Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a41612bd-48c1-461d-af16-49857a6ff0f4.roa
File: a41612bd-48c1-461d-af16-49857a6ff0f4.roa (raw, json)
Hash identifier: PL7SOqLDFdAxfRrpAoeaz3fjWeNy84OEbLdGIN7GL7A=
Subject key identifier: B0:F0:BE:E8:FE:DA:94:9C:AD:A2:C0:05:D5:22:8E:25:41:A3:91:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2FCC7B8B1E7F0F43D7FA212EFD0F234D57EEFBFF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a41612bd-48c1-461d-af16-49857a6ff0f4.roa
Signing time: Wed 19 Aug 2026 01:00:24 +0000
ROA not before: Wed 19 Aug 2026 01:00:24 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:cc:7b:8b:1e:7f:0f:43:d7:fa:21:2e:fd:0f:23:4d:57:ee:fb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:24 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=0d029b72a29e106cf9c09fd0575471206ffc08be0f399d9f3899e8eadea7c3bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:ad:8c:09:40:49:73:94:3d:6b:20:05:45:
28:34:d8:36:b2:f9:11:29:df:0d:8d:0a:67:f7:88:
fd:1d:f2:92:34:09:00:f7:a9:94:a8:31:d0:24:3a:
2d:e9:21:02:31:cf:30:6c:01:3e:b5:86:09:6d:dd:
f7:d2:da:03:a6:f0:83:81:58:f0:6f:0c:ef:7e:f2:
ec:8d:d0:b5:56:b5:91:4a:a7:f9:74:76:3d:cb:f2:
5b:ec:f2:ed:75:af:d6:9b:91:f1:38:00:ac:f5:f2:
91:74:72:db:54:98:03:a6:35:ec:40:2b:10:91:25:
0c:94:94:b1:8a:a7:e6:01:e4:bc:f2:35:c3:c6:10:
32:7c:d3:2f:4d:ff:ba:64:54:e7:da:dc:aa:f0:7f:
66:cc:08:b8:49:f0:1c:09:74:dd:fe:fb:df:56:2b:
e7:d8:3c:87:c6:9b:1c:07:5f:c2:14:3e:74:7b:c6:
72:e8:9a:79:a9:7b:09:1b:88:e2:0f:96:01:64:ce:
94:8b:a8:89:c7:b1:e4:e0:c1:a5:2c:ed:72:e2:a0:
ef:10:98:09:24:89:4a:ed:56:dd:5e:6c:d8:9c:d8:
7e:33:43:cc:4c:cb:89:46:59:da:bd:b9:26:f5:d9:
32:86:ad:30:8d:00:ff:1a:a5:57:8e:34:b8:ba:3e:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:BE:E8:FE:DA:94:9C:AD:A2:C0:05:D5:22:8E:25:41:A3:91:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a41612bd-48c1-461d-af16-49857a6ff0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
68:f2:b6:c7:7a:e9:7d:4b:f3:c3:4a:4b:be:ff:e8:2a:8b:22:
8e:db:7a:70:04:b5:05:e0:22:7a:e3:9d:83:b5:e2:a9:19:1c:
4f:5a:ba:81:03:61:21:77:1e:3a:56:de:21:08:45:29:29:53:
5c:4a:22:da:59:d5:2a:cf:45:3f:bd:14:c0:29:dc:09:c9:ab:
2c:97:05:ef:17:71:7f:77:66:a7:42:63:f1:ef:0a:a4:06:55:
73:78:0c:57:c1:9b:40:cb:1f:00:92:d1:ef:21:fb:7e:85:f7:
68:a5:db:20:0b:32:83:78:16:80:8f:7d:f4:9d:4f:77:23:07:
02:97:cc:2a:97:15:75:62:52:e9:5e:11:9e:2c:4e:ed:54:43:
18:d9:78:6b:c5:b3:21:b2:f8:91:5f:4f:af:a7:64:36:64:b9:
8c:4d:62:e8:11:01:14:38:83:c5:28:fa:5e:36:e2:70:c6:43:
1e:f0:2f:89:f5:d1:12:01:85:6d:b1:a5:5c:f3:24:a3:7d:61:
2d:d3:98:54:8b:89:00:e0:d3:70:90:91:4a:7e:94:64:ca:b1:
9f:c9:06:9f:76:a4:f0:7e:9b:2b:3a:eb:34:e9:18:8e:df:a2:
a7:c0:36:fa:a2:c1:55:a0:4a:1a:7e:1b:1b:8f:10:f3:69:15:
eb:46:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:36 2026 by rpki-client