Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
File: c153f994-19fd-4682-b6f7-f4e92e6144ea.roa (raw, json)
Hash identifier: /RJSH6v3Y3qkyx9Kjuk6UeBsZF2j8mup0fPxZZBoNk4=
Subject key identifier: DD:07:35:2E:04:AE:99:D2:E4:F3:42:0A:9F:1D:2C:49:CD:27:09:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 790D6CE39E08D583E89EA4D5F66CF6F33ADECF9B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
Signing time: Fri 07 Aug 2026 04:41:07 +0000
ROA not before: Fri 07 Aug 2026 04:41:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0d:6c:e3:9e:08:d5:83:e8:9e:a4:d5:f6:6c:f6:f3:3a:de:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6fc960ae0067b11aae466a14cd0d45dbf0c1b8b6f52e251011c09375dd208b0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:79:b0:dc:70:27:cd:19:85:28:fb:10:49:
9a:1e:3d:a6:af:01:fa:c7:a5:64:0a:43:ba:99:a1:
7b:19:1b:3c:c2:a2:4d:ac:0f:57:e5:7f:cc:f8:86:
74:da:67:d6:c4:14:4b:67:28:36:d7:55:d1:39:82:
6f:42:f9:b9:b3:78:d5:10:9c:29:df:f1:bf:23:01:
72:b5:98:85:10:c9:84:6b:04:ba:92:41:13:21:4c:
8c:20:97:52:1f:33:99:ca:8f:7f:9e:cf:22:73:18:
84:90:18:33:6e:7a:97:cc:b5:c4:05:14:5f:18:e1:
2b:9d:b8:6e:28:e6:7c:1a:cf:c0:f0:99:01:87:31:
20:e3:cd:19:5d:03:77:f1:13:01:1d:52:cb:03:c1:
7c:7f:38:e7:c1:eb:7b:ae:ea:09:da:53:82:0e:fe:
7b:4f:5d:2c:d4:43:d2:22:cb:10:c2:9e:c0:8f:6c:
5c:13:e8:90:a4:83:d5:df:67:ee:a6:f7:ba:ba:12:
84:85:9a:fd:72:a1:f9:08:5e:2f:b5:d0:d2:22:29:
16:ef:3d:8e:ff:2b:01:d6:46:0a:fe:cb:d2:cd:ab:
9c:ec:55:f6:82:53:cd:f3:a6:a6:f4:54:8e:3c:f5:
b3:b8:75:f4:7b:32:52:63:87:97:de:e9:7a:c4:91:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:35:2E:04:AE:99:D2:E4:F3:42:0A:9F:1D:2C:49:CD:27:09:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:c00::/38
Signature Algorithm: sha256WithRSAEncryption
02:b7:73:10:2d:12:4e:0f:cc:ee:ad:1f:9f:bd:95:de:b7:ed:
5e:f4:97:9e:19:a8:3b:09:90:50:f3:9f:ef:4c:c5:a0:ce:d1:
89:58:08:47:0a:c7:ac:1b:dd:85:2a:e6:0a:90:40:92:20:fb:
fb:50:07:9b:ac:f7:90:37:81:c8:0e:69:cf:4d:1d:38:49:2f:
09:ae:2d:f1:85:2f:8c:9b:37:02:7e:9d:0f:94:bc:85:2c:21:
eb:ff:80:d7:a8:99:d0:80:df:34:c5:95:f7:4a:fe:72:c1:24:
76:11:83:16:b9:d6:fa:3d:cc:08:ac:8a:bd:82:f3:3a:8b:7d:
d5:b5:78:57:29:7e:e1:f9:dd:a7:f2:12:da:3e:94:96:11:01:
05:d7:ca:83:36:97:6e:a8:9a:56:bd:30:09:71:a5:3f:f0:b6:
9b:a0:cb:61:26:df:d0:56:70:af:06:a5:a5:2a:c6:36:bb:5e:
d1:ae:6b:2e:99:53:ce:03:7d:38:c5:68:6f:1d:5d:01:ca:20:
b1:36:27:ce:e7:4f:9f:5f:db:77:8c:49:c3:50:7e:1d:69:63:
cb:ce:11:9b:b7:a5:51:52:fc:65:65:95:75:6f:db:17:33:9a:
52:e2:48:d0:f0:4c:53:68:06:3a:b7:42:15:33:de:12:0b:c8:
0c:b1:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:53 2026 by rpki-client