Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acbed2c9-a77c-43a4-ba7d-3b3dbcdf2064.roa
File: acbed2c9-a77c-43a4-ba7d-3b3dbcdf2064.roa (raw, json)
Hash identifier: rALjzuhtDtqYXP2IRA25ACLEX+Yw+vlLpjF95DCkcYY=
Subject key identifier: 2B:DA:EE:69:0F:17:45:25:DB:AD:42:77:ED:2C:00:97:78:9D:C7:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7126E926DBFF3345842B4FBF502D53DCDDB55190
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acbed2c9-a77c-43a4-ba7d-3b3dbcdf2064.roa
Signing time: Mon 10 Aug 2026 01:00:31 +0000
ROA not before: Mon 10 Aug 2026 01:00:31 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:26:e9:26:db:ff:33:45:84:2b:4f:bf:50:2d:53:dc:dd:b5:51:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:31 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=c150a3cd1a086a34802701ef73b6a6e8a7d9f079ac12f7c99b36b4c0c8d1cfb3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:02:9b:fc:28:bb:9c:1e:5a:a4:84:cb:ac:
5a:dd:f3:d0:dd:fd:17:7e:66:28:83:5a:8f:a5:3a:
46:aa:06:63:8d:a6:76:0a:65:67:77:3f:7a:cd:b9:
93:8a:7d:a0:8a:8f:2e:c4:98:70:2f:7e:09:ea:ea:
45:ad:0a:c2:0d:13:41:34:7f:2e:a6:87:34:d5:41:
07:65:cd:df:e6:16:94:f1:75:15:30:4d:71:c4:f7:
3b:80:f3:e7:33:e0:06:e3:50:84:6c:75:c6:a8:fe:
e7:e4:d8:84:a3:3a:5e:aa:e7:23:21:4b:0a:bf:d6:
6c:5a:55:24:14:5e:b7:e7:6b:62:8d:79:69:6b:65:
14:bb:39:50:9a:19:28:fc:b5:44:3a:9d:95:7b:01:
95:67:7e:b5:10:1b:7d:11:a0:8f:e0:ee:fa:c2:59:
f6:19:43:af:10:be:69:7b:8e:e8:16:b9:f5:30:e2:
9d:94:1d:1f:fd:ba:66:7c:b5:5e:47:bf:8b:4a:06:
ff:97:44:49:93:c2:3f:23:ad:7d:55:33:d5:35:f4:
08:55:3b:4e:c1:95:3f:26:57:51:bf:6c:f2:2b:23:
36:88:a8:8f:d7:7b:08:d0:1b:46:16:0d:d4:68:0c:
e8:60:4a:c2:8a:5b:56:7a:c5:d2:dc:3c:cf:99:0c:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:EE:69:0F:17:45:25:DB:AD:42:77:ED:2C:00:97:78:9D:C7:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acbed2c9-a77c-43a4-ba7d-3b3dbcdf2064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:9000::/40
Signature Algorithm: sha256WithRSAEncryption
be:f5:a8:3d:63:f5:2d:63:60:39:b0:33:dc:4c:4e:ba:2c:34:
aa:c4:bd:58:71:45:66:1b:58:c8:bc:39:73:2d:a2:71:51:24:
ba:f8:1b:65:e3:e1:3a:fb:89:ba:4c:d8:c8:cb:1c:b7:ee:65:
2a:7c:61:27:45:dd:07:73:41:6d:35:27:8e:15:8e:e6:6a:dd:
98:79:9d:9b:a4:03:35:5f:d9:98:76:2d:97:e3:f9:7d:30:cd:
97:c7:39:ad:f3:c7:c7:2f:32:47:f3:48:59:b8:1a:57:8d:f3:
19:52:d8:91:d7:a6:75:02:27:19:ff:2e:64:8a:e0:70:d4:5d:
3f:62:a0:a6:04:70:e9:e3:73:a4:69:3f:68:4f:c5:ba:08:18:
67:e7:3a:3c:9f:a8:ea:fc:a1:08:52:4b:d2:5c:46:4d:9c:b2:
eb:d5:75:fd:c5:3a:d4:57:d2:c9:de:31:c2:8b:da:8d:34:a9:
97:72:04:9b:76:1d:cb:62:76:3e:c7:20:c2:be:b2:5f:bd:52:
b6:76:19:9e:0b:48:81:28:51:53:df:dc:65:92:72:c7:66:1a:
58:d7:ba:8c:1d:b0:03:7b:1f:e2:d5:4c:64:15:f2:d3:40:2d:
af:66:a5:e5:d3:fc:c7:42:46:bd:e9:1a:54:8d:08:56:7f:1f:
15:62:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:45 2026 by rpki-client