Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf98d1c0-6902-467c-a927-67601c51d140.roa
File: cf98d1c0-6902-467c-a927-67601c51d140.roa (raw, json)
Hash identifier: mK+dNgwGZpnovTuwuMdX+spXMONHhG4Lj+8I0RYg77Y=
Subject key identifier: 4B:C5:51:CD:60:D3:0B:1B:49:36:73:99:38:DC:2E:AC:C0:A3:0E:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D43408A6A4520DC0CB2732F20757188D78ABB20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf98d1c0-6902-467c-a927-67601c51d140.roa
Signing time: Wed 19 Aug 2026 01:10:23 +0000
ROA not before: Wed 19 Aug 2026 01:10:23 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:43:40:8a:6a:45:20:dc:0c:b2:73:2f:20:75:71:88:d7:8a:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:23 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=2f545378e54e30489253954082ce1a8e4777af57026ef804e04dac6321337642, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:a4:ce:3d:da:8b:24:5f:31:24:60:3d:33:
07:1e:b4:8b:da:b7:56:f4:2f:d9:57:63:93:5b:a6:
58:7f:37:21:f4:ab:56:35:f7:51:ba:01:82:e1:08:
6d:23:b3:a2:be:50:69:87:11:e1:26:b3:7f:77:c3:
a0:eb:ba:68:fd:54:ff:33:c5:2a:64:71:82:f5:d9:
a8:9d:a7:6c:66:0e:21:b5:15:f6:a3:07:0c:6b:c6:
81:7b:b0:40:91:a0:7d:ce:bf:8f:1d:5a:8c:fb:c1:
17:f7:f5:cd:53:9a:b5:95:fe:35:b6:65:80:f2:71:
08:f8:76:f3:db:a4:39:08:74:ed:41:c9:e6:f7:20:
f8:c0:f7:64:1c:e1:30:f1:ee:3e:c3:86:71:98:c5:
f0:c9:dd:c2:b5:7f:39:a4:a7:7c:57:d0:68:d2:c5:
b5:e1:35:df:03:c7:07:cd:26:e6:47:b8:d9:d2:58:
7c:0d:3b:6b:12:ba:a2:44:e5:24:4c:3e:9a:bb:96:
b7:d3:b8:be:b6:90:d5:c3:7a:51:1e:64:71:2c:a9:
6d:c3:de:6e:9a:fe:c1:b9:1d:e2:4c:4d:f7:e1:20:
e6:48:7c:98:9d:5b:1c:01:bc:84:65:90:4c:34:bb:
31:63:68:32:12:5b:0c:fe:ca:02:70:d9:dc:45:bd:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:51:CD:60:D3:0B:1B:49:36:73:99:38:DC:2E:AC:C0:A3:0E:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf98d1c0-6902-467c-a927-67601c51d140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:66:60:f6:eb:8d:0e:0d:fc:3a:04:5b:31:3c:9d:0b:e6:14:
5b:41:34:71:b3:7a:44:b1:aa:28:9a:f3:64:31:82:c2:4e:14:
07:eb:2c:7b:f6:29:7b:8b:be:a4:55:cd:27:00:35:63:de:db:
d0:3b:58:f0:a2:2d:03:f0:d1:d4:74:3f:3b:d3:ea:f3:b2:d9:
4e:d6:cc:ec:48:04:31:41:bc:34:30:83:c0:98:7b:26:fa:96:
bd:2c:86:0e:bd:6c:9b:bd:4f:0c:a1:23:c2:8c:33:07:54:43:
f6:b8:b7:8c:fa:66:aa:fa:f1:0e:28:49:41:ff:fd:1e:64:58:
8e:4d:1c:13:2c:4b:11:af:6f:be:5c:f6:03:a3:ea:2c:71:3c:
7b:00:bd:95:2a:bc:10:26:4e:4e:e6:f7:d9:7a:d7:75:98:e3:
d3:47:7c:1a:ea:58:cc:5a:4f:64:08:6d:c1:94:4e:a7:fd:c6:
9e:6f:90:78:1b:ab:61:a0:a3:55:2c:c0:11:43:48:07:16:c7:
8a:3e:14:f4:fd:1a:b4:91:ce:51:21:5a:6b:47:bc:f9:78:a2:
12:c6:74:72:90:e2:2a:03:48:3c:78:b6:13:47:c2:ae:6e:ca:
15:cd:b9:bd:80:a8:c3:f7:10:40:23:b5:59:f2:4c:2c:6c:e4:
ef:ac:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:30 2026 by rpki-client