Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
File: caf40866-a0b4-4882-b28e-32602ae3e0df.roa (raw, json)
Hash identifier: egi/3tLhg5i112L5n0Fjxs7uXkHPWBBIodDkP0QFWyo=
Subject key identifier: 76:CD:55:C4:D0:2F:A7:EC:49:88:3D:3A:70:C4:06:7E:D7:B8:64:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AEBC7FCBC362276A474D274D5E88EF8E86F3C3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
Signing time: Fri 07 Aug 2026 04:51:02 +0000
ROA not before: Fri 07 Aug 2026 04:51:02 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:eb:c7:fc:bc:36:22:76:a4:74:d2:74:d5:e8:8e:f8:e8:6f:3c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:02 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=46023123033aae03d611bd40b433f90d93f1f6fba52aedbf87dd4798072b3020, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:b4:41:e2:42:54:23:76:62:52:ab:30:cb:
e9:53:22:5f:6e:14:95:0e:79:98:1c:44:fe:4d:84:
9b:44:fb:ab:1e:a4:f3:83:84:6e:e0:81:67:b6:6f:
2b:3f:72:13:68:dd:2b:54:f3:b0:83:b9:d1:21:a0:
32:88:c2:55:d7:96:d2:46:46:3b:fb:0b:61:3f:c2:
47:16:a8:99:9a:62:3a:be:e7:f8:90:56:8e:59:09:
00:3b:98:c2:ea:c3:88:7c:9b:47:e7:81:be:69:c0:
52:96:aa:f9:54:d8:bb:67:53:d6:14:df:44:b6:32:
05:15:57:1b:50:4c:13:f3:3a:e3:ad:24:40:d6:98:
63:58:56:e8:0a:08:71:88:40:f8:b3:5e:af:97:4c:
ee:69:f5:f8:a5:3d:0c:be:1c:5a:b4:f1:11:38:c1:
5f:f1:ba:7c:53:d6:cc:9b:20:80:66:64:27:03:09:
76:ed:70:52:af:cf:4d:ab:d6:cd:88:44:8c:e7:6d:
0c:b0:a5:da:d2:3c:3b:52:8b:5f:90:8a:44:0c:c6:
0b:56:42:2a:54:b3:d8:b4:3b:9b:ae:2b:0d:0c:eb:
0e:81:d7:37:0d:a7:98:d4:ea:5a:a4:42:0a:eb:8e:
94:21:8c:da:32:f7:35:38:26:8b:8f:18:d7:5e:d2:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:55:C4:D0:2F:A7:EC:49:88:3D:3A:70:C4:06:7E:D7:B8:64:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:a000::/40
Signature Algorithm: sha256WithRSAEncryption
89:07:d5:b8:6e:d0:6a:b5:2d:94:2f:8a:da:d5:4d:38:51:fb:
ef:40:e7:b7:1e:49:18:cc:60:b9:81:b9:07:af:42:62:29:cc:
a7:17:e8:d1:3a:3e:57:89:b5:2b:b1:f3:b4:0a:24:69:f9:e0:
94:fa:f9:9f:44:04:6d:97:b9:9b:1a:f3:b6:dd:26:5e:2a:de:
b7:e2:58:d6:01:20:78:0a:e8:24:63:20:43:52:d7:87:76:aa:
70:9d:7e:26:23:c9:92:a9:38:05:58:37:57:52:6e:c6:25:38:
a4:28:97:36:91:32:83:d0:1a:06:6a:15:31:d8:ab:a8:39:34:
d1:6b:f1:ce:1a:39:2f:7e:ac:0f:9b:67:bd:95:8c:1d:d4:b1:
ab:8c:df:82:73:c2:92:15:cc:79:61:90:38:6a:34:33:51:dd:
43:a4:75:6f:33:8b:cc:fa:77:81:32:fc:3e:cc:11:9a:96:31:
cd:18:69:d8:c5:f1:c1:77:1f:53:16:2a:4a:38:69:b7:9b:58:
14:ed:41:41:74:f7:db:27:ac:e4:fe:20:6d:f5:76:fd:84:a5:
b1:fa:47:59:2f:58:96:1e:2c:78:b9:ac:07:9f:39:9b:2c:8d:
7b:7d:27:3c:45:6f:fa:20:b2:18:af:13:e5:92:63:a0:7d:80:
51:7c:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:42 2026 by rpki-client