Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa
File: ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa (raw, json)
Hash identifier: BEpxjneLIbfKDoXU9/LvgNYRyNpNzHmqWOCCjwRb3GI=
Subject key identifier: BF:10:3C:3E:D0:72:A9:62:B3:A0:75:C3:EF:BE:AB:A1:6C:3F:AF:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CB49D777952943DF1D6CAD401264E3D1B65F904
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa
Signing time: Thu 10 Sep 2026 02:40:08 +0000
ROA not before: Thu 10 Sep 2026 02:40:08 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b4:9d:77:79:52:94:3d:f1:d6:ca:d4:01:26:4e:3d:1b:65:f9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:08 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=d72f018399c45edb30970e6598143c417b397c58cdfb0785685fac3cab790746, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:9b:57:09:1b:4a:55:29:90:ac:76:0e:07:
2f:59:97:cb:e0:36:b9:c2:70:80:55:24:31:f9:33:
df:f0:3c:0f:76:ad:c6:72:3d:56:be:6b:8d:26:f1:
a7:15:4c:fd:93:7f:42:f7:10:a9:71:06:0d:2a:ab:
36:86:3c:52:56:45:9e:48:dc:fe:41:41:01:7b:a9:
5f:bb:e3:e2:7f:f5:85:d8:51:0f:41:cf:27:9e:17:
b6:7c:0a:65:4a:1a:b1:a9:23:e1:e7:cd:09:09:4f:
c8:bf:84:e1:ff:ce:9e:b5:48:0f:ce:70:43:2d:7d:
21:b4:0b:7b:14:80:c9:22:f8:f1:cc:b6:d5:a2:2a:
7f:0c:ab:36:f0:67:2a:4f:a7:2f:63:85:80:dc:f3:
6c:23:9e:9f:2e:f6:bb:ca:09:6a:d9:d9:2c:77:ce:
08:e0:eb:51:08:22:20:5c:45:de:95:de:0a:7c:2b:
d3:e0:fb:30:cf:2e:77:de:50:9e:e1:f2:8e:ba:7a:
73:a0:dc:86:cd:e9:9a:7e:47:81:7a:e2:47:45:22:
80:74:29:26:d7:0f:52:ce:20:46:5a:b5:69:b9:db:
b9:62:33:3c:2a:1d:a0:68:ba:96:d5:ee:0b:3b:6f:
18:5f:d1:9c:14:8e:40:54:fa:40:c9:92:f6:2e:ab:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:3C:3E:D0:72:A9:62:B3:A0:75:C3:EF:BE:AB:A1:6C:3F:AF:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8040::/48
Signature Algorithm: sha256WithRSAEncryption
4b:eb:25:05:72:1e:45:6d:4a:3e:ac:db:bd:84:58:f6:4f:b6:
ce:84:64:ed:2f:18:4d:67:c9:55:45:a9:90:05:07:cf:a3:75:
f7:ce:0c:a0:4a:54:fd:50:d5:77:9f:22:bd:2d:97:43:0a:53:
d0:86:19:10:7f:b2:88:a9:5e:ed:8a:70:70:99:14:00:df:f1:
7d:b8:08:93:f9:9d:67:8c:1d:80:5d:82:17:ea:d7:74:99:01:
5e:9d:fe:ee:e1:99:15:3e:6c:7f:90:6c:9a:8a:e9:27:03:a5:
9f:6b:84:f8:c8:32:cf:7d:b4:1e:0f:a5:f0:6c:bf:b2:41:70:
dd:0c:1b:2d:2c:2c:a7:de:b5:23:57:9f:a9:e4:3b:4f:d5:17:
25:71:be:22:dd:5c:3e:c2:55:4a:d9:db:3b:e0:c3:c3:4a:1c:
4e:9e:59:15:6d:94:88:28:c0:2d:10:e1:60:d7:df:fc:6c:28:
63:a5:96:49:e1:75:b7:18:0d:ae:4a:7a:14:a1:a9:03:5d:6b:
ef:91:a2:70:52:f3:8f:a4:93:56:d5:cd:9d:c5:5c:ff:e0:78:
1d:0b:fb:ea:a5:c0:52:d1:38:15:29:8e:77:84:b0:79:61:d8:
65:c3:06:ab:a4:a2:53:4f:31:71:88:16:8e:b4:c0:33:59:db:
99:bb:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 23:37:36 2026 by rpki-client