Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf78b714-ce6c-4a9d-a72e-d30a3470f002.roa
File: cf78b714-ce6c-4a9d-a72e-d30a3470f002.roa (raw, json)
Hash identifier: N36ilzMxjHwHCmr8b/cSNrJ3+ERNJWyFjSkFXqeHnRI=
Subject key identifier: 94:BA:AE:F8:25:A9:7A:43:DB:85:B3:42:A6:0C:82:13:D4:EC:32:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7977E12075932318643F8B8669778DC0A00C0594
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf78b714-ce6c-4a9d-a72e-d30a3470f002.roa
Signing time: Mon 03 Aug 2026 02:00:07 +0000
ROA not before: Mon 03 Aug 2026 02:00:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:77:e1:20:75:93:23:18:64:3f:8b:86:69:77:8d:c0:a0:0c:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=0cb101140e21ac4e70834a7e53e1d0d8e9a7725775cf7fc1a8ac77246215c83c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:2f:a7:31:63:2d:27:54:30:9a:cf:9d:f2:
36:60:c6:5e:62:64:39:aa:c1:77:0f:34:b4:d1:d6:
28:75:8a:58:11:db:50:37:51:bd:a0:dd:7a:89:a1:
2c:1b:d0:9d:0d:6c:ec:84:02:27:92:d7:9f:7f:9d:
2f:d6:d6:90:b1:fd:8a:59:bb:6f:d2:92:65:ca:1c:
85:3e:72:df:43:3c:2f:d1:f0:40:0c:89:76:37:7c:
44:49:f4:b0:1f:87:9b:f7:b0:d4:8e:ad:49:d7:8e:
cf:d7:8a:a5:91:7e:cd:c9:c8:4f:cd:94:3a:d7:09:
4c:07:2e:6d:9a:78:82:2d:56:73:99:49:dc:95:b4:
64:6e:23:61:c3:b0:8c:c5:eb:f4:39:c5:bd:af:8e:
e7:0b:54:f2:4b:ff:49:81:49:44:0d:73:22:a3:74:
b6:ec:81:78:5c:df:4e:b8:1f:78:71:60:32:4c:18:
72:46:28:ad:b0:8a:18:0e:dd:69:9b:db:11:6a:36:
75:19:98:41:ec:d7:bb:81:07:9b:47:8d:5c:ad:d3:
e8:d5:9c:6d:cd:fe:8e:7e:38:e3:23:73:5c:eb:40:
5f:1d:03:45:9d:fe:5f:f4:67:1f:cd:fc:64:09:e8:
54:b4:05:9b:d3:75:ab:66:c8:33:a8:75:62:b6:85:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:AE:F8:25:A9:7A:43:DB:85:B3:42:A6:0C:82:13:D4:EC:32:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf78b714-ce6c-4a9d-a72e-d30a3470f002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:5000::/48
Signature Algorithm: sha256WithRSAEncryption
14:f2:c8:b8:ad:28:74:65:3f:6d:84:dc:1b:e3:fe:61:51:27:
20:b2:67:12:f1:b8:e4:0e:9c:e1:2a:f1:0c:0f:d6:09:bf:48:
2e:a4:a4:65:16:99:2c:f1:99:40:03:8d:02:16:40:e5:6a:06:
21:57:24:6b:a8:2f:e0:d5:38:ab:64:2f:55:ad:52:91:b8:36:
a9:8a:98:40:8e:a9:84:fe:2d:3b:2b:2f:ce:ec:77:0f:5d:ae:
30:20:e0:a7:e9:11:87:49:2b:3b:53:de:20:24:2d:db:c5:d0:
b1:fb:83:92:99:e7:48:2c:03:d7:f5:f0:7e:0b:f6:89:73:28:
db:04:07:7f:3d:0b:0e:ce:7a:22:89:23:28:2a:5a:35:1a:23:
ab:70:37:ae:a1:38:70:6a:85:9a:5c:3b:32:95:cb:56:f8:08:
8a:33:dd:45:c1:3e:c4:d8:dd:5b:72:35:4d:aa:57:7e:9f:e8:
27:f7:c3:b6:3f:cd:b2:0e:71:8a:6a:d4:7a:c5:45:95:a5:74:
41:c0:b0:45:29:73:e2:fd:dc:e5:fe:7b:f3:0d:cf:6c:8a:1d:
64:0b:a6:38:6d:e1:4f:ca:b3:fb:fb:2a:ed:5d:e2:ed:32:74:
68:ab:e4:b1:5e:90:e9:ba:30:4e:79:80:88:a4:5b:86:97:fd:
c9:b8:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:47 2026 by rpki-client