Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
File: cfca2455-b58e-43e0-a15f-276f8a5b527f.roa (raw, json)
Hash identifier: 7TEqhC8Jv/KCeVHX+N5tFWuJctiDJ2QC3ISPhBE1t1k=
Subject key identifier: 62:11:EA:C5:EA:A4:02:CC:E9:B9:46:B0:00:ED:E4:42:5C:0F:0C:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 799669CE8F40D5339A4DACEDC5958CE0FEF4C10A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
Signing time: Fri 07 Aug 2026 05:10:38 +0000
ROA not before: Fri 07 Aug 2026 05:10:38 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:96:69:ce:8f:40:d5:33:9a:4d:ac:ed:c5:95:8c:e0:fe:f4:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:38 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f250c8ee569504396de136b198ba22dd342970486ad945e92db644704dc06788, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:2c:56:ea:a1:7a:63:f7:f9:da:10:58:50:
74:73:f7:03:d2:6c:7f:26:9e:c6:ef:a7:47:3e:78:
9f:21:69:d5:b9:77:c9:b1:a4:2a:be:8a:60:29:ac:
da:85:c1:77:23:f7:06:a5:2f:04:0f:0e:b7:32:44:
24:56:cd:4d:96:57:08:13:17:6d:d9:da:47:22:fd:
45:51:01:d9:b5:b0:61:af:7f:80:1c:97:60:db:d3:
ec:7e:0a:e9:9c:b6:60:62:76:d6:72:34:51:dc:17:
ff:65:a3:eb:d3:bb:e7:7c:19:11:8e:6e:b4:56:75:
1c:60:74:f2:78:39:28:7c:7e:d3:01:0c:fd:e9:dd:
d1:2e:1d:35:49:d1:c9:5d:08:6d:59:8f:16:c6:d8:
05:80:bb:a7:cb:b9:f9:a8:f9:8e:de:a5:d0:03:53:
ce:77:29:8c:50:bd:e5:31:0a:64:09:8d:6c:d6:35:
d3:63:ca:d8:02:48:d2:14:41:cc:87:7f:ee:f3:fe:
e2:33:91:13:5f:f9:68:a5:6e:05:4b:2d:90:6b:00:
07:c3:9e:78:b5:1e:ce:b1:a2:6e:7c:36:49:c3:89:
f5:04:d7:16:37:a7:6c:86:9e:b1:98:a3:c2:26:2e:
6b:c9:f0:79:73:d3:b3:1d:ab:c0:f9:eb:ed:18:cd:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:EA:C5:EA:A4:02:CC:E9:B9:46:B0:00:ED:E4:42:5C:0F:0C:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e040::/48
Signature Algorithm: sha256WithRSAEncryption
37:77:b3:cd:b8:02:2f:61:bc:d1:4f:28:9a:b1:eb:ca:e8:23:
43:b4:f1:b0:c7:2c:1f:5e:b2:9c:04:a3:8e:32:12:35:b6:59:
f9:40:00:0d:07:48:42:b9:95:46:9f:4c:61:18:9c:c1:a1:67:
de:b1:2f:12:36:7e:06:94:ba:ee:06:f7:4c:c8:9f:f8:aa:16:
00:ac:f4:f5:fe:91:ef:fc:43:3b:3b:25:da:69:ba:34:19:5d:
18:ea:99:b0:f3:7d:c5:91:37:93:f3:58:0e:4d:34:a8:d8:b4:
d6:32:6e:f6:94:fb:8f:50:09:30:ce:a2:59:92:c3:8f:65:4a:
e3:ad:a7:03:6e:a4:e9:71:f5:0f:01:d7:3e:50:a9:5c:1b:7c:
19:03:b5:09:9d:21:eb:59:85:24:bb:b4:8f:4d:8d:04:a9:27:
9e:17:df:60:fe:ce:92:23:ff:17:a3:71:02:59:6d:79:49:a5:
0c:d2:8c:9b:f6:79:71:3e:62:b8:5c:86:e1:e4:36:cc:07:75:
21:e1:d3:06:68:77:cd:02:84:74:60:2d:81:40:9b:dd:5d:b3:
2c:98:28:92:1c:8c:e3:01:99:6d:24:ac:2f:c8:ab:f7:44:5d:
f2:40:ec:21:57:64:74:b0:dc:09:ff:8a:d3:70:9e:43:88:1c:
19:7b:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:30 2026 by rpki-client