Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa
File: af189eff-34de-4652-a029-d682c90d1fc5.roa (raw, json)
Hash identifier: nYR1zW1Q6+kbfRcxqVuHK26DrugsatlXuOt8qz23NUc=
Subject key identifier: 4B:A6:1A:52:CF:EE:2B:B2:4D:0E:1C:F8:56:8F:05:41:A4:56:E3:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5323E901A27AF5063F603DBA5446E2C45D4C7970
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa
Signing time: Fri 07 Aug 2026 05:40:09 +0000
ROA not before: Fri 07 Aug 2026 05:40:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:23:e9:01:a2:7a:f5:06:3f:60:3d:ba:54:46:e2:c4:5d:4c:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7eb94b6aaea8c0496e9b2e1ddf45723b4b9df66d601efc807b66503b232c78dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:e3:e0:d6:94:e7:83:02:9f:40:03:e9:f1:
46:79:36:0f:06:bc:c7:9b:a5:bb:6a:bd:4a:c1:1c:
00:50:d4:c8:c6:d1:3a:ff:6b:2b:99:6f:b0:38:67:
2c:e6:38:ae:e1:8b:e9:b9:4f:02:3d:b9:d1:45:5f:
2c:ec:25:5c:d3:6c:0a:ed:1b:7c:a5:13:38:ad:18:
4f:1b:dd:a1:c6:f7:00:13:fb:5d:06:56:c5:03:c6:
02:87:b2:3a:67:6e:d8:2f:6f:60:75:f0:ef:c2:a0:
6d:92:ec:9a:eb:ca:a4:51:0f:e3:b2:3d:2b:ab:af:
71:94:96:a8:93:3e:89:6f:f3:18:3d:eb:eb:cf:fe:
ac:80:81:8c:26:0f:35:df:e9:19:c5:0b:b3:a5:fe:
1d:63:d4:0a:b9:59:6f:09:ef:81:1c:ec:2c:14:6b:
12:bc:d1:9d:a7:d6:4e:29:07:3d:af:9a:89:d3:bb:
1c:60:6b:4b:07:5f:63:c9:7b:05:92:cc:92:70:65:
8d:ab:37:57:23:88:31:a7:25:4d:2e:f7:24:ad:40:
c7:46:6d:20:ea:8e:d6:b8:56:56:ff:f4:b7:4a:a4:
19:b5:1d:94:ab:32:c3:ac:e2:6b:37:90:da:66:4c:
3d:fc:fc:3f:f2:87:e3:82:11:8a:6f:8a:ad:70:32:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:1A:52:CF:EE:2B:B2:4D:0E:1C:F8:56:8F:05:41:A4:56:E3:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
c9:cd:9f:0c:f0:0d:5e:57:0d:5e:37:1f:89:42:f4:cb:39:ec:
1d:d7:99:2d:86:40:52:a3:64:de:0d:5e:f9:69:64:e8:c1:b1:
34:44:60:0a:6d:db:53:fd:f2:66:39:06:09:e9:7c:e8:00:4b:
f9:b3:c8:c7:62:98:92:f3:65:2b:6c:c2:39:ce:e2:3b:e7:26:
a4:81:bf:41:f1:61:4f:5a:c0:34:18:1a:ac:8f:be:5f:0a:ed:
b3:2f:1d:35:57:55:db:ed:58:c5:be:3b:62:7b:40:e7:d3:54:
94:11:2b:48:cd:8a:36:16:3b:90:33:67:cc:db:7a:ef:87:ad:
56:9f:b1:88:b2:f3:d0:ed:da:2c:d0:29:e4:d2:79:4b:12:5d:
63:ff:17:69:7b:95:0b:29:54:af:ea:f4:07:e4:7f:65:01:97:
97:7c:52:ce:12:c3:fc:6c:dc:05:80:19:0e:63:79:3a:b8:ed:
e0:e8:19:2f:9b:7b:12:ad:02:5d:b8:c4:1c:4a:e0:a6:86:22:
ab:9a:fc:d5:3e:3b:e8:86:a3:1a:c8:b0:b2:6b:71:b0:01:d4:
1f:ee:51:cf:97:b4:59:7d:c1:93:a7:78:36:f7:8f:7f:62:59:
e8:0c:c7:d9:0e:7e:af:4c:83:d1:4f:25:f1:54:c3:38:32:5a:
48:0c:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:25 2026 by rpki-client