Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
File: cead5bc0-2620-45bc-b97b-adb00020a426.roa (raw, json)
Hash identifier: Lp0WbC6eowPP+1TFNTlBIhY2ea8DXyA7FFbgGJVGNOM=
Subject key identifier: E5:EB:C2:94:37:95:C6:BA:A4:19:5B:A1:9D:48:24:72:64:03:67:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22560F29BA9F8E5E895FDD15187F34C52632F247
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
Signing time: Fri 07 Aug 2026 05:31:06 +0000
ROA not before: Fri 07 Aug 2026 05:31:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:56:0f:29:ba:9f:8e:5e:89:5f:dd:15:18:7f:34:c5:26:32:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=68852890bff7e65e9133f755c6706be1bcba2ec68ac5558d76401ffb755a41d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:02:0f:c5:66:e5:63:b8:77:48:b4:bb:72:
e4:f4:3b:84:91:12:4b:7e:fe:c5:25:9d:48:d9:9e:
a4:7a:aa:49:be:20:4e:4e:39:6d:d6:1d:24:ab:75:
c1:10:bc:84:d3:90:87:b1:5c:60:5a:76:04:72:e4:
17:f6:2a:3d:8d:53:42:f8:80:e3:67:96:d9:07:40:
1e:bb:16:b7:16:67:ae:d3:7f:18:2d:bf:0d:7c:bb:
91:21:85:5a:33:4e:cd:15:73:0f:be:c2:24:1d:8e:
ce:5a:63:ca:ac:83:2e:cf:fa:c4:15:6e:0b:ee:8c:
03:e9:25:d3:f8:0f:76:a7:e7:30:06:8c:45:0e:53:
e1:50:50:b8:13:cb:9a:ed:8c:56:42:66:29:6e:16:
ce:7f:c8:a0:ed:3b:52:2b:4c:76:bf:c0:39:8b:55:
c3:21:74:c9:df:00:78:c6:c3:ff:ab:59:61:e0:8f:
46:b6:1e:1a:5b:a9:a7:40:5d:7d:93:57:4a:52:ad:
15:62:53:5a:b5:6c:b6:63:9c:69:f7:6d:c2:5e:9c:
c3:b0:18:48:88:2b:fc:c1:60:45:5b:3a:ab:14:d0:
01:6f:34:a7:a8:d6:d1:5b:e2:d9:80:96:54:98:c1:
fa:f5:1c:4a:e3:d0:65:0f:06:d0:bc:a3:b9:c4:5d:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:C2:94:37:95:C6:BA:A4:19:5B:A1:9D:48:24:72:64:03:67:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e080::/48
Signature Algorithm: sha256WithRSAEncryption
04:a8:f3:4a:05:42:00:e8:6d:90:7c:d0:3e:e4:75:2d:db:d9:
60:94:38:bc:b2:48:37:08:dc:a7:4e:9c:84:36:dc:6b:bb:7b:
1d:9a:53:bd:92:77:31:32:4e:d1:31:af:18:26:10:d8:6d:c3:
c9:6c:04:36:4d:5c:6e:bb:72:e7:ad:c1:ed:c6:57:d6:5e:10:
ac:93:94:03:ce:f0:da:7a:c7:a7:85:7e:56:98:1f:f8:0e:ce:
be:7b:74:b2:0a:a2:ef:60:cd:fc:60:dd:8b:f4:3f:87:f6:9c:
5d:a1:4b:5e:5a:1e:62:c1:d5:44:2d:7d:bf:13:38:31:81:ec:
bf:f2:3a:0c:9c:06:a0:fb:37:54:a0:db:de:a7:a9:a6:75:c7:
09:cd:c1:74:7a:c6:3e:40:0e:39:c8:ec:e6:02:c7:30:44:f2:
c7:0d:8a:dd:08:1e:f0:52:6e:27:eb:67:bd:4c:e6:2b:d6:37:
98:ed:a2:72:56:21:fc:40:3e:40:bd:40:b7:37:47:f0:bb:df:
0f:9a:5c:24:a0:02:18:d2:f9:7d:f8:63:84:ec:d7:b6:8f:c4:
b6:2b:f7:e5:5b:b3:93:0f:9f:32:fe:c7:12:6c:4a:05:c7:cd:
a5:7c:15:ef:df:b2:95:c5:e2:7c:66:d9:94:76:25:30:78:59:
45:73:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:32 2026 by rpki-client