Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa
File: cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa (raw, json)
Hash identifier: 3BlJBUdqyfY23Mu1ytljmtmSIdQw9dKQa64lGsAydm8=
Subject key identifier: 4C:02:AA:F5:FA:80:B0:C9:56:4E:73:DF:B5:AD:9A:E6:4E:FA:3C:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2448440F1D80E87F03982BDE0CF0314329AE3BA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa
Signing time: Tue 04 Aug 2026 01:10:05 +0000
ROA not before: Tue 04 Aug 2026 01:10:05 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:48:44:0f:1d:80:e8:7f:03:98:2b:de:0c:f0:31:43:29:ae:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:05 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=7e3e0ba24bb9df68e0379cee96ec7ab3349d1be8f22dd6e9d8daf4965f5efd04, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:dc:d7:e9:4f:a9:68:80:6a:82:93:4e:1d:
a4:df:f0:e8:36:5d:54:7b:15:58:1b:03:b3:1d:81:
38:d5:40:61:d2:fc:b8:20:a8:64:95:d7:63:82:ad:
de:0d:67:dc:54:85:cb:ce:10:a2:52:f6:af:fd:3d:
3c:52:ed:74:8f:6e:4f:25:0c:68:d8:8d:63:d1:87:
53:66:95:f7:d4:e6:57:9f:03:72:10:69:0c:cc:7f:
6a:fc:6f:68:92:dc:60:f4:4a:85:ed:eb:26:c0:b4:
58:51:55:f6:f1:ca:d9:03:ad:90:cd:f1:9f:d4:f1:
57:ac:e1:34:1a:d1:b4:38:e8:07:df:c1:88:3e:08:
29:a3:51:1e:0a:b8:d0:5c:ca:3a:f7:f6:95:56:fd:
8a:f9:64:18:63:c5:8d:f8:74:b9:01:6e:7e:5a:89:
6a:2f:e4:ef:52:bf:c1:97:69:1a:8e:e3:40:19:40:
3d:74:b3:db:ec:71:bd:4f:62:bd:6b:fe:33:85:92:
6f:4a:ba:d0:1d:7f:3c:d4:07:36:53:0d:6d:5a:6b:
1f:a5:2d:06:6f:7e:ba:86:21:cb:77:e5:bb:8e:6a:
5d:e1:96:56:11:27:73:07:01:1c:84:84:fa:a2:9f:
88:61:4a:77:c4:9f:d9:59:ab:27:84:e2:42:c2:74:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:AA:F5:FA:80:B0:C9:56:4E:73:DF:B5:AD:9A:E6:4E:FA:3C:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5a:4f:9a:96:d2:1b:2d:64:df:c1:1f:c6:b5:0c:be:d5:04:09:
ac:a2:16:35:fb:63:96:57:f0:23:3c:6f:f8:3a:2d:5e:a5:43:
06:77:6a:2e:70:60:66:73:b6:0d:1a:46:c2:01:36:54:89:9b:
96:e1:18:36:d0:fa:8a:29:58:c3:b1:bb:f5:5b:5c:8c:ea:80:
64:fb:cf:01:cb:3c:e5:0d:ae:31:df:4d:9c:9a:fd:e6:5d:b3:
b9:72:2a:cd:47:04:76:64:43:04:ab:eb:13:a5:4e:d8:61:3a:
78:65:ce:08:2b:0e:66:66:4d:ba:f6:1b:12:ef:6d:a7:75:b3:
42:31:5f:f6:c2:48:68:94:cf:67:82:36:67:02:6a:38:7e:a7:
09:df:8b:19:ef:39:4b:58:a2:d8:de:db:e3:14:57:81:cf:b2:
24:6e:5d:56:b4:41:0a:37:0c:81:f6:bd:59:fc:68:97:90:6b:
36:72:1e:8b:75:1a:e1:51:01:92:76:54:70:60:6b:fa:3e:2c:
4d:b2:59:88:6a:d1:5f:70:1f:f5:ac:b7:64:df:dd:68:6c:55:
65:33:b9:b8:22:cd:d1:a7:6d:8f:48:68:be:ac:89:0a:9f:af:
27:bf:dc:03:1c:66:e9:e1:29:7a:61:22:ca:38:aa:92:6e:20:
3d:d4:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:05 2026 by rpki-client