Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b15c88f6-f6b8-4410-9b57-cf574ac6464f.roa
File: b15c88f6-f6b8-4410-9b57-cf574ac6464f.roa (raw, json)
Hash identifier: pGPjI0JnYZuShR03Bpd6+eL9Tfh3Ijvo3REqoMwKjHY=
Subject key identifier: 66:52:5A:AF:83:F8:FB:95:27:59:2F:CF:3E:50:F7:56:9B:E7:1F:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F3FA322DC4E3E829F34BAE1AC8D8BC403D73706
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b15c88f6-f6b8-4410-9b57-cf574ac6464f.roa
Signing time: Wed 09 Sep 2026 16:14:09 +0000
ROA not before: Wed 09 Sep 2026 16:14:09 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3f:a3:22:dc:4e:3e:82:9f:34:ba:e1:ac:8d:8b:c4:03:d7:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:09 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=ffffa4ebd00dc5a91ef4e55a13c936ec27f7d667fabbd934478a1ddaa0e4e4dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:43:86:08:9f:f3:27:66:36:a8:5c:13:79:
d5:48:03:25:24:96:d0:3e:2b:63:81:25:e1:92:57:
92:35:c3:35:da:c2:1b:a0:e7:74:63:49:28:44:33:
35:3c:35:7b:82:eb:52:78:38:f6:75:ac:18:f1:cf:
21:dd:2b:c0:89:d9:a2:cb:6e:0c:b5:b0:e4:d1:18:
1d:c2:f3:2e:91:fb:78:7a:08:32:05:bb:57:52:d3:
cb:af:d8:6b:cf:14:5b:d8:82:3c:cd:61:d6:4f:60:
9c:b7:fe:57:a6:11:42:1f:0e:eb:eb:94:00:d2:75:
47:9b:d5:fc:56:5f:0d:f2:0d:dc:7b:28:04:20:56:
a7:4c:2f:32:39:15:e6:79:66:99:2d:08:aa:8b:f2:
e2:74:27:5f:9b:1a:b8:2b:1f:01:5f:6f:84:1c:52:
e7:28:2f:5f:ce:9a:43:63:66:23:48:38:c1:36:b9:
a9:b2:d8:96:63:f4:58:74:70:b7:66:4f:25:0f:d6:
8e:2e:03:98:61:9e:c5:60:a7:94:29:32:4e:af:b5:
93:35:e7:99:0e:4c:6c:04:a5:10:42:5d:88:32:ee:
3b:d5:bb:82:d0:ba:c8:2d:82:53:ab:e6:8f:7c:13:
51:0c:26:e4:7d:ed:d4:f9:b1:9a:3c:60:5e:1b:21:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:5A:AF:83:F8:FB:95:27:59:2F:CF:3E:50:F7:56:9B:E7:1F:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b15c88f6-f6b8-4410-9b57-cf574ac6464f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8800::/40
Signature Algorithm: sha256WithRSAEncryption
bb:0b:d2:06:37:57:8f:79:3d:04:e9:7d:6f:70:52:5f:aa:cc:
ca:c2:61:1d:b0:0b:ac:76:36:9b:1f:ee:1f:e5:20:12:0b:62:
24:1f:f9:51:d4:b0:ec:38:dd:ef:f9:75:4e:b9:36:9d:5b:f2:
d5:a3:af:31:f9:46:a5:f1:b5:8d:17:c2:89:83:7b:08:8b:fa:
1a:d4:1b:5b:9c:17:e3:ef:f3:4b:00:2f:2f:8c:93:5a:1a:4f:
5a:f3:d6:c7:04:d7:48:97:c8:0e:e0:8e:02:7b:a7:01:cc:a7:
34:3f:34:a2:35:26:c2:6f:a2:9c:14:c7:e0:d7:33:23:68:6b:
59:42:3d:c5:47:e9:f3:e5:46:1f:7d:46:e7:fc:e5:95:27:bb:
fd:a2:2a:94:27:bc:72:39:e4:f5:3f:e4:8c:ab:fd:5f:d6:3a:
75:d3:cb:76:6e:e7:28:b2:27:74:49:21:64:33:1b:d2:14:4f:
67:91:67:de:10:b0:2c:c4:4e:bc:39:e6:b9:19:06:33:fb:c5:
61:40:7c:d5:93:8d:0a:8b:0b:e0:18:ab:16:6a:4f:90:ad:6c:
bc:dd:53:58:3a:04:cc:88:2e:ae:0b:24:cc:8c:2d:3b:ba:e2:
65:a4:36:70:c5:9a:58:c8:4e:1d:6e:d7:5d:49:63:12:46:3c:
04:65:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:27 2026 by rpki-client