Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
File: d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa (raw, json)
Hash identifier: XcRu3SPSM8t333pp7rz+f9BT65+ZUCcEyRcH+gzZkZk=
Subject key identifier: 93:0A:CF:D5:E5:DB:F5:79:42:1E:13:CC:F2:67:15:5D:AD:30:6C:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1911DE92CC2B1B65DC2AE9DE7AA528DB81285E8F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
Signing time: Fri 07 Aug 2026 04:50:13 +0000
ROA not before: Fri 07 Aug 2026 04:50:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:11:de:92:cc:2b:1b:65:dc:2a:e9:de:7a:a5:28:db:81:28:5e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b0b81af7a9c5ee53e0b74090b0180682e8c50ddb5e129246eacaaf10f0add5ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:a4:b0:08:b2:01:39:2d:ff:04:49:64:ae:
f2:d3:fd:d9:08:8f:b2:21:b1:d4:de:ea:be:58:aa:
03:80:e1:44:d1:b8:91:de:ef:3e:18:29:5b:db:07:
e0:f0:9d:4d:a6:cf:e8:84:f7:4a:36:75:e1:fa:14:
26:2b:f8:e6:34:51:ec:9f:18:35:f3:2a:cd:7a:77:
39:9b:01:d1:6c:12:b4:76:e7:37:5f:7f:ee:4a:50:
5a:6f:c0:36:29:45:f1:cb:1b:1c:83:c6:04:6d:2c:
c6:a5:e0:8d:c1:9c:b7:e8:b6:80:08:6f:81:27:f8:
f5:e0:5e:8a:b7:30:d8:11:b5:25:8a:d2:52:b2:93:
19:e6:91:44:d0:ec:e2:5d:94:12:e1:12:f3:84:07:
70:57:bc:30:42:fd:8d:97:d5:49:28:bb:c4:3c:6d:
3b:bf:8d:08:9a:45:71:d4:e7:09:b3:37:4e:d0:72:
b1:42:31:af:84:a0:9f:34:8f:71:3d:31:11:b3:e8:
65:29:8c:29:ae:6d:1d:65:e8:ef:73:e6:80:12:01:
de:80:de:59:eb:c9:33:d8:5c:4f:38:c7:eb:17:04:
64:ce:8e:64:15:04:00:8c:6b:74:4e:53:48:97:cb:
ca:62:2a:5b:e5:cf:92:90:33:a3:2f:29:19:31:be:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:CF:D5:E5:DB:F5:79:42:1E:13:CC:F2:67:15:5D:AD:30:6C:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:400::/38
Signature Algorithm: sha256WithRSAEncryption
06:75:ac:4c:25:51:5b:b1:e7:49:6a:39:51:c6:f0:e0:33:2d:
d7:ca:12:c5:8d:80:ad:91:5e:41:77:8a:f6:11:8f:fd:a7:88:
e2:1c:70:ac:76:73:8f:d1:42:04:71:6d:99:ed:fe:60:3a:12:
51:d2:cf:e4:6b:38:ce:0b:54:7b:e8:0e:e0:a4:ce:ef:42:f1:
6f:e4:92:fd:40:4a:67:30:a5:ac:2c:30:b3:dc:00:76:2f:fa:
93:de:1a:a0:69:25:21:5b:77:f2:99:aa:17:4b:06:b2:85:c9:
f7:a3:8c:fa:ad:73:d8:3b:51:26:f7:62:73:8a:c0:31:6e:6b:
13:8c:b7:70:29:20:90:5a:e0:74:71:72:ae:7c:c8:5b:a6:86:
29:e6:48:f7:f7:fb:2c:5b:da:26:f2:3b:e5:91:72:8a:ad:d8:
5d:30:58:23:fe:d4:ad:7e:88:ca:fc:00:0e:6c:41:07:b3:4f:
2d:b3:e2:79:40:d6:e6:df:f1:e9:1b:87:ce:5c:7b:79:f3:b5:
75:46:78:5f:c6:e8:1f:5d:5a:d0:70:ab:04:f5:b2:4b:63:15:
ab:18:9e:f4:d1:cc:35:31:cf:4a:ef:31:51:ad:e0:36:6f:e2:
d0:f2:af:5f:25:75:ef:f0:0e:1f:79:c2:1f:cc:49:48:1c:fe:
50:c1:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:17 2026 by rpki-client