Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
File: acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa (raw, json)
Hash identifier: fXbrgwKsMow9NlAhKCzwLC4gsiHPKm48YrVt/itO+Vs=
Subject key identifier: 39:04:66:BD:53:52:84:F7:92:63:02:E4:E3:B3:76:A3:1C:CA:0F:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D3FFA342FCC8C6138E955D89C262DB7885D8E84
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
Signing time: Fri 07 Aug 2026 05:10:27 +0000
ROA not before: Fri 07 Aug 2026 05:10:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3f:fa:34:2f:cc:8c:61:38:e9:55:d8:9c:26:2d:b7:88:5d:8e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0a4172c4383ee18f70f26946a913beb568298710fbfb4c6877a800b43b0367c4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:ec:2b:56:bb:a9:81:ed:67:ba:db:a9:af:
b1:7f:94:6e:8e:4c:9b:91:17:d2:4a:cd:9b:a6:b1:
e9:a4:84:6f:ff:70:3b:88:9c:96:17:c7:71:d4:2c:
18:fd:3d:4a:62:6b:46:07:91:da:12:e1:26:27:26:
41:0e:a7:55:30:8e:f5:ca:80:92:10:72:98:ed:a9:
4f:b0:c0:33:0c:be:be:63:a6:a9:1b:a2:cc:58:88:
ec:bb:cc:03:1f:8c:39:c2:0f:90:99:ad:08:5d:2f:
25:0a:96:5f:72:18:bf:a2:6c:bd:e7:4b:ba:cc:55:
0d:f9:fb:af:f2:3c:c5:fe:c2:40:50:72:f1:18:23:
55:f1:4a:9e:b6:7e:8e:ba:ce:aa:e7:c4:1e:8a:28:
b6:b0:5d:76:11:0c:fa:d6:18:e2:80:b6:5f:50:f3:
29:1f:c0:f4:db:28:f0:32:22:2a:9b:5f:46:df:5c:
b4:fe:dc:2d:ad:73:27:6d:92:61:59:81:85:94:d5:
90:86:f6:1b:e5:c9:a7:7e:b9:ca:aa:f1:9c:27:22:
e0:4f:80:3a:98:f6:fe:08:42:09:92:69:4a:61:79:
71:8c:d6:45:79:08:29:34:9d:9f:97:28:b7:fc:8d:
e2:c9:ec:d2:4b:ee:63:39:14:89:00:97:bb:9f:a5:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:66:BD:53:52:84:F7:92:63:02:E4:E3:B3:76:A3:1C:CA:0F:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:6040::/48
Signature Algorithm: sha256WithRSAEncryption
18:c0:b5:7a:1c:f1:b3:fb:25:86:b1:36:80:7f:a7:93:27:a6:
34:51:f8:92:d9:a1:f9:bf:13:54:df:b4:70:29:27:91:16:3f:
03:26:31:46:b4:10:b5:8e:6b:67:25:0b:b1:8b:bb:ec:a8:66:
6f:e6:4c:b5:77:1c:82:31:fb:d4:20:58:66:f0:dd:a8:fd:9b:
08:3e:e4:ad:65:ba:ee:b9:8a:bb:13:96:60:5b:fe:4a:2b:c8:
da:d9:ed:65:79:d1:e4:c1:ad:34:0a:65:57:47:ca:da:42:52:
41:1e:8b:c2:01:1b:87:32:f0:3c:40:12:e2:5f:0d:36:1d:99:
c6:22:a7:7d:9f:2b:47:e8:c3:8e:e4:f9:a0:49:b3:2e:77:ad:
17:64:6b:2e:34:85:1f:ac:e0:1e:d6:88:53:bd:57:b0:4b:d7:
ea:82:d1:09:53:67:ea:21:c0:e9:3f:a5:13:56:be:61:fa:51:
1f:0f:31:f0:4c:29:ee:60:20:c7:cd:cb:df:72:ff:2e:07:6b:
6c:c4:c6:d7:98:40:e5:18:9c:e2:5c:c0:c1:c4:43:fb:67:45:
c7:4c:0c:4c:c9:22:97:b1:a7:69:36:b8:34:9d:07:ef:54:c0:
8c:8e:c1:c0:20:a9:be:59:0b:0e:81:eb:be:00:1f:79:ad:6c:
ff:37:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:42 2026 by rpki-client