Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa
File: b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa (raw, json)
Hash identifier: ZZQQVR9cqcjrkXPqNgqLmMLx/eMQOazNyCc+NlSAQ34=
Subject key identifier: CE:85:A2:9F:D3:32:91:38:D5:FC:80:0B:51:AE:04:91:3D:30:9F:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C239790BDE721192EBD8C1E5FC0B31165E859A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa
Signing time: Fri 07 Aug 2026 05:10:24 +0000
ROA not before: Fri 07 Aug 2026 05:10:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:23:97:90:bd:e7:21:19:2e:bd:8c:1e:5f:c0:b3:11:65:e8:59:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9be3877b65484479bbc00c8d530431222c3b5cdc8ca20d91a86caad01f6fd393, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:21:34:07:11:ee:26:e8:ff:ae:4c:f2:a2:
30:0c:4d:cb:af:50:0d:db:64:2b:0d:01:a4:3a:c5:
ac:be:1c:cc:2b:04:44:68:b0:6e:de:dc:47:96:14:
6d:ce:99:10:07:f6:ad:9b:00:54:e6:b3:84:68:2f:
88:3a:79:24:9e:3b:97:aa:e2:5e:67:d5:71:f2:38:
c0:e1:59:d6:e0:c0:78:69:0b:49:2a:11:ed:42:1d:
70:24:bf:54:78:24:26:eb:25:c2:3c:de:a8:c6:4e:
4f:59:b0:b9:2c:9d:26:5b:5f:95:2c:48:49:2d:a7:
ba:30:75:cb:94:60:18:ca:c3:a6:22:74:b9:91:26:
e5:80:9b:2f:12:8b:44:e0:86:a1:14:e6:e4:15:31:
ae:4e:85:c3:47:59:4d:be:69:2b:80:79:d2:6b:67:
5f:a7:f1:1f:9e:bf:1c:b0:96:4f:ed:5a:44:81:7d:
80:80:7c:ee:c3:d9:af:c6:89:7f:c1:dc:8a:6a:86:
e8:f9:e0:15:81:a2:06:24:56:c2:dc:18:5f:7d:c5:
44:cb:b9:a2:b1:eb:6b:6e:bc:20:12:d0:4c:9a:2a:
34:f4:89:8e:c9:7d:9c:b8:47:a2:36:8f:59:7f:b4:
8a:d0:82:f9:ca:f4:6d:8c:b9:3c:32:2e:89:2f:89:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:85:A2:9F:D3:32:91:38:D5:FC:80:0B:51:AE:04:91:3D:30:9F:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b:800::/37
Signature Algorithm: sha256WithRSAEncryption
58:25:72:b5:00:db:bb:70:14:4a:8a:a2:be:a6:4f:c8:8f:92:
2d:dd:09:fa:22:bc:da:99:03:b5:4d:06:e2:31:fd:b9:8e:84:
81:20:15:86:c7:ac:45:d8:94:82:37:82:c4:45:b7:bc:30:75:
dd:1f:d7:2e:2d:e5:2d:6e:57:1b:b8:31:9e:7a:1d:e5:de:7e:
5c:01:49:1c:2a:d2:4a:fd:ae:c4:ff:78:07:e9:fa:4f:fa:82:
cd:5a:3a:85:d6:01:d5:5a:35:d6:f5:c3:29:4c:24:1f:f2:6c:
5c:67:9a:43:8d:25:f9:4a:c2:92:b1:69:50:9c:80:03:5b:57:
60:2b:2a:af:56:c1:8c:5c:76:2f:81:95:3b:b6:bb:cd:e5:6f:
95:4f:77:80:15:a7:19:2e:b5:9f:d1:93:9a:0b:04:1e:1b:05:
1b:49:db:a5:07:97:22:9b:65:8e:be:2e:c2:14:c4:18:90:d0:
82:d9:a0:5b:5c:08:2c:52:f1:fd:35:12:56:20:7d:10:91:64:
e7:a9:07:83:07:39:21:ae:7e:4a:f8:62:b7:e0:7a:99:dd:3c:
94:f7:7f:1c:60:54:2e:a5:63:dd:c1:98:ba:18:9f:7a:da:fe:
4b:0b:da:d8:c7:d8:b9:84:71:80:0e:46:e1:55:68:a1:4d:c0:
0b:42:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:34 2026 by rpki-client