Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
File: aecc6242-1099-4fb7-92f7-993a2622e087.roa (raw, json)
Hash identifier: VdihjfjIdh0rmrpGefGuyiEi9v1ZWjxJwizcvAxq8IU=
Subject key identifier: 60:33:7B:24:FC:2A:7C:E9:C5:9A:23:E7:7D:EF:0F:CC:1A:AC:48:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53F1C2D3C9C157C737BE825FCF85CFE4CCF80960
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
Signing time: Mon 10 Aug 2026 01:00:12 +0000
ROA not before: Mon 10 Aug 2026 01:00:12 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f1:c2:d3:c9:c1:57:c7:37:be:82:5f:cf:85:cf:e4:cc:f8:09:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:12 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=46c99cf427f0df65de5e445506328d3d6daada684b46ef535a1347c039920656, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:4b:94:36:e8:31:c0:8a:36:30:31:17:2f:
40:50:13:cc:4a:20:e4:91:4b:c6:0c:10:0c:cb:67:
03:9d:91:66:99:2b:f7:14:b9:04:90:73:d6:ac:af:
39:ea:3d:03:da:58:5f:fc:ec:0d:a3:c0:0c:59:56:
ee:f7:58:d8:c6:80:ae:45:e2:21:06:b6:d1:d7:9a:
58:45:e2:52:35:fa:5c:21:30:0d:15:18:0c:fc:09:
0a:d0:03:48:0e:aa:12:10:c7:f3:f1:77:cf:ef:bf:
08:f2:01:5a:bc:cc:48:14:36:7a:36:73:0f:5b:9e:
de:43:e6:7a:ef:f7:95:ba:ac:bd:3d:e7:92:be:07:
4d:19:0a:3b:19:b4:dc:a6:51:cd:b7:0c:2b:c7:37:
c3:40:b2:d0:29:f8:84:9a:87:c0:fd:60:31:90:b7:
25:22:e4:92:8f:59:06:da:c8:91:47:23:81:77:f5:
83:98:ee:4b:c7:2a:41:da:03:16:2e:8b:bf:e7:5c:
39:f7:a4:63:0f:ff:83:8b:83:af:06:28:be:a1:96:
ff:a2:a4:e5:d5:56:c2:41:2a:be:e4:9a:2a:58:e7:
4d:24:0f:6f:b4:19:aa:3c:7e:54:e8:f9:45:06:dd:
47:15:d3:2b:07:f0:be:0f:43:a4:e0:6b:9f:c7:14:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:7B:24:FC:2A:7C:E9:C5:9A:23:E7:7D:EF:0F:CC:1A:AC:48:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:39:0a:12:09:36:40:e8:a8:41:c6:41:5e:59:0f:df:f8:54:
43:c1:f2:4d:55:c4:16:3f:94:c8:96:cf:f6:2a:45:a4:6b:f1:
d8:c8:73:ec:52:8e:f9:f2:2e:57:60:2f:e1:5f:db:27:87:d8:
8b:f8:0d:0c:00:9c:b4:02:53:83:3e:dd:27:f7:02:ed:b5:0e:
d8:39:a5:38:eb:87:37:0f:f3:67:f8:97:3e:75:b0:61:ef:d9:
9a:a4:06:57:f6:fc:af:3b:70:e9:44:db:29:34:86:09:bf:ff:
03:a7:19:76:f9:e2:d8:16:7d:97:9f:f4:df:a4:18:70:00:ee:
c1:3b:72:b2:ae:5a:0a:e3:dc:75:e2:1b:47:f5:0f:65:a3:16:
6a:ce:a2:39:85:7f:f9:86:2c:33:4f:41:a1:84:33:f4:69:9d:
be:c7:d6:81:6a:d7:1f:15:5f:ca:82:6b:1c:4b:61:b5:1b:63:
7a:61:8e:9a:ee:6d:d9:6a:05:11:b4:cb:cf:ea:0a:70:35:bd:
e0:36:31:57:9f:22:ce:39:70:67:1e:64:c8:61:7d:68:f2:d0:
3f:fc:0a:ba:f9:e6:72:44:ba:55:0f:b2:04:35:0c:92:38:51:
be:e9:fb:ee:e3:c7:b7:da:6b:7b:78:57:e6:82:03:1e:b1:92:
18:37:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:32 2026 by rpki-client