Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c10198a9-e934-4497-9fd6-1ed37399bccb.roa
File: c10198a9-e934-4497-9fd6-1ed37399bccb.roa (raw, json)
Hash identifier: u/THpUYc9Z2Jm+66D5IBjXgGjO3GL9lHlGfuhONn1tI=
Subject key identifier: 31:91:56:3C:F4:22:CB:54:C0:FD:B4:5B:95:75:FB:EB:87:9E:7D:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E6E17738D4BEEE5208F315368DA39647A255D87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c10198a9-e934-4497-9fd6-1ed37399bccb.roa
Signing time: Mon 10 Aug 2026 00:50:34 +0000
ROA not before: Mon 10 Aug 2026 00:50:34 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:17:73:8d:4b:ee:e5:20:8f:31:53:68:da:39:64:7a:25:5d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:34 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=ae515f81f83d05dc4678e410f4e5aefb757a7eec49ae2a54d5fb2214c4f81f78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:d8:b4:52:ff:4e:48:30:70:74:ab:b3:95:
32:0e:6c:a2:4d:84:74:85:db:10:a2:aa:e8:74:f4:
3a:be:eb:9e:30:2d:57:93:29:a0:1b:82:4d:6e:6d:
44:e6:18:ed:d7:58:4f:32:62:83:05:ea:44:38:4b:
ed:fe:7d:b5:18:2d:72:8e:66:e8:ca:f7:9d:a6:f0:
42:20:13:2a:e8:f9:95:7f:ca:0d:1b:df:d9:41:e6:
c7:78:39:ac:b2:4d:1b:df:78:7a:85:47:93:1e:f6:
00:80:e3:48:43:ce:ef:73:fd:b5:cd:9d:6b:f1:c5:
24:26:27:4c:be:04:6d:5c:89:b1:57:41:9e:1f:4e:
a9:d2:e6:68:db:88:75:f0:3e:53:96:6c:30:52:f0:
35:ba:95:6d:79:90:7c:90:9d:c9:fc:64:37:0a:d3:
a4:e0:4a:74:32:da:70:d7:3d:de:90:f4:84:09:1f:
c5:bc:33:ab:78:75:93:a4:e2:be:c6:f0:66:b7:36:
2d:d4:f8:1e:66:52:ab:5b:f8:06:30:e8:a6:ba:71:
ca:8b:08:c5:45:97:39:bb:c3:53:7a:87:05:26:50:
d9:7d:90:5d:e1:e3:e1:0c:34:57:06:ce:94:ff:ee:
fa:82:53:83:57:b7:b0:1a:ab:a8:4f:f1:eb:ad:19:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:56:3C:F4:22:CB:54:C0:FD:B4:5B:95:75:FB:EB:87:9E:7D:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c10198a9-e934-4497-9fd6-1ed37399bccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:800::/40
Signature Algorithm: sha256WithRSAEncryption
36:33:73:bb:bc:ef:32:86:e7:87:4d:98:b3:93:57:ba:94:90:
8d:56:97:c2:5d:1b:80:07:18:61:d0:5d:22:8c:bb:fd:0e:89:
99:f9:eb:d0:1e:d7:90:1b:4d:a6:39:be:91:18:53:08:0a:9a:
de:a9:ca:d9:6f:fb:32:89:55:4d:c4:70:49:32:56:e3:23:fc:
62:c9:72:78:d6:35:e1:fb:10:9c:d6:36:8c:ce:1c:d4:10:62:
79:a5:4c:04:f7:3a:ec:e9:2d:73:1d:c7:3d:f3:ec:64:d9:70:
89:37:db:c7:9e:7b:d0:74:f6:34:88:6c:01:48:1a:44:98:31:
b8:b7:39:8c:05:11:2c:f8:09:1d:1b:cf:fe:91:48:82:96:af:
b5:22:dd:4e:a8:b8:ad:a5:f0:56:14:e3:14:e9:d5:9d:33:53:
f5:01:47:d7:52:fa:11:2b:70:9d:72:90:b0:f1:ea:69:05:30:
73:7c:c9:77:2a:a6:7d:8b:bf:e0:b7:9e:06:b0:9c:9c:1b:42:
9a:49:ed:ec:fe:46:e6:86:b8:e5:11:79:73:12:63:9d:9c:cc:
72:1e:2e:df:01:7d:dc:a1:8e:2d:05:bf:e6:cb:2d:0f:4d:1a:
c5:37:44:4f:17:60:7a:17:22:84:97:f8:6f:9a:38:7f:4a:f6:
29:f2:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:31 2026 by rpki-client