Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa
File: bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa (raw, json)
Hash identifier: ToXb3JUejctS0O2fCtrWavkN3aU0tfqrmPSYQU+xEsE=
Subject key identifier: 3C:A1:B1:51:73:DC:AC:42:B5:73:4C:5A:25:E8:4E:3B:C4:1C:63:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 112440AEBD3326FC5CBDD018FE8E25BC1076CB4B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa
Signing time: Thu 10 Sep 2026 02:40:08 +0000
ROA not before: Thu 10 Sep 2026 02:40:08 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:24:40:ae:bd:33:26:fc:5c:bd:d0:18:fe:8e:25:bc:10:76:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:08 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=4fd5425174f4beac27987afb9bec3751dcadbcf1d17302a1d06c013d5fa9d2a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:37:26:d8:df:2c:7b:bc:7e:59:f7:ff:e0:
aa:88:29:e9:42:d5:ed:cb:38:eb:a6:de:0d:f5:22:
fc:b1:60:1e:c4:1e:ed:dc:21:0b:62:e8:03:54:4e:
66:92:4f:96:75:45:d9:3f:82:26:76:1b:02:43:42:
41:01:36:8f:55:8d:c2:55:b2:59:85:31:d6:33:50:
f9:0a:24:58:b2:80:93:51:e3:01:f2:40:fa:a4:7a:
b3:0b:09:e3:3b:e9:5f:0a:9a:89:86:ca:51:a4:cf:
75:ce:cf:ba:52:a4:7e:93:2a:18:72:16:ef:5c:59:
74:ab:c1:e6:f4:20:01:c3:d4:a1:ee:16:de:b8:93:
dd:a9:db:41:13:8f:bc:2b:d4:f5:3b:3c:65:25:6a:
e6:e1:80:df:84:c2:c9:22:81:5f:7f:36:f4:7d:7c:
93:bb:5e:15:8d:ad:eb:66:29:fe:e0:9f:f5:3f:49:
d2:2a:2b:16:21:5c:0a:8c:0c:f0:4c:0f:d1:2d:bb:
19:85:53:83:f7:01:94:d0:65:f6:f8:3f:17:a0:f9:
0b:33:15:f7:3e:e4:c4:c9:ca:ec:ac:66:25:1a:aa:
7e:b6:5a:df:a7:e7:f5:67:4f:51:2e:19:7f:6e:cf:
cd:09:40:b7:93:09:ea:43:6d:db:3c:1c:49:fd:31:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A1:B1:51:73:DC:AC:42:B5:73:4C:5A:25:E8:4E:3B:C4:1C:63:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4040::/48
Signature Algorithm: sha256WithRSAEncryption
5c:4c:8f:0b:cf:27:7d:a1:03:d2:78:72:7a:ba:70:b7:3b:f1:
c1:76:24:47:c7:5b:27:5b:36:17:ab:06:94:ed:31:e2:14:6e:
39:f5:68:75:4c:d8:c6:b1:2b:e6:42:60:9d:79:08:2f:61:0f:
44:93:a7:ca:90:25:55:d8:cc:da:26:b7:f6:6b:e4:ef:ff:5a:
82:22:b9:b5:43:12:f3:b3:d9:ae:10:8c:af:5b:bd:20:4c:bb:
ae:31:90:60:56:e4:74:d8:24:38:31:b8:70:5a:ea:2f:b3:90:
3e:69:4d:c6:af:1b:35:d5:7e:0f:92:64:ea:76:ef:fa:71:60:
1e:97:f0:c7:36:a5:fb:7e:86:b0:b1:46:71:71:14:c9:31:b3:
69:2b:c5:37:f2:49:e5:e2:cd:c4:38:24:d4:2b:e0:6b:8c:3b:
51:55:7e:b1:de:07:32:8c:b5:95:f8:2b:f8:bb:13:7d:8e:db:
4b:81:17:7d:d4:e5:16:8e:dd:8c:35:0c:17:3d:e5:d6:6e:be:
fb:f4:f5:77:7a:4e:63:dd:3b:8f:dd:c7:28:ca:45:d1:e1:cd:
ad:12:78:98:f8:d8:a6:db:45:93:0d:d5:53:c0:2e:3a:d4:ec:
db:99:18:e8:aa:2f:63:24:3e:2d:aa:4d:0b:34:76:b9:66:05:
f3:84:38:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:49 2026 by rpki-client