Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
File: ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa (raw, json)
Hash identifier: 3Wd+Jg7KCTzRr8/DPlg52xoicchM2P4N7I/yXRri3HA=
Subject key identifier: B1:9A:B7:AD:BE:CF:C6:EE:BF:EC:81:7F:78:D3:12:0A:A4:E7:EB:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2606AB3DAA417424980DD91561B7EC4DB83DB397
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
Signing time: Fri 07 Aug 2026 04:50:08 +0000
ROA not before: Fri 07 Aug 2026 04:50:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:06:ab:3d:aa:41:74:24:98:0d:d9:15:61:b7:ec:4d:b8:3d:b3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=72c87d44102e1f363ffa3be8ce7e3582722daa438d26e328838cf2c79488bc02, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:df:71:5d:6d:9c:e3:ba:54:e1:41:93:56:
33:22:b1:38:63:5d:01:56:3a:7a:be:23:9f:cb:3f:
39:40:82:45:09:b3:1c:0c:15:b5:7a:b6:3d:07:4e:
38:99:1e:5b:40:59:75:4f:82:ea:5f:e0:19:ec:7c:
4e:42:af:b5:aa:dd:49:39:04:95:e7:17:be:6b:28:
7a:96:bc:f6:c4:07:c7:20:1b:af:98:eb:6b:f7:60:
a9:0b:8e:96:84:5b:c4:ad:af:df:f1:45:cb:f0:8b:
ae:14:54:6a:4b:21:44:bc:be:d5:8d:48:71:26:77:
7f:5b:d3:9d:b0:57:75:21:69:37:92:66:9e:40:93:
e1:b5:df:57:af:6b:65:cd:cc:b7:36:22:a0:4a:cd:
89:6f:99:4a:74:9f:ab:d6:bb:ab:0d:23:19:a0:b0:
b4:1c:53:85:18:c5:34:fe:f8:c1:92:e6:1e:a2:70:
21:0c:fd:85:52:9b:3f:de:e8:e1:49:ad:0c:e8:7c:
8c:d1:40:dd:cf:83:69:13:7d:a1:ea:cf:f7:2f:a3:
b4:ee:73:69:d8:fa:fc:47:5b:9d:64:a1:16:1b:2a:
e5:72:22:6b:07:f2:15:d4:5c:eb:e4:90:8b:32:59:
af:7f:70:26:53:df:ce:85:54:6e:af:9e:e3:06:38:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:B7:AD:BE:CF:C6:EE:BF:EC:81:7F:78:D3:12:0A:A4:E7:EB:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1000::/40
Signature Algorithm: sha256WithRSAEncryption
5b:49:15:ed:1b:d1:f2:c0:ac:37:34:51:f5:48:42:15:37:95:
7b:bd:2e:ab:ea:60:af:23:36:a4:a6:13:a7:37:3c:fd:2e:29:
02:65:d9:38:d4:60:b8:1a:3f:99:26:dd:8e:7d:3e:04:cb:89:
61:15:bc:8d:c1:42:b1:b8:2f:2f:93:a7:c5:64:00:2e:83:90:
b4:03:3a:86:34:d5:96:a8:8a:81:a3:0d:75:15:d3:00:6c:5e:
b6:36:1a:d4:49:f5:df:8f:d6:f9:16:cf:4d:e2:d9:9d:4a:47:
92:1e:40:aa:5d:04:dd:d9:42:f5:49:ca:91:ef:d5:8a:6a:70:
ff:5c:88:3f:4a:cb:1e:6e:ab:5a:e6:4f:48:65:42:61:f5:35:
19:b9:ab:b8:2b:bd:3b:fb:07:df:51:c5:39:07:45:3c:a4:c9:
c6:b1:1b:7b:48:9b:64:9a:27:44:be:cf:7b:0c:3d:5d:e3:da:
78:7b:61:a4:7f:e4:d2:29:4e:1b:43:f0:24:f5:fb:bc:a4:a1:
58:64:41:8f:5c:34:05:1a:5d:a0:cf:88:b3:13:a7:5e:41:5f:
98:76:08:e5:54:66:c9:6a:a4:75:02:ef:d9:6c:91:b1:a6:22:
fe:26:b9:cb:ce:08:7b:9c:5c:be:cb:90:bc:8c:0c:2f:dd:36:
ee:56:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:50 2026 by rpki-client