Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cda3712d-34a6-428d-a694-19bab377c44e.roa
File: cda3712d-34a6-428d-a694-19bab377c44e.roa (raw, json)
Hash identifier: xelaV8oBoQPFHWLLrEW535YSJHhoatwXZpZmga4cxU4=
Subject key identifier: 62:8D:9E:AD:BC:EB:FD:75:13:54:D4:23:F5:71:9E:95:32:7B:49:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 662E15E7104F56DC10E960BFB20031D3E5018F20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cda3712d-34a6-428d-a694-19bab377c44e.roa
Signing time: Fri 07 Aug 2026 05:20:12 +0000
ROA not before: Fri 07 Aug 2026 05:20:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2e:15:e7:10:4f:56:dc:10:e9:60:bf:b2:00:31:d3:e5:01:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=2bd882ef884c2c151edcea73177f20d737d3aac6fff0b0855cd3d2d7d4fc0c2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:b0:da:c6:17:c8:ba:0b:18:af:a5:bc:bf:
31:da:2d:a8:ce:68:4b:5a:51:d4:c5:28:6c:05:4f:
ea:39:d9:bd:85:97:40:bc:cc:f0:14:57:99:00:0b:
68:c4:af:26:f4:0d:63:32:ba:8b:7f:61:45:f6:c4:
86:b5:ea:b8:2f:a4:02:bb:08:8f:68:ef:f9:de:4c:
69:66:4e:e4:fb:25:da:c3:c4:7f:cd:ee:3d:c9:5e:
35:33:18:be:29:42:7c:44:62:04:f6:98:a5:18:ef:
da:4f:ba:44:81:1e:4b:3c:fc:46:50:3c:de:f6:d8:
33:60:c0:e0:db:b3:15:7f:d1:00:51:4d:62:8d:46:
ba:1e:c1:43:2b:8f:f2:ea:23:ac:32:af:a3:3c:35:
28:38:12:9b:1e:99:d3:f8:bf:c0:90:2c:b3:fb:d6:
e3:0e:51:69:42:6e:7a:2d:fe:5d:c3:fe:67:83:07:
2d:0c:05:70:aa:88:bf:01:2a:a1:c4:de:54:d6:a9:
77:8f:b4:b7:bc:4a:ca:a1:53:5c:5f:55:fa:84:b0:
77:94:2e:11:85:d8:30:7d:cc:e0:4d:3c:c3:2e:a9:
f9:c7:d0:5e:91:94:fb:6c:b1:d7:62:f0:bc:19:61:
f6:9d:67:5a:70:49:39:4c:03:dd:d2:fb:9e:49:70:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8D:9E:AD:BC:EB:FD:75:13:54:D4:23:F5:71:9E:95:32:7B:49:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cda3712d-34a6-428d-a694-19bab377c44e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e::/38
Signature Algorithm: sha256WithRSAEncryption
70:63:3d:e8:85:09:fb:a5:da:45:79:55:6d:5a:e7:d5:29:8f:
43:25:d2:1f:77:bb:db:be:81:40:3c:88:5e:54:35:8f:e2:67:
d0:54:09:5f:3c:16:55:b5:95:42:59:d9:63:63:d1:0d:b5:b1:
43:a8:c8:d3:e3:25:42:08:37:e5:0f:12:7a:66:e4:ab:2d:27:
02:e7:b2:28:86:a0:da:34:46:33:e9:9b:67:60:10:17:39:f3:
ff:15:d4:2b:f7:ce:8b:39:49:d9:75:54:5c:20:05:1f:a0:10:
11:b8:c6:46:91:58:35:6c:65:e8:67:b5:f6:9a:4a:00:94:3d:
1f:9a:46:42:3b:a7:3f:9c:01:f6:e7:5e:62:00:4b:c9:79:0c:
ea:e4:97:c4:d7:fe:51:28:a2:81:01:e3:38:cd:22:15:87:09:
af:0d:7e:58:d5:5a:3e:9a:d6:c2:c3:fe:ac:2f:2a:a9:90:7f:
63:04:80:2d:37:45:13:dc:3f:b2:e1:eb:e0:5a:e5:0f:dc:87:
de:00:69:6e:cb:d3:5b:3a:0e:92:7d:c9:cd:f9:d9:27:38:4f:
ce:76:79:34:3a:8f:9c:f2:e3:d6:2e:32:3e:d4:44:99:9d:95:
b3:c2:c8:5e:57:53:35:3e:e0:f9:ec:c4:62:8e:ce:1d:e1:17:
d1:f8:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:41 2026 by rpki-client