Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa
File: cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa (raw, json)
Hash identifier: +cwwwgDXlInIDzJW1epk42miwcWWCddMc5S87TRUhOM=
Subject key identifier: 9F:E5:2B:0E:6E:3E:52:FF:21:63:B0:35:3B:4F:56:8D:DB:BF:67:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04DA6582811BA346A6BE8AECD4C492B820CC73FC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa
Signing time: Mon 10 Aug 2026 01:00:32 +0000
ROA not before: Mon 10 Aug 2026 01:00:32 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:da:65:82:81:1b:a3:46:a6:be:8a:ec:d4:c4:92:b8:20:cc:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:32 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=c43f7bbf6771f94285770b9e602dae50eef996dafba90444753e70eaedd1932c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:be:30:fe:1c:77:58:85:30:9b:bd:8e:ed:
68:bd:61:ab:ca:08:a9:8e:72:7d:dc:a8:52:b8:7d:
4b:84:54:cc:90:97:d7:42:a9:4d:25:d2:5d:28:2a:
03:65:d6:77:d5:f3:8f:53:21:d1:75:a5:d0:01:5d:
fa:78:0c:ea:0f:a7:65:ee:d9:bd:a6:fa:44:84:2b:
3f:a9:3a:af:ca:52:b9:f5:65:02:9a:b9:02:bd:1a:
04:4c:75:90:e8:96:81:5c:19:50:77:f5:27:26:36:
43:67:85:73:e2:51:43:3e:89:32:5a:f5:2d:2c:c4:
4e:1f:0c:2d:f3:a8:2f:eb:be:69:d9:05:9e:7d:63:
b3:4a:46:b9:98:aa:f4:e6:25:a7:63:ac:e0:9d:25:
f1:5d:e3:c7:c3:b6:1d:e7:fc:b8:10:1c:21:da:b1:
bd:e5:87:f7:65:f6:b3:38:75:bf:5d:19:d1:a2:18:
64:a5:5c:71:f3:ce:d0:be:5c:26:27:7d:e5:c2:a1:
fb:98:57:75:ea:39:eb:2e:76:89:31:8c:64:bc:99:
67:9e:39:bf:ef:98:45:e6:b2:36:31:66:c3:7c:3c:
98:80:3c:d1:6f:fa:a1:ab:11:92:6a:e7:f5:82:fc:
ea:26:fb:4c:12:8e:5c:9e:d1:fa:ed:73:92:b9:7f:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:2B:0E:6E:3E:52:FF:21:63:B0:35:3B:4F:56:8D:DB:BF:67:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:6000::/40
Signature Algorithm: sha256WithRSAEncryption
1a:b6:45:01:c4:32:a4:1c:ec:57:42:00:8f:62:ae:c6:4b:de:
7e:3c:97:b8:8c:7a:7e:3b:fb:6d:b6:08:4d:ae:15:de:d4:9a:
46:59:9a:42:fd:3e:3d:59:26:b7:02:be:50:eb:ce:c6:33:17:
d5:b7:7b:39:9b:87:bb:e1:f1:c8:ad:0e:3f:12:0c:7e:84:a6:
df:28:cf:11:79:ae:58:3b:56:69:a2:3e:06:4c:93:fb:0f:7b:
cc:50:17:a1:1b:c5:da:a3:f8:a1:21:77:61:b6:51:f8:5f:c4:
ce:8b:c6:07:68:72:7f:3b:a4:59:7e:48:73:a3:7b:97:52:70:
3a:0c:ee:a4:93:c1:9c:27:ff:cc:88:80:9d:9b:08:49:03:54:
1a:40:fb:cf:e8:bf:bf:d6:31:b6:73:0d:60:97:68:5c:20:b7:
11:40:12:95:42:46:8c:d0:cc:5f:ca:7c:06:f9:18:09:9f:d1:
57:40:15:1c:d4:f8:c9:82:8a:40:d2:52:42:7c:43:4a:f2:77:
d2:8e:3c:88:ae:bd:a9:3b:61:8a:5a:8f:b2:7f:e7:0f:c1:b4:
d7:fd:aa:7d:f7:71:55:e4:fc:2a:07:e1:4a:9b:ab:7e:46:1d:
02:72:0b:f7:61:08:b0:7b:0b:98:6a:9e:cd:17:a1:e1:70:48:
40:ba:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:39 2026 by rpki-client