Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/baae469d-d799-4ae6-8640-523ba1400acc.roa
File: baae469d-d799-4ae6-8640-523ba1400acc.roa (raw, json)
Hash identifier: EKmvFnrpUxck+BQWfw4IL+5PJEzVTHw4GurzAD5Dq38=
Subject key identifier: BE:8E:3A:E5:4B:D0:7E:6E:E2:18:EF:96:16:66:E7:62:E0:C0:D1:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12AA4BE576F3058A51F059225167DE54CDF14C29
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/baae469d-d799-4ae6-8640-523ba1400acc.roa
Signing time: Wed 09 Sep 2026 16:15:20 +0000
ROA not before: Wed 09 Sep 2026 16:15:20 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:aa:4b:e5:76:f3:05:8a:51:f0:59:22:51:67:de:54:cd:f1:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:20 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=2335808d8bba0867d52fe8916bf018fb56b98f12c9eec768568da0b5811b5d88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:07:fd:eb:8a:72:56:f7:b1:05:0f:bd:0d:
26:c1:22:49:79:c8:2b:b2:4d:4a:71:71:73:b1:44:
c6:7c:f6:b1:ca:8e:d6:cd:17:b0:c1:29:f3:ba:48:
03:b5:9f:04:25:34:dc:02:ac:f0:d7:08:ae:d5:16:
40:5e:13:2a:38:5a:ca:ba:12:9f:54:f5:24:ab:4c:
a5:9f:66:28:47:09:43:ad:2a:2a:49:1a:d7:ea:07:
cb:48:e2:6d:eb:1e:50:c3:d0:f5:d6:65:c0:aa:ec:
fe:08:7f:c8:e9:f8:99:79:ce:34:80:1b:70:90:b6:
98:50:31:69:df:be:08:3a:2e:70:b8:c6:93:ab:98:
bd:51:a0:58:db:87:6e:71:b4:b5:aa:69:08:f9:1d:
f2:77:06:f9:83:f8:34:3e:1f:75:01:d0:79:71:a4:
73:43:fa:8e:68:17:10:46:9b:96:dd:90:5c:dc:6d:
f4:20:79:10:24:fa:64:cd:04:87:c1:bc:46:0e:c5:
de:d1:64:2e:8e:76:a4:a0:75:7a:74:3a:71:61:08:
13:f6:a5:7c:83:4b:dc:6c:a1:ec:bf:96:32:49:d9:
f3:ad:78:f2:a0:e7:42:9f:af:02:13:96:39:55:c5:
67:44:ea:5c:ba:ca:6e:a6:3b:01:05:84:d4:4f:9d:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:3A:E5:4B:D0:7E:6E:E2:18:EF:96:16:66:E7:62:E0:C0:D1:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/baae469d-d799-4ae6-8640-523ba1400acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4800::/40
Signature Algorithm: sha256WithRSAEncryption
7d:cc:48:ee:fe:da:25:b4:d9:63:96:bb:d1:8e:36:21:1b:c9:
98:88:7d:30:a4:98:1f:54:91:d3:e6:c9:1f:71:1c:40:c6:78:
8d:ea:4c:de:07:c2:ef:ea:b0:8d:7a:0f:59:1f:a9:cd:45:78:
f1:e4:42:a1:1c:5f:8e:17:71:98:ff:48:f8:bc:8b:7b:cc:5e:
ca:0a:98:e7:2f:17:51:6d:a5:4e:49:79:8a:34:7c:c4:79:72:
f7:cb:b0:32:c5:d4:61:b5:81:6f:7a:2e:c3:dc:02:0e:d2:db:
6d:1a:51:02:69:49:3a:b2:f5:22:4d:6c:a7:a5:cf:31:11:c0:
fc:80:e3:e2:95:28:ef:40:4a:f4:db:0f:3f:42:13:59:7d:50:
08:c1:aa:e0:31:e8:f6:15:44:4a:ad:07:9c:7f:b4:e7:e7:64:
82:77:1f:cd:a1:83:2a:8d:85:cc:48:10:39:8a:9c:e2:ac:da:
a6:d9:48:59:f6:6c:e7:aa:52:32:38:0d:eb:9d:33:01:da:33:
9d:26:49:10:a5:1b:a2:59:62:2f:ec:01:ef:c9:9e:5a:32:f3:
71:3c:ae:cd:4c:aa:de:c7:5b:90:85:62:70:6e:14:17:69:56:
ac:83:81:d7:d2:b6:dd:43:16:b0:47:be:82:a0:6b:23:d9:c2:
92:c1:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:44 2026 by rpki-client