Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/afb202d1-c112-45d2-99a9-845cff5946ce.roa
File: afb202d1-c112-45d2-99a9-845cff5946ce.roa (raw, json)
Hash identifier: vupYIcKke3dvBubxj0lrPr9NS0xP3lslY4a0Na83mks=
Subject key identifier: 08:FD:3C:CB:90:06:1A:F8:BD:FD:34:D2:D9:4F:C7:FF:EC:AB:9F:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4ED4CA01E2F40ACB06A9F96F78C129ECC5DF43DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/afb202d1-c112-45d2-99a9-845cff5946ce.roa
Signing time: Mon 10 Aug 2026 00:50:30 +0000
ROA not before: Mon 10 Aug 2026 00:50:30 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d4:ca:01:e2:f4:0a:cb:06:a9:f9:6f:78:c1:29:ec:c5:df:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:30 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=e56edd63750080137fce3dac103c70c087fc38a712627c8672ec1357f69be943, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:9f:4e:ea:64:10:c4:ad:91:a6:74:a5:a6:
d8:69:2a:4f:72:85:61:c1:bf:ac:9d:29:c1:71:c7:
54:29:d5:56:23:be:eb:b9:a1:d7:8e:0d:f5:96:f1:
31:e3:21:14:eb:68:02:12:56:c4:d3:66:21:b3:8e:
dd:28:58:a1:f0:08:bd:70:ee:f5:fc:57:ec:b6:18:
ff:11:1f:93:8c:fd:3a:1e:6c:cc:0d:e1:64:11:1b:
66:15:cf:08:95:ab:95:d7:98:97:64:69:7d:db:89:
d1:e3:ce:ab:5a:f6:34:6d:6f:b2:c4:b0:90:a4:04:
16:7a:2e:4c:e7:03:30:e7:d6:c9:1b:42:0b:56:9b:
61:77:04:55:06:bf:f6:fb:20:85:46:ac:cd:09:44:
4b:54:c9:35:ef:1a:71:c0:06:e8:54:eb:5d:22:76:
99:d3:59:97:b6:04:26:c3:ec:7f:6d:db:40:7b:53:
a8:ee:fc:7c:19:9e:6d:64:84:50:5f:b0:ac:9f:9e:
f4:e5:46:ff:fd:08:15:75:8b:94:23:a6:67:ea:a3:
aa:38:b4:b2:cc:7d:57:7b:5d:fa:0b:e1:ad:d6:bc:
e5:0a:4c:18:8d:f3:1b:18:07:27:4f:e8:26:81:43:
4e:eb:5e:bc:0f:fa:45:2e:e0:34:5c:98:2c:96:88:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:3C:CB:90:06:1A:F8:BD:FD:34:D2:D9:4F:C7:FF:EC:AB:9F:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/afb202d1-c112-45d2-99a9-845cff5946ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:c020::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ee:ec:bd:35:b4:55:d1:6e:7a:5e:4a:3f:e8:09:fd:eb:8c:
2c:38:98:95:1f:77:55:a3:6b:ed:77:1c:d8:42:77:4f:e0:15:
67:82:ac:62:b6:af:8c:b0:0b:05:49:a1:f8:85:38:76:0a:de:
52:8c:5c:95:10:e7:75:9a:27:50:e4:a8:7a:dc:a5:18:19:4e:
fc:f3:3a:46:42:94:ab:72:e9:e4:0a:37:6f:ac:46:1f:56:97:
25:b9:ca:17:fa:8c:2f:82:76:3a:ea:9a:b6:e4:42:4e:0e:8c:
29:d2:15:d2:1c:53:eb:60:5e:70:fb:75:82:88:78:29:2d:86:
c0:11:63:ae:56:03:7a:77:1f:8a:94:ad:b4:f2:c5:32:a3:be:
18:3b:d7:bb:72:4f:f5:2c:90:dc:63:b4:df:8b:05:2b:57:bb:
e8:43:bd:b2:77:a2:19:ec:51:30:21:04:71:e2:17:2a:1f:33:
aa:f9:73:02:96:8c:3e:1f:8f:aa:a8:47:13:a1:6a:a6:07:5a:
88:fc:de:7b:fa:74:7d:f4:9f:1a:87:99:48:56:bf:28:7f:53:
c9:a4:83:5a:ae:5c:c5:75:99:9a:f8:c2:96:8d:e9:05:74:05:
82:e6:18:0c:f3:de:32:b1:7d:69:37:94:66:3c:de:27:64:3e:
6b:d6:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:14 2026 by rpki-client