Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
File: cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa (raw, json)
Hash identifier: gOF+dgAZDiy1fF1OP6Am/E6JWHm+Ym8TbtOmbzXMqPM=
Subject key identifier: AF:E9:F3:7A:54:E8:50:DE:E7:97:55:82:79:B1:AB:5A:BD:DF:21:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6204A00FE1C6EC21AA7769D90B14F844DD0CAC05
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
Signing time: Wed 05 Aug 2026 02:00:05 +0000
ROA not before: Wed 05 Aug 2026 02:00:05 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:04:a0:0f:e1:c6:ec:21:aa:77:69:d9:0b:14:f8:44:dd:0c:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:00:05 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=5343086d830628cba0bc2104cb1c09f54d9167360c018776ca74b87f325b75ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:52:a2:16:b2:1c:98:5d:d7:e5:af:ce:4b:
5a:e2:44:60:d9:bf:2d:dd:83:4c:c7:4e:fe:9a:ed:
8f:ec:5e:21:85:e0:c6:2b:5d:0e:d3:84:d0:13:66:
c2:3e:a6:70:b8:2c:c9:85:a4:31:bc:66:47:15:2c:
40:82:b9:5b:36:56:d0:10:c2:9a:ea:d9:46:b1:0b:
ad:f7:1b:18:91:e1:e1:ea:c1:b7:5c:14:9c:01:6f:
10:2d:a2:00:a6:04:5d:90:a4:0c:da:81:00:70:2a:
c3:a3:e7:77:2e:9c:33:83:2e:77:c1:96:5f:e4:57:
16:61:d7:b7:bc:af:14:25:e9:92:e3:9b:d3:ba:48:
36:f3:ce:d4:a0:27:1f:ae:ab:a6:42:b3:6e:49:80:
ce:ad:03:6f:31:58:39:43:3c:e2:8b:39:35:05:e0:
bd:35:d9:e0:1d:2c:c1:f1:50:e5:72:6f:66:c5:d2:
06:9b:a9:4d:64:6b:92:30:7c:64:6d:fa:b4:0f:7e:
57:43:65:a4:9b:03:aa:f8:2b:01:b6:dc:d3:cb:ce:
81:bd:e1:bc:51:45:9c:0f:ee:68:dd:e1:e1:5d:de:
c2:5c:18:b6:d3:78:f1:47:96:4a:88:0e:8b:98:4c:
32:4f:88:27:36:b0:45:f9:e7:b7:b7:ab:44:3d:e9:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:F3:7A:54:E8:50:DE:E7:97:55:82:79:B1:AB:5A:BD:DF:21:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:800::/40
Signature Algorithm: sha256WithRSAEncryption
17:7b:02:c3:dc:a3:bd:bd:24:62:d9:de:b6:e0:ad:bf:ca:2f:
7a:1d:62:ee:e8:15:f6:c4:be:23:f8:8d:f5:c6:a4:64:8e:b9:
bd:70:c8:94:18:ba:57:b7:9c:8d:a5:d3:7e:2d:7e:3a:a3:d4:
dd:b9:3f:f9:6b:0e:d0:d0:8e:25:59:f9:c2:ee:67:ab:2d:69:
1c:d7:46:dd:46:fa:2f:a6:14:78:ad:ca:97:8e:e3:da:cc:ed:
78:17:58:35:d9:e7:50:3b:13:68:41:14:2f:84:a0:9d:40:e4:
c5:f8:05:d2:82:2b:4f:25:63:02:5a:87:62:04:ca:bb:ca:e1:
87:c2:af:4c:4c:dc:7b:a4:3d:45:6b:64:86:ac:4c:43:54:77:
17:28:9a:86:94:99:35:b1:d9:82:c7:90:14:b0:44:6f:1f:1f:
a0:a7:1f:9c:de:93:d1:9f:f9:c0:40:d3:ab:4a:39:69:00:97:
52:d5:d7:f1:53:e9:81:75:15:8d:27:6f:a8:de:de:b8:7d:67:
32:8a:da:5b:31:53:71:0a:e0:d6:29:51:7a:96:4a:36:5c:a4:
eb:6b:d2:28:1c:55:82:34:05:97:a3:d2:19:70:93:85:95:5d:
4b:95:35:60:b0:5a:1b:c0:b9:2e:38:a8:91:df:06:82:85:00:
70:de:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:06 2026 by rpki-client