:1c:23:6c:a9:4f:2f:e9:76:fe:3a:af:a7:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:77:E3:DA:4A:35:30:00:11:71:D2:E4:F5:77:DD:8D:B9:73:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
94:bf:4f:5b:ac:5f:5f:07:6a:77:93:b8:b7:f9:33:98:d1:60:
82:e5:84:b8:7f:65:52:67:d2:02:7e:ce:a7:a1:31:73:56:a1:
53:94:ee:5a:72:4e:01:f3:dc:52:4a:20:b7:d1:ea:cb:e0:2e:
72:9d:f5:23:97:01:a1:9e:95:2e:a0:d4:92:db:5b:20:5b:08:
89:3b:73:fa:c3:34:fc:fc:35:4c:50:37:0f:86:ae:a2:8e:a0:
2a:bb:99:17:b0:5f:f8:0a:7f:a2:15:77:b7:a3:6f:7a:64:e6:
2d:5c:26:4d:d3:55:17:6d:54:57:07:e9:76:f9:af:b6:01:c1:
8d:02:6c:1b:f1:58:bc:86:7e:9a:a0:1a:31:23:6c:78:91:59:
94:4c:86:d2:31:47:b7:18:b3:3a:a6:a3:c6:65:48:fc:e1:d5:
be:d4:85:aa:8c:cb:5c:be:bc:75:72:18:1e:b6:65:6c:31:68:
26:25:0c:4d:05:ed:41:5f:79:cf:ab:a7:a5:19:31:1e:04:85:
63:b8:80:bc:13:f2:4a:f8:1d:e4:46:02:9d:38:31:b7:f5:e8:
26:9b:de:2c:4d:7d:03:37:92:ca:a9:36:9c:ea:2e:ff:d6:f5:
8d:b7:f1:a5:4f:8c:3e:6d:41:74:fc:45:cb:c6:c1:b7:58:ce:
7d:95:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:13 2026 by rpki-client