Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
File: c0520c80-698f-4538-b32e-e9663caeb979.roa (raw, json)
Hash identifier: kkuAdHfPwKyxFYUDTdhevSQEV9hj8M6SjnyqgB6C3XI=
Subject key identifier: 16:24:E6:41:46:7E:66:E4:E2:F5:5E:81:6D:D0:A8:D3:A5:B8:9E:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AC279D24B877EC1D1078FB94EAEE271C18B8264
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
Signing time: Fri 07 Aug 2026 05:10:05 +0000
ROA not before: Fri 07 Aug 2026 05:10:05 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c2:79:d2:4b:87:7e:c1:d1:07:8f:b9:4e:ae:e2:71:c1:8b:82:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:05 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9a621c98a43ebb77fc822dd3e0f728d97dba18584eeba5b60e2fb48b8e39c74d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:2f:cb:1d:04:ec:48:28:7b:0b:a3:71:7b:
43:1c:11:85:34:98:43:1f:ff:49:6f:97:93:a0:81:
3c:f3:a4:2e:da:82:f8:22:a4:2d:0f:f1:64:78:d8:
9e:87:36:1d:81:10:fd:28:ce:a3:4c:40:17:e5:40:
85:6e:ec:55:6b:94:0a:eb:50:94:c6:fb:d6:05:34:
bf:f9:fc:eb:1b:68:f8:2c:6f:71:e7:2e:c3:8a:61:
1e:fb:35:1b:df:a5:bb:3b:0b:61:7d:ed:3c:3f:59:
cc:77:f4:1f:8b:79:10:1d:1d:58:53:62:57:02:ee:
2d:f4:1d:be:af:3c:94:69:f9:3f:b9:03:1d:d2:26:
c8:d2:43:cb:55:47:be:ca:f1:34:5a:ef:92:1c:9b:
0d:bf:94:ab:d7:5a:9d:63:6f:03:aa:57:b9:16:65:
ad:7a:34:63:aa:28:a9:d0:8d:13:63:4a:cf:67:a2:
88:f2:7c:33:1f:d4:da:82:60:39:ec:55:88:9f:0b:
a1:1f:00:0d:92:bb:fa:cc:b8:ac:12:e7:6b:de:e3:
b0:60:b1:e5:fa:38:53:42:e5:92:4e:92:5e:56:24:
b0:c8:01:88:be:2c:08:de:27:b9:46:80:a2:a2:96:
69:99:2f:90:5a:aa:31:ef:9d:d8:81:04:a7:bd:26:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:E6:41:46:7E:66:E4:E2:F5:5E:81:6D:D0:A8:D3:A5:B8:9E:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8050::/48
Signature Algorithm: sha256WithRSAEncryption
b1:44:9a:7b:58:b4:f2:e1:02:75:a9:8c:0f:d9:14:e8:71:1a:
67:a6:81:32:3e:ed:dd:f7:0f:41:ed:22:1c:9f:9b:10:c0:ef:
af:8e:6b:e5:f3:52:72:c3:41:37:2f:f1:58:e4:4b:11:01:a9:
30:8b:af:e8:7a:45:0f:9b:80:46:01:11:6f:cb:21:91:7b:36:
88:76:bb:a4:26:f8:a4:ed:93:f0:31:9e:71:62:b4:e1:f2:2d:
1f:3f:07:6e:f0:90:e9:4f:77:57:41:92:1e:f5:1b:67:3b:60:
ba:6d:a6:2f:20:10:b2:e9:df:4f:8d:91:5a:8b:4d:82:da:4f:
13:f8:8d:a1:1d:4b:ce:e9:c5:cf:e8:53:60:89:e7:08:4b:e0:
b9:f1:0c:c7:5c:7c:b6:a5:cc:66:2d:9a:4d:f1:b5:82:ba:13:
22:de:3e:3c:93:12:e8:ca:48:48:b7:f4:ee:ca:d8:7b:a3:10:
51:a2:2c:2d:7b:ee:a8:26:97:47:82:5f:9b:69:14:40:a4:c3:
c3:aa:13:9e:c1:cb:47:92:f8:c8:2a:74:6a:1a:81:5c:db:c5:
90:1a:2e:07:14:98:9f:f4:80:a6:f0:70:fd:b9:46:0a:b4:72:
5d:e7:06:48:6b:d4:c0:98:fb:7e:2d:f8:97:a5:97:36:98:41:
97:4b:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:01 2026 by rpki-client