Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
File: be1170a3-5a68-4c9c-8b51-b7efde64b945.roa (raw, json)
Hash identifier: cCgMDkECplo6W1OjuImMgF/BSnAXUWICX/XhtqwL/Dw=
Subject key identifier: 1B:B1:2B:9A:67:3A:B1:CF:74:02:75:20:AF:C1:34:70:73:03:0B:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20965CE7B6C0DE34CE508210D6E4EE7ED032337D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
Signing time: Fri 07 Aug 2026 04:30:20 +0000
ROA not before: Fri 07 Aug 2026 04:30:20 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:96:5c:e7:b6:c0:de:34:ce:50:82:10:d6:e4:ee:7e:d0:32:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:20 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=72d2e6e3569574d415b7188f0c5b992b2ce9b2bdd2c609af2037f4e3aca43d25, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:c6:50:2b:ec:97:5a:d8:3c:7e:8a:5e:20:
e0:f6:58:a3:ec:1d:f3:d8:7a:9f:60:5e:a4:30:b0:
00:cd:8d:4e:69:a4:ce:5f:cb:11:0d:19:f9:ac:23:
1f:ba:d9:c5:e5:82:f9:fe:7f:19:43:56:61:95:82:
6c:7c:27:98:ef:e1:ca:62:26:59:38:41:b5:5b:2f:
1d:64:7b:e3:49:ed:81:67:dd:8c:c1:fa:0f:8d:a1:
6e:10:a5:65:b8:4e:ff:df:d4:39:33:c1:68:45:b0:
2c:ed:f4:f4:f8:6b:55:e3:23:9c:22:bd:67:c6:6f:
1b:09:f6:81:7f:fc:ca:c7:3c:d1:3c:90:72:d6:f0:
0c:21:d0:89:2e:ff:9d:85:cc:d7:97:99:00:60:ee:
79:87:e8:55:34:3c:ec:d5:4e:e2:9e:34:09:df:5b:
90:63:4d:41:77:c3:ba:94:87:90:35:a8:d1:09:01:
a3:96:a8:72:65:3e:3b:cb:1a:d8:86:db:86:6b:ad:
fb:5f:98:8e:d2:cf:5c:3f:37:7d:e4:ba:73:1a:08:
42:dd:e4:99:40:a1:8a:da:b1:10:eb:82:97:a0:f4:
62:85:48:1e:a9:c7:da:7e:c3:31:b1:db:36:95:d6:
7b:44:af:84:d0:63:6b:1c:45:63:f6:aa:b7:ff:91:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:2B:9A:67:3A:B1:CF:74:02:75:20:AF:C1:34:70:73:03:0B:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:6000::/40
Signature Algorithm: sha256WithRSAEncryption
be:96:1c:d3:87:7c:ff:c0:5a:36:f6:de:f8:ac:68:74:ad:bc:
4d:ad:f4:ba:91:d2:07:2e:07:d0:10:1e:cc:26:65:1f:e6:35:
30:7f:26:7b:a7:39:79:9f:c0:8a:fe:86:41:ed:bf:e8:cd:9b:
26:e9:8c:75:a2:f2:ae:b1:98:40:64:00:9c:47:82:ab:0c:ae:
66:4d:c7:58:8f:86:bf:58:d7:7d:9d:ff:1f:26:73:fa:be:46:
0f:c9:88:47:7d:43:75:89:a1:60:85:6f:bc:75:5e:b3:4a:c3:
2c:93:be:4b:ae:2c:81:8a:57:a2:0d:a7:9c:cb:53:0b:ba:97:
59:ca:da:c5:1b:bc:a5:bf:6c:b9:d0:a1:fd:e0:55:f5:d6:db:
c2:3f:4e:28:1a:f2:a0:31:13:2f:9a:dc:cd:5e:ed:71:a5:1e:
fc:1c:4b:83:d9:a4:93:ad:49:2b:ed:a1:68:72:12:a9:5d:2a:
13:ac:57:67:c4:29:17:5d:43:d3:2f:75:e2:ff:3e:4a:20:20:
03:ff:f7:d3:aa:df:15:b4:62:7e:f0:3d:0d:22:67:f1:b4:d7:
c8:ac:c9:22:a5:fd:5d:a6:43:81:f7:09:2d:cb:cf:96:92:17:
64:b0:9c:7f:b9:66:96:74:fa:fb:b0:8b:cb:b2:5d:c9:4d:24:
f4:50:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 19:29:42 2026 by rpki-client