Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
File: a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json)
Hash identifier: 4js0jzk9S7yFCmvRq+bHxwx6Nj7gFNbSAkRm9T9KR0k=
Subject key identifier: AD:AE:14:C6:F1:70:41:0C:D4:BD:0E:99:3E:DF:78:0D:75:81:42:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 614379864488CEB5657D78F75E285C306F2C17F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
Signing time: Fri 07 Aug 2026 04:41:15 +0000
ROA not before: Fri 07 Aug 2026 04:41:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:43:79:86:44:88:ce:b5:65:7d:78:f7:5e:28:5c:30:6f:2c:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=832fcc3c7c692e774a6f3df2e904d9332302fe7a58082717c5daafc4c4ed2c88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:9f:44:41:69:f4:25:47:48:53:ca:9e:c4:
db:d4:94:f2:9b:38:33:f1:53:ed:d5:e2:4d:35:e4:
17:04:b3:e7:46:17:a7:6b:ec:9d:ba:a1:87:b6:3b:
25:da:6d:57:f4:6c:b9:ca:36:f1:47:56:87:ee:ce:
b1:3e:a0:66:62:a2:55:7e:15:cc:0f:c7:2a:a1:04:
5f:01:4f:88:8c:96:94:b2:d4:0e:7d:f3:61:9d:22:
46:87:33:bb:cc:e2:2e:0d:54:73:c9:dc:47:9f:06:
d0:5a:56:67:15:f5:73:bf:80:68:2c:91:60:1e:eb:
ff:6b:8d:57:1e:2f:d8:d0:cf:bb:b1:10:14:7c:f8:
49:9f:5b:6a:ed:12:66:fd:ea:90:e7:b6:0d:4c:39:
a0:0f:74:b1:3e:18:80:c1:c4:24:f3:1e:6e:a6:ef:
a1:51:b4:40:70:bc:8d:8a:76:62:2f:ad:eb:6e:82:
16:eb:57:93:06:4b:a1:b3:0d:ee:fd:dd:ff:ce:e1:
89:14:e2:5a:a2:30:46:f1:ae:30:1a:e3:d7:75:cd:
a9:7d:d5:ed:54:93:2f:8f:99:0f:fb:6a:9d:ad:43:
90:1d:dc:4b:c9:8a:06:1d:25:90:89:8a:38:bf:59:
7e:04:98:e1:2b:9b:4c:eb:3b:7b:40:d7:52:27:1e:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AE:14:C6:F1:70:41:0C:D4:BD:0E:99:3E:DF:78:0D:75:81:42:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:a5:24:28:95:50:ed:49:15:22:1b:c4:66:01:20:2a:4e:c8:
72:7b:42:2b:37:c7:9c:f0:ba:8a:a6:1b:a5:60:a7:5c:bd:91:
a9:af:db:84:9a:c7:70:fe:62:fc:84:1f:f3:e9:f1:9b:26:3f:
d4:2d:ad:03:2c:7b:f5:a0:2f:1b:4c:26:79:17:b9:5a:d2:71:
2c:f3:51:e2:6f:93:f2:4a:7d:21:85:78:9f:e4:c2:e2:54:1a:
e9:09:ea:bd:8a:75:22:b4:a7:32:4c:cf:96:9c:47:10:a0:d7:
ba:0c:31:32:0b:fd:29:48:63:bc:2b:fd:31:89:43:b3:e0:2a:
1e:77:94:ac:43:01:fa:cf:bc:b2:94:4d:e6:86:d3:eb:46:5b:
14:85:76:5d:20:92:0d:b0:cc:a6:ca:ab:b8:5a:fa:48:fb:72:
d4:6a:3e:81:e7:dd:7a:a4:27:55:ec:2f:8d:b0:72:ef:fb:98:
c0:17:dc:d4:ea:b0:3b:6e:29:89:1b:61:00:59:07:15:2d:0d:
cd:b0:0a:37:ec:42:9d:7a:5e:9e:cf:42:e7:84:71:4a:68:b7:
5c:01:4f:6f:7d:a5:b0:fe:20:30:95:6a:89:07:ae:a2:fc:40:
70:6b:cc:9a:a5:b2:6b:06:c3:f3:d5:9d:ec:63:3e:74:42:93:
1b:15:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:04 2026 by rpki-client