Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa
File: be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa (raw, json)
Hash identifier: 5aONG1cq6E1IS1DehygIq0mH+LJNCAuXDqKyDKMtvyw=
Subject key identifier: 50:00:AA:A5:60:A2:24:39:AE:42:13:1B:59:1B:25:ED:5A:CC:A0:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CE72D81083C4C89C06AE43BD709203F0515116D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa
Signing time: Mon 10 Aug 2026 01:00:11 +0000
ROA not before: Mon 10 Aug 2026 01:00:11 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e7:2d:81:08:3c:4c:89:c0:6a:e4:3b:d7:09:20:3f:05:15:11:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:11 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=67b8d94179debffee2a08465bcf31d76347d62d0bf95d7eaed49a3e059da896c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:5d:10:1a:be:15:65:5a:91:d9:e7:a6:d8:
8a:00:35:ff:58:a7:02:f0:b7:21:33:df:b2:9e:c6:
9a:0a:06:87:1e:b0:78:df:56:93:bf:ae:80:27:28:
63:06:97:cd:5c:26:2d:c8:8e:c7:72:1d:2d:20:6d:
05:e9:39:5e:bc:d0:6b:4c:fe:71:ea:0e:46:fc:67:
f7:ea:c6:8d:d1:aa:4e:35:f8:56:7b:8c:bf:5e:ee:
6e:41:fe:2b:e5:bb:3e:ee:8e:4c:7a:13:3f:cf:85:
da:08:b2:5a:0b:70:84:60:8d:f3:03:90:9e:89:bc:
d5:a7:50:a3:70:4c:47:4b:88:06:b7:c4:75:3b:88:
c0:8d:da:81:47:18:0f:b6:68:af:1c:72:aa:a7:18:
a8:2e:13:09:09:29:9a:e6:66:b4:76:08:c7:db:62:
f1:15:42:ac:cb:e1:dc:9e:d2:3a:51:c3:a1:5b:94:
59:61:0b:43:5f:de:81:37:0b:c8:0d:32:63:d2:30:
c6:ba:37:e7:33:26:cf:0b:6f:37:02:71:6c:e5:14:
99:32:66:a6:e6:39:c7:4b:a6:51:7e:33:22:24:fb:
b2:1e:6f:01:77:3f:e0:29:2f:3f:e2:49:49:f9:a0:
ca:27:83:6d:04:53:5f:9d:d0:d0:54:c6:7b:87:eb:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:AA:A5:60:A2:24:39:AE:42:13:1B:59:1B:25:ED:5A:CC:A0:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:e000::/40
Signature Algorithm: sha256WithRSAEncryption
84:93:74:ed:73:2a:b9:d7:2a:6b:bd:0b:1d:6f:1b:84:b3:d8:
06:2d:4f:cc:6c:fd:b4:c6:a7:44:4f:a8:1e:ab:9c:bc:34:46:
16:06:7d:4d:f2:51:19:0d:6b:d9:88:71:00:b1:ef:19:41:16:
fc:f7:80:37:2b:f0:a8:a6:9d:6e:84:47:1e:d7:cf:40:9d:2c:
c5:fe:f7:db:9f:fc:58:92:1f:3a:75:73:fb:0d:aa:ca:fa:c7:
02:2f:09:4a:3e:84:e7:00:14:b7:ec:59:95:8d:19:23:6a:73:
5a:40:22:0a:2f:d4:87:b0:e1:05:ef:c3:f8:31:59:32:ce:fe:
33:a9:6a:1f:3c:70:ab:28:53:f2:d4:cf:b5:d2:b5:67:2c:44:
80:f2:90:ef:90:47:f3:cb:14:a7:d0:85:19:a8:ef:f3:f1:22:
1b:f9:8a:78:9b:28:7d:35:ce:23:c7:34:94:a3:72:9a:21:5b:
2e:6d:b8:96:30:a3:10:69:28:92:b6:90:36:4c:6e:61:13:ab:
e8:94:f3:db:a2:03:bf:23:9a:40:f3:93:da:ef:d1:a7:04:2f:
10:69:5d:f8:06:ca:c4:6c:4e:ff:c4:9b:39:0b:56:9c:e9:f2:
94:2d:4f:9c:a5:c7:ec:0c:c0:22:4d:e4:94:7e:53:70:66:66:
11:42:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:29 2026 by rpki-client