Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
File: c46a0827-1052-46e2-ad52-4a27d9a65f24.roa (raw, json)
Hash identifier: w9n7H3yMumTHpZEZWOVOzeHTO+NooEmPf4gio8DjbAY=
Subject key identifier: 74:A7:B3:59:42:8C:BF:34:73:E1:F4:58:AF:F1:A6:51:FE:53:EF:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E830626A6A97D4259F8D98347FF3BE78E080802
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
Signing time: Fri 07 Aug 2026 04:51:05 +0000
ROA not before: Fri 07 Aug 2026 04:51:05 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:83:06:26:a6:a9:7d:42:59:f8:d9:83:47:ff:3b:e7:8e:08:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:05 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7d30cb8215ffdc046e98f5201a43d2a48f3b83403d81168b705fa39e2ca608d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:50:05:55:ee:66:7d:3d:25:10:ba:aa:a8:
d1:58:70:f4:f1:c7:38:17:94:67:98:d5:a5:ac:c0:
1d:c5:77:43:68:57:02:18:40:82:a1:81:74:c1:49:
f4:0f:61:22:71:94:f2:4f:b3:bf:d4:40:5a:df:05:
5f:04:6c:f7:2e:c0:dc:9a:00:58:04:d5:0c:fa:a8:
58:8b:00:7f:f0:77:19:c7:ec:55:83:d3:65:aa:0a:
21:2f:45:d9:0e:bd:92:0f:1f:22:c9:29:fa:c0:b4:
c7:02:06:19:97:82:4b:5e:62:54:ac:db:01:bf:00:
08:7a:85:e3:b4:ec:1f:30:7c:e0:f5:59:6f:c4:26:
2b:a2:a7:7d:91:36:30:b3:87:00:09:49:d8:a3:f7:
ac:c9:38:68:9a:b8:c2:55:28:1d:d7:0e:ab:b3:dc:
45:c9:36:e4:e9:0d:20:c1:20:b9:b0:5e:27:e6:4d:
9a:e1:5a:31:70:07:14:2b:70:e5:6c:8d:c4:ca:e6:
f8:2f:76:0e:d9:a1:8b:12:77:39:81:be:b4:ba:b5:
33:b5:34:9f:b8:85:4c:61:70:9a:98:cd:0a:60:2e:
2e:c3:bd:06:6c:a6:79:4a:ba:5d:a8:9a:e3:16:20:
98:8a:0d:43:46:bd:db:12:b7:ed:51:39:e2:e5:73:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:B3:59:42:8C:BF:34:73:E1:F4:58:AF:F1:A6:51:FE:53:EF:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/36
Signature Algorithm: sha256WithRSAEncryption
11:9f:a3:eb:0a:9f:a9:7e:99:07:8c:aa:57:75:26:02:01:2e:
28:45:0e:4f:c3:87:8d:88:eb:16:db:5d:e5:a2:b3:26:67:3c:
45:3b:2b:57:d1:a8:03:7e:48:ec:62:16:dc:c3:5e:34:a8:76:
de:7b:29:c0:a3:a8:69:03:e3:bd:bb:68:17:26:3b:74:cc:e5:
0a:65:c0:9c:a6:10:24:85:db:d8:a2:39:12:69:2f:af:9a:16:
a7:a1:54:81:62:b3:cf:b4:3c:be:c3:c3:94:84:28:fe:ff:23:
ab:83:94:7d:bf:51:ca:f1:16:71:d6:e3:eb:d7:54:52:4f:86:
35:c2:52:72:64:de:15:d5:4a:75:87:6c:21:0f:cd:26:c8:2d:
c5:c5:f6:8b:1c:0e:0c:5d:36:b7:51:76:6e:b1:52:05:d9:4a:
fc:8a:0f:02:c4:83:b6:1b:c8:a8:19:90:e3:f6:13:64:8d:de:
5e:89:09:f3:12:9d:4f:31:3e:26:bb:f2:c9:cb:40:de:4f:57:
2c:51:fe:bb:25:18:5a:d5:13:30:61:a5:d0:3f:2a:42:67:9c:
56:8a:14:9f:66:30:b7:cc:19:7b:44:0a:26:c1:06:bf:d1:c1:
e8:35:c4:22:6d:7b:73:57:52:42:7e:1d:ab:bb:38:b1:83:45:
24:8b:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:14 2026 by rpki-client