Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
File: c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa (raw, json)
Hash identifier: qH/kKbD99nZ9aSTrCHqiOOmYR7fxwy0BPXiKHymNXAU=
Subject key identifier: 02:BD:61:0F:E1:0A:A6:33:CA:30:22:E6:88:74:70:9C:9E:2D:A2:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74CC396A7EFDBBBCF9D1283789807ABCBEB2A81A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
Signing time: Fri 07 Aug 2026 05:20:42 +0000
ROA not before: Fri 07 Aug 2026 05:20:42 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:cc:39:6a:7e:fd:bb:bc:f9:d1:28:37:89:80:7a:bc:be:b2:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:42 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=914e42536038ca49fa704a221890c76ccbde8446bfe9e77cb01fd6bddd16e2fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:a4:70:46:9a:aa:db:e6:a9:a8:06:32:0d:
dd:ff:ba:a2:a5:61:d5:ca:40:a4:e8:8a:c8:d1:9a:
87:d8:c8:41:5e:d9:f5:a6:74:b3:4e:e5:09:73:f9:
13:a7:61:38:2b:6e:83:00:0c:93:66:34:b1:a0:82:
d7:d7:4d:9d:f9:ed:e9:1d:fb:ef:df:d3:3d:fd:48:
5d:c1:c3:89:d5:e2:d5:d8:8e:88:62:fb:f8:39:b8:
fc:a5:3d:c3:e8:ac:c9:cd:ce:65:95:1b:1e:08:73:
bd:e0:e8:a0:c1:9b:4c:2e:e4:1f:59:ab:9e:42:f7:
b9:6b:9f:74:1a:dc:c3:a6:85:ea:14:73:33:3f:48:
ca:65:a0:84:14:ef:15:c5:4f:93:c3:2b:fc:11:58:
c9:4f:4e:e1:60:c7:a2:83:74:48:65:21:78:13:32:
e9:45:a1:c2:17:78:04:cd:d1:5c:e6:4b:95:3e:91:
14:02:f4:6e:ce:db:2d:a0:19:d4:0b:59:b3:3c:80:
ff:77:44:22:a1:8b:43:85:bb:bd:30:44:12:47:a3:
99:d3:ed:4b:1a:f0:8c:1f:25:94:f6:10:f4:d0:94:
73:35:4a:ea:fb:9a:17:e8:90:c2:30:1c:0e:48:61:
3f:d7:70:70:81:c4:28:83:73:80:a8:e0:78:25:98:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BD:61:0F:E1:0A:A6:33:CA:30:22:E6:88:74:70:9C:9E:2D:A2:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2000::/40
Signature Algorithm: sha256WithRSAEncryption
01:10:e6:a2:1c:77:22:a1:c7:74:03:a6:4c:2d:f6:41:52:33:
fa:e8:69:9c:82:19:f9:98:81:1f:26:72:a5:4e:c5:e5:05:d6:
a8:7d:28:24:84:e9:b7:95:ae:59:c3:72:bb:e0:53:c5:df:da:
6d:4e:5e:05:62:e6:71:ad:78:1b:ec:53:fe:6d:85:a4:ce:6a:
a3:b8:fe:f9:24:a1:19:2b:82:04:d8:8d:46:ab:1d:19:28:ea:
02:14:f3:ae:64:44:48:a6:41:5f:c0:b3:a0:5c:d3:df:8d:f8:
af:da:d6:f3:e8:3e:59:f6:e1:3f:66:e0:64:2b:1c:f6:ad:6d:
10:d3:ff:0e:f2:78:b9:91:91:1d:9e:3d:46:65:a3:cb:4e:9d:
7f:a9:fa:20:90:72:4d:50:58:a1:ed:19:43:0b:7b:b7:51:a1:
57:e4:f8:89:a4:5a:7d:37:4f:a2:93:7a:22:3a:1e:95:42:61:
48:17:1b:a7:2c:ec:6d:95:56:e5:56:6f:82:72:07:80:1a:bb:
4c:a2:ac:5b:10:40:ec:50:59:c3:cf:59:06:5b:2c:62:e6:f8:
93:8c:00:c0:ba:d7:b2:fa:40:17:1f:cc:57:0b:14:d4:3f:88:
1a:f8:29:70:89:42:88:31:69:d9:8d:cf:ac:45:05:57:71:12:
a5:07:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:18 2026 by rpki-client