Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
File: aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa (raw, json)
Hash identifier: 2yFqXgeeD9cbtkPCRBVsNIzC9YS7l0w46pbHbK4K1pg=
Subject key identifier: 6E:FB:68:C2:DA:69:25:0E:DE:B8:40:31:64:90:A6:52:98:21:A2:F3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E98B606B866A1B9809F83911E7C9C00E8A0A4DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
Signing time: Fri 07 Aug 2026 04:50:06 +0000
ROA not before: Fri 07 Aug 2026 04:50:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:98:b6:06:b8:66:a1:b9:80:9f:83:91:1e:7c:9c:00:e8:a0:a4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=01c57ca558a06f5f949495562fc3edb8aba4c73131048e34ca1f780717d08c8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:3e:ad:e7:d7:99:b4:08:95:b9:05:64:b6:
77:73:0c:25:df:73:62:18:76:7e:ad:28:f7:fb:74:
2f:aa:eb:cd:e8:fd:99:f6:33:a7:7d:99:fc:5a:d4:
6f:1a:8e:bf:d5:13:28:52:f0:3a:38:e4:4d:cc:eb:
fe:7a:6a:9f:00:73:45:16:42:ea:08:e3:57:b0:a4:
22:33:5f:9f:3a:20:cb:6c:47:c7:38:eb:52:d2:3e:
0b:46:af:e6:76:20:ea:13:58:7e:15:c3:7d:ed:cc:
c3:71:d3:bf:18:8f:11:88:f5:26:df:c0:e0:3a:25:
c7:8c:7d:c8:67:97:e6:88:17:2f:60:45:df:ce:a1:
5e:29:a4:8c:a7:07:fc:cf:8f:e8:e4:f9:fa:97:36:
3a:64:e1:f8:bf:4c:eb:f7:d1:ce:8b:75:d4:fc:a5:
d7:10:a2:fc:b6:27:f1:f0:af:d2:99:bb:89:e0:53:
bd:c0:14:2b:1d:05:70:98:7e:14:94:da:0a:d7:67:
f5:4d:16:84:6b:7b:6c:c6:80:79:4b:35:f5:54:1c:
3f:44:84:6f:84:22:9b:9c:f6:16:03:73:17:2e:4a:
4c:fc:98:cb:b6:09:f2:31:4c:c1:fe:8c:6a:a3:95:
17:ba:c3:92:68:c8:c6:b8:4d:e8:a2:19:60:d6:f3:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:68:C2:DA:69:25:0E:DE:B8:40:31:64:90:A6:52:98:21:A2:F3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a080::/48
Signature Algorithm: sha256WithRSAEncryption
b1:90:0d:5e:80:c5:36:7c:fd:b4:a6:1d:8d:c4:39:fb:95:15:
25:ea:62:0c:27:e7:87:7c:5e:32:33:35:59:4a:60:a3:2e:96:
b2:08:0c:7c:32:e7:7b:15:2f:7a:e4:73:31:3d:c9:b6:37:c2:
67:45:9a:90:de:a7:c0:f8:16:48:85:94:39:f2:29:2f:8e:0a:
65:43:e9:9b:7e:a4:21:f4:95:35:c1:da:fa:80:d8:b6:54:4a:
58:db:ba:42:fb:b9:5b:24:c3:c7:77:fc:1d:9f:82:1f:dd:23:
c5:38:56:4f:a0:87:3a:52:c1:57:28:50:e8:8a:6a:1b:e9:76:
20:28:94:db:c7:11:3f:da:fa:af:64:b5:66:bd:70:3d:2e:8b:
4b:45:20:f6:a8:b1:f8:c5:d7:c9:86:e4:ce:15:85:ed:91:f1:
a7:51:17:78:8b:bd:7e:54:4e:bd:22:bc:80:00:8c:6d:3b:a0:
7f:cc:f0:08:5e:61:65:97:17:72:fc:ef:72:4a:9f:01:aa:70:
e5:9f:06:f6:c4:5e:47:93:5f:7c:26:68:bb:31:13:f8:6b:bf:
0f:bf:03:59:14:d5:84:7e:a4:01:fe:6f:42:31:08:59:35:28:
28:fd:e1:6f:e7:2a:ac:c5:6c:eb:87:f9:5f:7a:23:fc:de:99:
f1:19:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:07 2026 by rpki-client