Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa
File: cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa (raw, json)
Hash identifier: 2o/lQ1ZdoF70avQ3LaqpOcENSNMdo808xjlqGDKh+GI=
Subject key identifier: C1:DF:CE:68:57:AB:6F:F5:27:B9:43:4E:EA:AD:45:5C:B0:38:B4:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C17BABE4F089E43D1FF2A56062075B94E57164A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa
Signing time: Fri 07 Aug 2026 05:40:44 +0000
ROA not before: Fri 07 Aug 2026 05:40:44 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:17:ba:be:4f:08:9e:43:d1:ff:2a:56:06:20:75:b9:4e:57:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:44 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1d728e58d0d66b6ccf7cbbc3eb9f5b4456d2aed699ea8f40eba3dabf5c41972c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:cb:e8:44:87:21:4a:c2:bb:76:64:a7:50:
63:74:0c:a8:ae:83:21:3c:7d:9a:c1:e3:9e:58:b5:
2f:47:5d:e6:41:07:2d:80:cc:77:6d:eb:9d:6d:66:
29:8d:0e:81:11:1a:5b:20:ea:6f:28:e5:66:cb:f2:
fa:59:d8:1e:7d:99:a0:2b:8a:48:86:a0:09:b2:28:
49:75:64:1f:ea:2e:5f:fe:53:2c:df:a0:58:88:9e:
5c:7f:5d:ff:1a:1e:3d:68:19:14:60:5f:80:ad:bc:
82:50:90:16:b1:cb:2b:9e:31:60:70:01:80:73:11:
b0:c9:e7:9c:eb:8c:a2:4b:cf:fd:0f:35:62:27:de:
61:10:b6:5e:08:64:ad:d2:de:17:c2:b6:1a:07:a8:
9f:c0:e9:c9:3d:bc:d4:8f:26:a8:f8:ff:fc:44:9e:
71:70:0b:dd:1d:73:28:ff:bb:8a:c2:83:37:80:6b:
30:32:63:98:44:ca:1f:53:59:17:48:f8:84:f1:69:
66:4e:a5:3f:40:f1:a9:a8:99:b7:50:9b:e6:46:e0:
d4:50:56:c7:a9:a6:df:31:24:9b:45:46:04:53:de:
fc:67:38:a4:ac:b9:4f:d1:87:0a:e1:55:f4:50:6c:
a4:38:6f:49:9d:b7:a8:c0:03:06:4c:40:2d:2c:ac:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:CE:68:57:AB:6F:F5:27:B9:43:4E:EA:AD:45:5C:B0:38:B4:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:a000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:ea:c7:4b:46:49:2f:e1:a8:43:ff:04:28:f3:bf:3d:e3:7d:
d1:77:06:48:4d:00:e5:aa:25:99:7e:51:2f:58:ac:91:b0:41:
17:69:30:d0:1f:1e:c5:ce:64:32:f3:99:cf:4f:d5:89:68:66:
32:89:a8:92:f3:c9:82:5b:75:aa:76:42:52:eb:b4:6d:72:f0:
a3:bf:fe:91:af:9e:33:13:3a:09:e6:5a:47:3e:de:c4:70:51:
b7:90:5e:79:6d:af:f3:f2:4a:89:73:39:3f:2a:85:2a:c4:9e:
89:3f:6d:1f:e8:1e:e5:9a:8c:ac:03:f5:d2:f6:f6:88:c2:f8:
78:04:10:ea:11:23:84:58:9e:0b:35:4b:79:b5:93:8d:d3:48:
b2:71:ba:2b:66:5b:70:38:d1:7f:7a:fb:57:35:5a:c7:0c:d4:
62:b7:09:e0:d3:ca:39:59:bf:15:c3:59:c5:70:7c:e6:f1:7a:
ef:35:ec:81:2f:1e:89:c6:9c:7b:fa:57:64:3a:15:51:e9:81:
b2:28:73:e7:47:ae:5e:26:dd:01:58:18:f5:01:d2:a2:ff:fa:
9e:11:cd:01:76:ce:a8:0f:34:e6:bd:70:ae:a6:09:8d:5d:07:
6f:78:20:5d:68:49:9b:c4:66:98:c0:94:11:98:4b:c2:43:52:
7b:39:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:44 2026 by rpki-client