Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: yqEOQzb2BE39MAY+zEcYfr2qwabQxan1INY7uPSdm8w=
Subject key identifier: 83:65:BB:8D:DA:7D:1D:D1:64:EF:F7:EE:F8:67:B8:0C:1B:2B:57:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BA2AD6D173A1498D9B02CC66EC80FABA561FEC7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Fri 07 Aug 2026 05:00:27 +0000
ROA not before: Fri 07 Aug 2026 05:00:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a2:ad:6d:17:3a:14:98:d9:b0:2c:c6:6e:c8:0f:ab:a5:61:fe:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e24e3a3cf7b969b4787a037d6213fef8808fc310013890eb469e644ad745cb75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:41:14:56:fc:ca:52:45:0e:f8:cb:08:28:
b0:06:ce:92:78:1e:4b:b4:7b:8f:a7:3a:02:5f:1d:
cf:a5:0c:74:5e:c0:e2:55:f0:55:78:f7:cd:25:b9:
c5:54:00:be:97:5e:f3:4d:a3:c0:47:a2:eb:88:58:
d7:fc:39:23:9a:e4:60:d4:f2:6b:05:ee:17:f1:51:
2e:ba:07:24:4b:df:89:a1:49:7e:2a:9c:51:f1:41:
24:80:79:35:dc:d3:9b:45:56:6b:22:c1:26:c4:55:
70:d9:42:fe:b8:30:4f:bf:a4:c9:c1:e1:f9:87:28:
c3:09:dd:54:bd:4f:76:ed:81:31:a8:53:84:ad:3d:
b5:24:f6:2a:5e:04:a6:ca:32:d3:69:19:33:98:e1:
80:58:c1:e8:15:68:2e:62:4b:5e:fa:83:17:93:63:
62:f1:1a:7f:8f:06:4e:94:7b:59:30:0a:13:51:68:
57:0c:e4:0d:6b:c7:cd:b5:e6:5c:e3:87:e1:09:37:
c3:bb:51:5d:f8:98:e1:18:e5:a3:a3:1c:6f:a2:a5:
d0:7e:e5:6a:e7:8a:b6:39:37:18:2a:bf:f7:f4:b5:
0f:8d:9d:a6:0a:3c:47:31:87:86:0d:0b:20:17:54:
f2:7a:2f:e1:f7:c3:eb:cd:ca:82:dd:d7:cd:20:39:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:BB:8D:DA:7D:1D:D1:64:EF:F7:EE:F8:67:B8:0C:1B:2B:57:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:11:89:2a:00:77:90:23:97:83:0a:f9:0c:c5:b4:25:22:3b:
2b:4c:3a:63:41:b0:2b:e7:1b:05:6f:ff:1f:db:ff:cb:c5:6a:
9d:45:f5:54:3e:f1:f8:0f:f5:dd:a3:e7:36:72:37:80:92:72:
71:8f:06:05:e5:09:7c:7d:04:cd:26:0b:8b:c5:1f:60:f1:4e:
d1:a7:a4:97:cf:65:b6:f0:c4:96:f9:44:23:f7:38:a2:75:50:
2b:52:33:7a:25:85:7d:0b:a8:ee:29:dc:ed:69:17:4b:bc:74:
dc:69:94:63:ac:2f:96:b4:1a:1b:44:55:9e:76:20:92:94:c5:
d9:da:99:b8:c6:11:aa:bb:b0:8e:d6:a8:9d:5a:8e:7b:cc:d6:
7a:df:97:8b:2f:ad:60:27:4b:85:c6:c2:41:34:b5:57:9e:95:
1a:06:7a:a1:72:63:07:f4:39:52:72:1c:ee:33:3c:7a:0b:c4:
e6:77:a6:d3:86:b6:a8:9f:ad:33:54:ed:59:84:8d:aa:9d:b4:
7e:d2:ee:0c:71:0c:af:61:f9:d5:2a:7f:75:a2:d4:b3:6a:82:
3e:8d:66:0b:50:f2:63:d0:74:b2:8f:9d:a5:fc:05:3d:9f:ca:
fe:87:72:66:e8:74:d9:f5:60:1a:32:2d:67:30:d0:03:b6:6e:
40:e6:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:32 2026 by rpki-client