Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb75e53e-4e44-41b7-95dd-e3d54ff36386.roa
File: cb75e53e-4e44-41b7-95dd-e3d54ff36386.roa (raw, json)
Hash identifier: 2mi47rJOnPG1CNKW08vEcORrzMbPC1/uqOYE2R7ZqXs=
Subject key identifier: CE:ED:49:72:CC:D6:86:A4:16:57:FE:72:F8:30:15:75:88:0B:3B:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18DB3971D38AE13F60F27AFD5974AD79FA3E2BDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb75e53e-4e44-41b7-95dd-e3d54ff36386.roa
Signing time: Mon 03 Aug 2026 02:00:09 +0000
ROA not before: Mon 03 Aug 2026 02:00:09 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:db:39:71:d3:8a:e1:3f:60:f2:7a:fd:59:74:ad:79:fa:3e:2b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:09 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=f924dd2aefa76159f8d31759b01b30da731301a64d2fc275f968e4dde3886b1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:c4:c6:7d:d2:19:e9:9a:53:49:75:54:53:
72:76:92:23:07:32:d1:00:89:b1:cb:6c:8a:fe:37:
ef:e1:7b:31:77:c3:f2:ec:8c:fb:b3:f1:0b:2e:fe:
5d:67:d6:e9:50:27:00:1f:a1:31:4b:e3:d4:76:0c:
ac:1d:fa:d9:88:17:7f:e7:d2:80:c4:34:fd:76:75:
9f:92:66:12:a3:c0:5b:78:0a:8a:a4:41:dc:6f:d8:
19:53:4b:ba:eb:53:ff:48:d4:09:64:fb:8e:6f:72:
25:21:69:dc:5c:8b:50:7c:cb:7c:24:73:a4:bb:0e:
97:1c:ad:0f:17:6f:31:65:61:83:5d:35:a9:53:d9:
eb:55:0e:15:14:6d:42:eb:87:5c:d3:39:99:35:d1:
98:69:26:2c:c5:45:4b:36:00:a3:1b:3b:81:ad:c4:
e8:66:d1:ea:01:2c:7f:bd:f7:19:bd:0e:81:71:5c:
0f:ce:1f:0b:3e:b9:20:f4:f4:3b:cd:25:41:da:07:
94:d4:04:62:38:b5:22:5e:a2:12:e4:fc:88:83:2b:
82:11:a4:8e:fc:d8:64:ba:e5:0b:87:9f:47:e8:e1:
17:89:f3:03:f2:6f:45:9e:3a:26:a5:85:d1:65:0d:
3b:be:dc:9c:92:33:ad:5f:e5:08:02:1b:10:59:0a:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:49:72:CC:D6:86:A4:16:57:FE:72:F8:30:15:75:88:0B:3B:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb75e53e-4e44-41b7-95dd-e3d54ff36386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:f000::/40
Signature Algorithm: sha256WithRSAEncryption
43:7f:e6:16:2d:8c:c9:fd:b3:40:ba:d6:d8:46:36:e8:c0:41:
d0:87:b7:b6:a1:ae:39:27:18:30:b9:38:26:da:f0:3f:fd:51:
1e:52:6c:77:35:c9:1f:56:3b:79:e8:e1:d9:43:a4:f5:06:ec:
e5:95:39:96:fe:8a:0e:f3:9f:c1:0a:92:46:60:f2:54:f2:f8:
94:e5:4e:f3:ec:1d:51:9e:cf:3a:15:67:e6:44:58:e9:f8:1b:
6b:74:dc:2a:d6:88:eb:5f:cc:15:9a:18:1b:ff:53:06:91:40:
15:f3:94:8b:63:9a:75:2e:ff:19:67:7b:df:24:60:36:cd:f6:
3d:a5:05:73:20:38:2d:48:b5:98:69:05:15:2f:aa:dd:3b:4e:
27:f5:46:9c:9a:90:0f:83:ca:71:ed:4e:83:28:70:cd:72:f1:
7a:8f:00:56:db:08:2f:38:42:1f:ba:65:aa:78:53:42:17:3c:
87:eb:62:80:5b:a4:c3:37:57:ef:f7:ac:e8:93:85:57:2a:ed:
e0:1c:d2:90:1f:22:fb:0e:f9:b5:8a:a9:5c:0e:62:75:e6:60:
82:06:47:ac:79:ba:6f:d1:cb:17:42:b4:18:a5:82:9a:19:3e:
af:28:3e:c3:bc:14:09:4f:34:60:fc:1d:27:f5:3b:37:c0:0f:
94:dd:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:37 2026 by rpki-client