Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b372f24e-bac5-49dc-a087-d851b1fad482.roa
File: b372f24e-bac5-49dc-a087-d851b1fad482.roa (raw, json)
Hash identifier: At8bbTyYYe/IK3AwiFfKd8v/VdrhcwbaMH8ew0xE0PU=
Subject key identifier: C3:BB:F5:C8:64:4A:BC:E2:8D:BE:44:75:CD:9E:4A:49:DA:E1:7E:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08FFB2392DC2B98F37C5A9DBD33C4909F346FDB9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b372f24e-bac5-49dc-a087-d851b1fad482.roa
Signing time: Thu 10 Sep 2026 02:40:41 +0000
ROA not before: Thu 10 Sep 2026 02:40:41 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ff:b2:39:2d:c2:b9:8f:37:c5:a9:db:d3:3c:49:09:f3:46:fd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:41 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=bedb42c1a40997c56778d79f136bd5183cada0e3bb10dc2dffe0a4db4ba86241, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:06:71:2a:13:cf:7e:3f:3d:48:cb:41:5e:
c4:70:3b:52:8d:43:1f:74:34:ce:e4:01:70:22:b1:
49:de:3c:02:80:dd:e6:4e:df:83:f0:f2:30:6a:55:
27:b3:7f:6f:b1:9c:de:03:be:00:02:c9:72:37:82:
b0:8c:a1:ab:66:53:47:1b:bd:35:3d:d3:5e:64:c5:
3e:46:25:bc:ab:5f:b5:25:37:5d:4e:e7:80:be:9f:
19:f9:42:95:68:ba:b8:75:78:7f:eb:55:e6:1f:27:
a5:52:3d:01:43:0b:9c:27:98:7a:6a:89:f5:7a:4b:
0f:7b:1d:ab:ac:2c:5c:5c:77:3b:b2:95:17:e1:27:
be:07:9c:5f:77:ec:c1:db:a1:58:92:f7:c2:92:bc:
8f:ca:a2:9d:63:00:9b:ce:25:93:d8:2d:fe:2b:59:
67:ea:58:d8:20:c4:bf:bf:3c:ca:8a:00:ca:3f:5b:
1e:69:d6:8f:4a:ca:46:03:56:d8:a5:f3:2a:55:bb:
0b:b2:89:ca:9c:76:f8:c9:6e:2e:a6:97:cb:66:eb:
a2:99:b5:21:13:0c:21:07:c4:75:c1:2e:ea:b6:63:
e7:84:f8:4f:94:ba:f6:30:47:93:a8:e4:31:2a:fe:
33:d2:4c:49:52:bb:f0:e5:38:07:b8:2b:73:61:dd:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:F5:C8:64:4A:BC:E2:8D:BE:44:75:CD:9E:4A:49:DA:E1:7E:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b372f24e-bac5-49dc-a087-d851b1fad482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
03:f0:db:09:be:db:67:5f:56:59:f8:5d:25:10:0c:8f:52:b4:
84:2c:ef:a5:f9:2e:24:2b:8f:94:2f:b0:72:8d:d9:8c:8e:e3:
76:d6:e5:65:f0:c2:8c:f4:86:45:e5:bf:54:63:16:b7:02:c3:
be:1c:14:a2:44:e1:c5:d7:be:87:7f:85:cc:27:0e:c3:e4:3a:
8c:68:e6:52:92:a9:d6:d8:56:b2:f0:4a:00:63:a0:f1:06:cd:
83:91:ef:d7:06:a1:01:ac:14:45:b1:f7:a6:8c:2d:ae:c1:35:
94:5d:92:12:4a:2d:91:e3:d5:e2:da:53:c0:da:2b:02:85:df:
36:52:ab:ee:b0:40:a5:48:49:4d:42:89:45:fe:e9:0c:1d:76:
38:4c:5e:41:88:b7:af:5e:51:45:cd:31:5f:13:b2:4d:d3:e0:
97:13:d6:8c:2a:2b:9c:df:94:8e:27:9d:67:57:20:52:97:a4:
fb:a1:4f:b9:c2:58:82:f1:37:e2:22:2b:3b:df:da:ff:6e:57:
49:1a:24:8e:6e:f3:c1:f2:a9:06:9a:3a:71:39:a9:03:f1:76:
60:cc:ac:d5:1c:7c:b1:85:ae:4f:fb:e5:46:b9:7c:d4:49:fe:
4f:32:40:f9:a5:94:b9:84:b8:27:90:93:ed:af:b4:60:d7:7c:
f4:3a:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:10 2026 by rpki-client