Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa
File: d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa (raw, json)
Hash identifier: mQclmiyX0t9kHFm5d9WADM0t1N/i5SMDz/Ptfk+FxWM=
Subject key identifier: 98:A3:53:1F:30:C7:DF:9C:B2:FC:80:A4:B0:B7:07:A1:AF:D2:8B:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4ABF1757ADF39574FDA068650DBCED5FB61D42
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa
Signing time: Thu 10 Sep 2026 02:30:11 +0000
ROA not before: Thu 10 Sep 2026 02:30:11 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bf:17:57:ad:f3:95:74:fd:a0:68:65:0d:bc:ed:5f:b6:1d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:11 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=060f572fcbee3844af43e873666cd7c52f41502cf6a3184f1d2565844b2c4ad3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:c8:7b:9a:9f:b6:72:97:8b:c8:95:e3:00:
f6:4a:d0:90:86:7d:72:f3:61:78:58:20:af:07:f5:
d7:03:13:a2:ce:ea:3b:2b:c9:d3:be:60:74:f7:2e:
08:e8:05:b4:15:41:83:af:87:37:ed:25:ed:1d:ef:
ba:9a:22:bf:38:c3:d3:5f:de:eb:b6:64:35:51:b3:
20:e9:b7:f1:28:1d:52:4e:06:19:f4:0f:cf:4c:5c:
db:e4:6a:f3:03:cf:01:18:32:dd:20:57:ce:39:93:
d8:0d:bb:2d:01:f1:b4:4f:3e:03:5f:cc:e6:36:63:
57:2e:65:d0:cf:c8:9d:5a:98:55:74:4d:c5:e1:96:
f2:b5:13:21:a1:54:a9:6d:93:1a:51:e2:fc:f2:54:
29:94:92:0f:3e:ce:e8:64:26:00:94:c0:e1:d0:54:
ad:cb:00:f0:6e:8b:3d:e9:6d:a9:72:85:35:24:34:
66:df:22:8f:dc:c9:13:67:a1:6b:22:a0:d5:d8:5e:
ed:ab:8d:a7:ea:a9:f6:18:bb:ec:02:e2:38:8a:5d:
f7:eb:e5:8f:4c:f3:e9:33:ee:a6:b2:fd:6c:78:8a:
a8:35:92:84:8e:56:0e:01:d7:85:c2:e7:94:9f:7c:
cb:54:bb:81:a9:6f:b3:54:cc:a3:da:2f:13:c2:5f:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:53:1F:30:C7:DF:9C:B2:FC:80:A4:B0:B7:07:A1:AF:D2:8B:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
51:f5:e0:f3:bd:43:39:1f:05:87:5f:6f:1e:8e:5d:8b:98:d9:
97:3b:2e:bb:29:89:e5:77:b0:41:15:89:18:57:3e:02:b0:af:
7a:ee:3b:f1:70:77:3b:ae:f6:d4:f0:69:dd:70:cb:50:e4:8c:
2d:3f:8f:61:42:59:d7:f3:6b:76:a4:c0:69:b2:a5:4d:47:e0:
81:ad:dc:aa:7e:20:5b:e9:32:f2:0e:62:9e:e9:a3:75:be:30:
6f:fd:3c:4f:a8:0e:da:f1:d0:0a:53:17:a9:4b:b0:ca:e7:c4:
e9:a1:cc:82:0b:a8:be:5f:32:d6:37:c4:32:c1:9d:df:cf:48:
08:52:a0:5e:e1:a3:50:7e:e9:b7:05:08:6f:47:61:ed:0b:55:
22:dd:a3:a5:d3:27:ab:93:49:b4:d1:18:0c:8b:6f:ca:12:bd:
64:99:22:58:3a:0c:28:4d:fd:58:c3:78:0c:0d:8e:02:ab:d4:
9d:5d:d7:24:e7:8c:c2:d3:2e:29:55:f6:f1:bd:09:fe:9a:e6:
69:4a:3e:29:75:7e:41:0a:29:53:16:7f:6c:f6:34:f7:6a:9f:
bb:75:b6:ed:35:b1:92:5d:1c:48:09:56:20:43:96:5c:3b:da:
af:26:10:0f:13:e5:d8:b2:77:10:63:16:77:f8:b7:95:37:80:
a5:f3:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:24 2026 by rpki-client