Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6cff4db-a45e-4379-9b45-e102e88e2716.roa
File: a6cff4db-a45e-4379-9b45-e102e88e2716.roa (raw, json)
Hash identifier: p4FXgjkqpKYsIoRioSxKTa+F/TJwc07rWYpK7bvETUo=
Subject key identifier: 86:43:E0:EC:DA:07:1E:03:18:B3:7E:6B:08:C5:67:3E:1D:D1:A7:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 053B74B569A05ADEF3469F5962A4D7B2DB4FE469
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6cff4db-a45e-4379-9b45-e102e88e2716.roa
Signing time: Tue 18 Aug 2026 18:12:51 +0000
ROA not before: Tue 18 Aug 2026 18:12:51 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3b:74:b5:69:a0:5a:de:f3:46:9f:59:62:a4:d7:b2:db:4f:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:12:51 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=5d86bbe2c70013c3c88f73c589e6e56532a4891d2c0597d6ebe7811dfe304fd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:a6:5a:b8:55:75:e4:cb:3d:be:0d:7b:e9:
d6:a8:a6:45:04:a9:be:66:94:1a:bd:e0:17:ca:a1:
5f:ee:c3:96:36:d0:c3:a7:2b:99:58:6d:53:50:9e:
86:3c:de:4e:c1:9d:06:e2:54:1a:0e:bc:f1:99:49:
4d:3b:9d:23:a8:2a:d8:b4:7e:6f:5b:74:bb:f3:ae:
9f:be:b1:04:05:19:76:5a:52:b0:b4:64:b5:6b:61:
7b:fb:5b:c3:d1:92:1c:ee:42:ee:79:e5:34:a7:db:
a7:75:bb:be:97:d2:49:87:47:8d:98:d4:13:e5:d4:
aa:29:2c:28:d9:d1:4e:27:c3:c9:53:48:3b:4d:b9:
95:c8:6b:ce:97:6d:20:7c:85:cf:bc:3d:49:a6:ad:
b9:f6:68:f2:aa:ae:fe:39:c3:14:e4:b5:1a:69:4f:
54:48:52:a5:52:ed:81:0e:90:4a:29:b0:32:d5:8d:
42:32:0b:d6:2c:0f:75:25:98:20:da:3b:b6:47:f6:
ff:72:4e:48:86:4f:13:fe:66:ed:95:92:d4:a7:80:
49:5c:7d:60:bf:5f:9c:2c:1a:35:67:62:3d:c9:4c:
3f:ab:c4:3f:c2:7d:b1:96:b5:67:0d:8d:0a:33:49:
57:39:25:33:87:0f:85:01:6d:60:fc:6f:62:bb:e4:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:E0:EC:DA:07:1E:03:18:B3:7E:6B:08:C5:67:3E:1D:D1:A7:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6cff4db-a45e-4379-9b45-e102e88e2716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:1000::/40
Signature Algorithm: sha256WithRSAEncryption
8a:88:95:d6:b0:07:84:4a:37:9b:79:c4:0a:5e:39:01:07:5e:
55:75:2a:51:7e:f2:e7:d0:ef:bb:d5:f9:ab:54:26:a0:78:b9:
a3:c9:4e:ab:1a:76:93:d9:86:f7:77:11:fc:30:1a:da:bc:6b:
a3:bc:3d:72:92:34:fa:87:8b:14:fd:7c:34:6d:ee:96:24:03:
ca:78:d9:6a:b4:fb:7c:e4:59:c0:b5:49:0c:ba:ce:99:1f:5c:
b2:1f:f9:a1:6f:6c:a3:b7:ec:47:19:45:14:8f:58:ba:8b:a3:
2b:2a:11:e5:f2:24:a6:5b:62:33:87:bd:a7:fc:06:61:2c:d5:
72:c8:b7:d9:90:07:2e:90:74:f9:02:09:18:1b:a1:31:33:84:
7f:16:df:c1:55:08:16:b9:65:f8:65:ad:e8:a9:fe:9f:3f:03:
7c:ea:b8:43:b1:be:45:ce:c7:70:3f:7e:eb:1e:f9:a4:5b:8f:
5e:c1:94:5c:eb:e7:a7:24:9c:5b:d6:38:4a:9e:fc:99:c1:b4:
5e:2b:57:1d:a1:d4:85:8f:18:b4:ad:7e:78:24:57:26:06:65:
0c:07:37:6c:36:6d:15:61:f5:60:a7:26:c9:24:97:f9:af:96:
b2:52:7a:8d:51:c0:7d:bf:bd:24:b8:55:56:17:7e:a6:37:b3:
f2:92:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client