Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa
File: ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa (raw, json)
Hash identifier: 65lSugQ6FHoGXilVKWQx1bNNL/RGSej1mLDAOyDLGN8=
Subject key identifier: 30:87:90:43:B4:D2:9A:3D:6F:54:1D:FD:D1:D3:3C:89:45:AE:BE:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A882F450B024E37FD741FE1FE0AEAD83A7D931A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa
Signing time: Wed 19 Aug 2026 01:00:08 +0000
ROA not before: Wed 19 Aug 2026 01:00:08 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:88:2f:45:0b:02:4e:37:fd:74:1f:e1:fe:0a:ea:d8:3a:7d:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:08 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=586536123c1e2ee1f9af4047f092467a47a418d252ae4e0da30cd04cea335cb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:64:47:b2:46:8e:d9:d9:ba:6a:ee:89:38:
cf:27:5d:4b:20:85:65:17:70:1d:cf:f0:90:66:ec:
29:b6:26:f0:a2:61:bf:be:6a:94:23:af:1b:a4:c1:
d1:42:7b:18:46:ca:2e:f6:8d:77:6c:ae:a6:7d:c7:
6e:0c:36:d2:3f:1f:97:3b:29:a2:d4:90:e5:ea:78:
ba:ee:92:d8:29:49:24:da:59:95:ec:87:25:0b:0c:
05:59:86:e7:2b:38:93:32:9f:06:a5:6d:46:e8:db:
4f:94:46:6f:a0:45:05:87:72:31:71:5b:11:ab:a0:
fe:3a:d5:1e:b6:3d:d7:a1:57:dd:92:74:3c:a6:21:
cd:21:ee:54:a3:12:97:ea:80:2a:8f:dc:a6:15:d3:
03:91:1b:bf:d8:b4:14:ac:b8:3e:ea:b7:16:c3:ce:
e5:8d:81:68:d7:d4:54:dd:00:53:96:44:d1:12:09:
82:76:41:de:36:a5:9b:46:80:c1:00:37:64:11:18:
02:02:8b:79:37:5e:c5:ce:1d:d6:64:56:20:11:38:
60:2e:f9:78:a7:a4:a0:8f:c4:e7:2e:6c:a7:29:00:
fd:7a:0e:a4:f3:6d:1b:7a:a6:8c:cc:6b:b0:81:90:
ed:2a:78:48:3f:a9:9d:3a:3e:5b:ea:5d:ea:7d:5e:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:90:43:B4:D2:9A:3D:6F:54:1D:FD:D1:D3:3C:89:45:AE:BE:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:2080::/48
Signature Algorithm: sha256WithRSAEncryption
ab:64:ec:85:44:a7:2f:17:d8:b8:bb:75:e6:92:2b:d4:4e:d7:
1b:29:ff:be:81:89:bc:ee:e0:b6:41:3c:6e:e6:02:d8:2a:4c:
5f:ba:42:85:64:8a:86:f2:95:a1:15:b3:67:e9:4f:a0:15:14:
7c:91:fa:57:60:65:43:03:63:03:61:a9:b4:c3:1b:e1:90:67:
3e:70:9b:04:39:c0:f0:43:cf:78:bf:d0:d8:9c:10:df:dc:92:
73:bf:39:08:4c:cd:20:a2:28:d2:ba:50:f0:26:0e:3a:3e:fa:
db:cf:6c:12:39:91:05:37:25:67:78:37:14:75:44:e4:b7:bd:
29:bf:75:1c:b4:83:c7:f1:80:8b:03:34:74:1f:ee:18:2f:dc:
b5:0c:8a:78:17:1f:17:06:1b:bd:25:89:72:e0:a5:fb:3a:9d:
18:44:21:06:46:19:e9:ba:b9:6e:7c:07:bd:34:19:91:77:9e:
b9:a2:92:57:0f:1d:46:a2:ad:82:d1:d3:53:a2:c2:b9:09:2f:
77:63:13:2d:2e:c8:cb:86:9d:8d:a4:9a:ac:ed:9a:cd:15:77:
74:4d:ec:a6:79:a1:5d:52:15:3d:2a:c7:2b:f4:26:c5:c1:ed:
54:ae:c7:a2:4b:20:e1:18:fa:0c:43:c3:be:9e:ae:c3:90:31:
16:b2:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:17 2026 by rpki-client