Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc71f218-9c9f-4dd4-ac69-84c8d93d27bd.roa
File: bc71f218-9c9f-4dd4-ac69-84c8d93d27bd.roa (raw, json)
Hash identifier: Kz9wji4G3vhaQehMeUZBmLuyogFy8dNc84KvfjJc/XA=
Subject key identifier: D6:C5:68:6C:62:78:A0:FD:73:F5:D7:53:01:E5:21:42:C6:21:01:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01F27999DB0B185202C3C01FA0988C33ADC1AB99
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc71f218-9c9f-4dd4-ac69-84c8d93d27bd.roa
Signing time: Wed 09 Sep 2026 16:16:35 +0000
ROA not before: Wed 09 Sep 2026 16:16:35 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f2:79:99:db:0b:18:52:02:c3:c0:1f:a0:98:8c:33:ad:c1:ab:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:35 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=f63b395c4bfc11ff385f6a82530e7578009f4c34966dfdbe336b298bd9458ea1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:f5:85:d7:81:b3:e7:11:8c:c7:a1:a6:59:
0f:3c:14:6c:ad:3e:25:c7:e8:90:97:02:b8:55:62:
37:44:64:f4:a6:32:84:e6:45:bc:d8:33:4b:d5:e1:
a1:f1:32:71:9a:4d:b9:78:4c:a6:c8:c3:dd:84:f4:
01:15:d1:2c:91:eb:bc:6a:3d:c2:d1:17:bb:d4:6f:
6f:ba:ea:6b:af:27:6c:67:d9:ee:08:05:0f:4e:22:
60:16:6e:dc:4f:f2:47:b9:dc:b8:fe:af:0b:f3:85:
04:bc:48:fa:b4:6e:f6:6a:2d:06:fe:ae:0b:9e:1a:
09:2d:2b:63:32:1c:d0:66:82:2d:04:62:6c:d6:6e:
53:94:d9:b6:f4:69:d8:0f:05:b7:1b:ff:e2:39:f3:
ac:41:33:c3:6a:b4:41:cb:4b:78:a8:1e:37:b8:ac:
e6:72:49:7f:5b:ad:af:65:5d:76:91:83:e7:ae:c2:
22:e7:47:db:54:0e:43:38:31:ee:81:e5:53:83:13:
85:22:f0:e8:68:00:7a:a8:10:22:d5:f4:5d:68:38:
f9:6c:87:2e:ca:84:59:f2:34:90:31:c6:4c:64:31:
f1:20:5d:7d:80:94:a8:28:7a:01:f4:62:af:8f:b1:
fd:7b:a4:75:a0:ad:aa:f6:2a:10:26:cc:40:ef:33:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:68:6C:62:78:A0:FD:73:F5:D7:53:01:E5:21:42:C6:21:01:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc71f218-9c9f-4dd4-ac69-84c8d93d27bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4800::/40
Signature Algorithm: sha256WithRSAEncryption
4a:2e:48:63:5f:4d:ed:60:a8:b0:74:a2:3a:42:41:00:43:d8:
a3:b6:0c:2f:26:1e:81:4d:aa:c8:5a:92:26:c8:f8:2e:0f:33:
fa:05:91:51:cd:e2:8b:c4:25:ae:61:e1:69:8c:dd:fa:f0:7d:
62:dd:22:af:0c:52:7b:ea:89:23:9c:77:86:78:33:ff:8f:f0:
d3:21:cb:1e:e7:f1:a1:f0:0d:74:62:d3:fc:db:ec:1f:16:33:
1b:7f:4d:42:34:ef:e9:cd:18:75:3d:30:ea:f1:5b:3b:62:d4:
ef:62:20:cc:1d:55:f8:0d:ae:1d:bc:5c:45:f6:89:2e:00:24:
79:20:16:4c:c3:a9:0d:32:c6:18:ea:8d:48:09:61:e8:3d:c1:
80:a7:19:b8:9c:e1:96:df:00:7d:48:a4:b1:63:7d:9f:04:b8:
57:6d:56:66:fe:50:08:56:1e:e1:82:80:77:82:e2:73:34:4b:
1f:da:e5:9b:30:94:d6:62:fa:b6:58:32:3e:49:91:4f:20:7e:
33:79:3f:9a:5f:01:35:aa:a7:16:10:f8:a8:eb:a8:a2:91:12:
b3:70:37:c6:45:75:67:61:e9:8f:2d:03:b9:68:cc:cb:4e:f4:
29:ff:8d:a5:ae:ea:9c:fa:d0:ee:ab:a5:c1:aa:6a:10:59:e2:
1b:ba:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:24 2026 by rpki-client