Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9f26696-5522-477d-b8bf-72de7350b09a.roa
File: b9f26696-5522-477d-b8bf-72de7350b09a.roa (raw, json)
Hash identifier: U+BfAg9Gpn1MrOWBLhQov8r03ALiLMLZWrcOAlNJmtQ=
Subject key identifier: C0:32:E1:B9:F1:6F:05:78:35:BE:94:DE:77:7F:C5:2F:8A:96:A8:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A78A78F01C4E67A8B524768E51756E125CEDA32
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9f26696-5522-477d-b8bf-72de7350b09a.roa
Signing time: Fri 07 Aug 2026 04:41:10 +0000
ROA not before: Fri 07 Aug 2026 04:41:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:78:a7:8f:01:c4:e6:7a:8b:52:47:68:e5:17:56:e1:25:ce:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ff2b0cb8be2dde0c7a62e02beb2eefcb00ea95263ecd4de0206ac64392dece74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:f3:16:bb:a2:8c:b8:45:55:d7:b8:bd:04:
50:fd:0f:2e:31:5a:56:bb:d3:63:d3:b3:f3:58:3f:
91:73:cb:db:63:ab:79:ad:19:25:15:13:74:6d:99:
33:1d:26:0a:ef:89:ac:8a:16:a7:78:10:b3:b0:ec:
80:81:9b:b8:5e:80:bc:92:87:45:29:fb:28:17:01:
c1:79:a8:ef:cf:4a:4c:04:90:b5:4b:8c:ed:c3:bd:
6a:ee:ed:07:cd:b9:aa:fe:5b:86:86:9f:2a:31:f7:
fa:b2:99:39:e1:85:ed:93:90:d1:61:04:d1:b1:0a:
c8:d9:13:67:84:15:c6:63:24:68:2c:5d:ca:88:d8:
20:ab:91:2f:52:81:d5:fb:8a:63:02:f4:3e:5d:95:
37:6b:cc:cf:46:ef:88:4c:f9:5b:27:ee:26:46:fb:
29:96:e7:17:36:d0:99:c5:ac:83:79:d4:17:e7:d0:
c6:78:04:a7:7e:57:ee:43:6a:1b:ee:3f:39:a1:a2:
5b:82:fe:ef:d3:25:42:01:60:94:2d:36:f7:57:97:
bc:ec:49:d8:6f:ac:70:35:c4:2b:9c:9b:7c:14:d1:
ae:28:89:5e:23:1b:0d:fa:0a:e8:60:51:fb:84:67:
4c:a7:b3:9a:bd:7b:7f:4e:45:92:3b:09:49:89:e7:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:E1:B9:F1:6F:05:78:35:BE:94:DE:77:7F:C5:2F:8A:96:A8:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9f26696-5522-477d-b8bf-72de7350b09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5000::/40
Signature Algorithm: sha256WithRSAEncryption
85:e1:53:71:7f:a6:6d:61:ad:0c:d6:4a:8b:71:6c:3e:ac:9e:
38:de:b4:3a:d2:ad:ad:c3:08:2b:5c:d1:d6:09:ba:c7:be:bf:
0b:45:2e:91:a6:4a:ce:07:b5:49:d9:1e:29:79:1c:1a:18:d6:
7d:b9:ea:cd:22:14:f2:cb:56:19:60:a5:4e:35:c9:ab:0b:06:
2d:01:e4:9d:a9:db:53:99:a6:4c:64:ad:28:47:7f:0a:83:fa:
38:46:68:b0:3f:e8:ee:a2:a4:ee:17:ee:24:59:52:cd:01:a3:
0d:3b:5e:7f:69:48:39:61:ba:fd:48:4a:5a:25:31:56:6e:03:
07:1e:39:0b:85:89:92:38:c6:d7:f0:cc:68:72:0d:9c:8a:a8:
07:12:5a:dd:44:ff:e6:e1:6f:1f:c0:d2:f5:c9:be:51:4c:cc:
67:57:05:df:3b:ca:89:6b:30:3a:ca:29:d1:a2:16:d8:1f:5e:
02:1f:ca:ed:2e:fb:22:17:51:52:12:23:39:3e:e0:79:09:f1:
40:c1:bc:ae:c9:67:ab:ae:b5:77:a3:d6:fb:8e:e8:27:e2:b9:
c7:27:a4:9c:f6:8c:df:21:af:7f:86:ae:eb:14:1f:14:98:6e:
cd:09:a1:ed:67:a5:a3:4b:8c:23:d0:6c:77:48:f9:25:b5:6b:
d0:a5:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:20 2026 by rpki-client