Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
File: c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa (raw, json)
Hash identifier: tKiCI0m/j8vasv7OhC9EoBfmhhRE4haCKJmvkkGOLr8=
Subject key identifier: 49:DF:11:D4:A0:A2:3B:16:90:BC:C5:57:1A:1E:3F:5A:8E:FA:61:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B1A1B59804934A3338A4016EDD3DB97554A66C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
Signing time: Fri 07 Aug 2026 05:20:42 +0000
ROA not before: Fri 07 Aug 2026 05:20:42 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:1b:59:80:49:34:a3:33:8a:40:16:ed:d3:db:97:55:4a:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:42 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c0d712249229c57a474269e4d32cf23321932f37d3589890e1a80a7b2f74c30f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:11:71:e8:37:c7:08:6d:80:9e:bf:f2:7d:
f9:9e:a6:45:4c:c1:66:a1:8a:54:e2:a7:a7:0f:1c:
cd:6f:9b:a4:72:b7:19:f8:98:d4:b9:ff:20:91:81:
d5:8c:95:93:a8:7a:f4:ef:0d:b7:e1:43:50:8b:3b:
c0:51:f5:94:09:ea:ee:be:80:dc:f8:cb:d0:03:a4:
05:70:35:0b:a8:fa:cf:4f:8e:f4:58:c7:85:8a:81:
0c:f5:04:be:7f:42:28:ac:1d:2c:87:89:2d:a7:46:
2b:0a:5c:8b:ad:46:3d:9b:32:56:60:d0:1a:03:bf:
e0:28:18:06:da:4d:0a:68:20:aa:b7:a1:17:f5:10:
5e:2c:aa:c2:d7:e5:df:3f:9f:a1:85:50:f2:2a:85:
4a:14:b0:26:5a:51:72:fd:42:bd:1d:2f:1b:24:46:
ca:7a:99:bc:ca:5b:39:46:d2:b4:cc:32:a0:cb:fc:
33:d0:cf:64:37:9e:a4:3d:ec:46:53:d0:fd:d8:05:
8f:61:9d:19:61:c9:6c:8a:9f:3d:00:25:bb:47:26:
4a:5d:a5:a9:7f:d4:a5:01:4f:31:db:56:c8:0f:3c:
ba:03:64:ba:15:bd:62:79:9b:76:27:bd:6d:e3:30:
a7:2a:8f:25:7d:ee:1a:2c:1c:fb:fc:83:e9:69:1a:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:11:D4:A0:A2:3B:16:90:BC:C5:57:1A:1E:3F:5A:8E:FA:61:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:2000::/40
Signature Algorithm: sha256WithRSAEncryption
51:fa:bf:51:13:9a:89:4e:fd:f9:2d:08:3f:23:ff:e6:3c:eb:
84:d7:f7:5c:ad:d7:20:4b:74:0d:fa:90:0d:d8:7f:ef:85:42:
c4:0c:95:16:36:88:87:35:f8:65:df:19:13:fe:60:0b:3b:ab:
c7:93:35:fd:31:14:d9:77:a7:24:2b:0e:25:e7:7e:aa:59:6c:
73:e3:02:c5:7d:1f:41:a9:10:42:e8:95:8a:c4:c6:e5:cd:53:
2a:35:34:25:03:04:a6:55:13:e9:9f:93:53:7f:67:2b:1e:21:
ff:b6:42:43:a7:28:4c:c1:82:d1:1e:39:04:d1:0c:ac:13:c2:
fe:ca:09:b8:4b:58:ca:01:05:90:43:17:4c:e1:1e:14:9d:48:
28:8b:fd:fc:df:7d:6c:3f:32:2d:11:f5:8e:9e:1b:74:5d:11:
1e:56:e8:cc:4d:27:70:e3:b3:a3:b4:d2:e7:b7:97:58:82:48:
47:ff:9d:07:20:be:53:56:db:e6:92:a9:28:44:25:e8:74:e6:
25:48:e5:26:10:65:68:3f:23:3d:b1:69:0d:b3:d1:42:ad:20:
01:74:0b:91:d7:d7:2e:96:dc:23:3b:58:ae:06:24:5c:70:99:
2c:e1:d3:2d:8a:28:2f:e6:5b:77:fe:98:50:29:b0:eb:e9:6a:
65:7a:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:40 2026 by rpki-client