Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbd37df3-fe30-4982-aaa8-fe01af345c15.roa
File: bbd37df3-fe30-4982-aaa8-fe01af345c15.roa (raw, json)
Hash identifier: Af3ywnvIjG9QFhmq7J4W5VYeICKx1Vmnxb+fGLybDdA=
Subject key identifier: 91:98:BA:C0:74:DF:8D:3A:1D:15:53:C5:DB:B5:DA:F2:31:07:1A:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E6AE1CC68837ECBF57C8A0C2F1FD644982C04CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbd37df3-fe30-4982-aaa8-fe01af345c15.roa
Signing time: Wed 09 Sep 2026 16:14:03 +0000
ROA not before: Wed 09 Sep 2026 16:14:03 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d069:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6a:e1:cc:68:83:7e:cb:f5:7c:8a:0c:2f:1f:d6:44:98:2c:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:03 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=f1356be361c1b54fba3b27d705b8190c13a99354cff5c78a887ff6fa5e178a13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:31:a6:5f:46:81:5b:5d:a7:c5:ed:fd:c8:
2c:e8:c9:15:16:a0:3d:0e:a4:c1:35:3a:86:38:9b:
d7:68:f3:7b:94:ee:69:10:f2:15:d0:71:d4:13:e1:
65:e6:43:7f:e6:b3:00:50:4d:9a:c7:b9:17:6d:36:
f0:69:b9:8c:08:ff:75:dc:24:b9:5d:7e:34:6b:0c:
2e:ac:61:85:16:13:da:f3:6a:85:b7:de:ce:7a:a2:
b2:f0:53:39:bd:ce:e4:5d:d6:25:43:54:23:46:39:
ff:3c:ba:bb:11:a4:d7:20:89:c1:21:cf:eb:7f:8e:
50:e1:5d:75:e4:a6:40:07:26:c3:27:d9:ae:7d:ab:
ee:e0:b3:93:b9:69:5b:f0:33:9c:f3:c8:7b:b5:b4:
4b:72:cb:75:e0:db:ec:5a:4e:5d:b9:ef:06:b8:d7:
0f:23:6d:23:24:ec:a5:a6:6c:0c:1a:d3:33:11:3a:
95:96:ee:62:df:f1:9d:f3:47:dc:6b:9c:14:16:6c:
9d:92:08:45:1c:f9:c5:86:66:fe:58:ea:5d:18:5f:
de:49:b3:b8:45:fd:10:5c:85:f6:ce:81:a7:e4:85:
6c:7f:2e:1c:83:a6:a6:8f:e1:23:62:de:da:24:f3:
fc:63:a0:f5:b5:84:1c:9f:d8:3c:38:23:18:ae:6c:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:BA:C0:74:DF:8D:3A:1D:15:53:C5:DB:B5:DA:F2:31:07:1A:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbd37df3-fe30-4982-aaa8-fe01af345c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d069:c000::/40
Signature Algorithm: sha256WithRSAEncryption
15:e9:4d:77:a6:8b:62:7f:b7:11:be:55:83:77:b8:86:cd:56:
9b:ae:28:b1:95:39:5c:45:38:b4:63:47:cb:41:e6:02:4c:d2:
92:54:94:63:09:a2:88:9e:d6:88:87:08:d8:c5:21:28:6a:27:
7b:82:c2:31:6d:d2:6e:72:68:24:0f:23:13:3e:80:0f:f8:ad:
99:4a:a5:a4:ae:bb:e3:9e:ab:e8:fc:19:6e:80:65:37:ba:13:
82:60:65:d9:ca:b1:c6:7e:51:b5:15:ab:e9:1e:da:e0:44:74:
ee:c3:80:78:9f:f3:d4:c2:65:7f:25:ef:7d:8b:7b:2c:d5:2c:
db:42:53:7f:1a:bf:40:6f:3e:df:16:06:d9:82:cb:c5:63:e1:
69:e2:09:d2:c6:4c:4c:40:a4:09:1d:cf:fe:6f:43:50:fa:36:
8c:66:3f:98:5a:8b:bc:c1:56:3e:54:0d:a2:4b:5d:9f:a3:34:
88:b2:23:1f:75:c5:34:43:0a:84:b4:87:2a:61:4b:8a:25:ba:
11:23:a2:1f:18:64:f5:da:5f:84:99:be:a5:eb:35:30:2d:85:
89:9a:b3:11:44:d4:b3:dc:1e:a1:a3:2d:1d:00:38:2c:ca:ba:
f2:6a:a7:50:44:0b:f6:c2:2c:89:35:4f:84:fe:07:f0:9c:1a:
68:84:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:23 2026 by rpki-client