Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa
File: d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa (raw, json)
Hash identifier: dONRW5RzqNORBxQv66c9PAPYfta4g7ukqt2Mp0+ea7M=
Subject key identifier: F3:BE:9C:AA:7A:56:B7:D6:55:57:AB:BB:1B:A3:FE:73:BB:28:6D:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D2B67528B644BB82CEE211AA7A10A23D36A06A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa
Signing time: Thu 10 Sep 2026 02:40:07 +0000
ROA not before: Thu 10 Sep 2026 02:40:07 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2b:67:52:8b:64:4b:b8:2c:ee:21:1a:a7:a1:0a:23:d3:6a:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:07 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=bf95e23b96354aab59f8bae87b0d27951f097a7418e19099ffcb1ca2e50aaa67, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:46:52:af:67:fe:9b:01:94:f0:8f:11:f2:
1c:2d:74:6c:da:07:23:60:c4:09:10:34:92:e4:31:
cd:8e:fd:55:73:12:71:e4:63:9d:f4:cb:1b:a1:62:
1b:2c:46:c3:6a:5e:1c:87:ab:a7:6d:c7:d9:55:45:
9a:96:c4:dc:28:90:4e:76:7b:45:12:70:03:da:93:
cb:47:ed:06:d0:e3:61:8d:47:bf:4b:b6:2c:05:a8:
5a:79:0d:0e:e4:d8:c5:ce:fa:54:61:d5:5c:64:fd:
bb:17:e8:3f:b6:99:59:2d:2c:40:0b:f5:bd:d3:dc:
af:3c:86:c7:0d:6d:26:ee:63:b6:1a:04:67:42:0d:
c9:0d:90:f4:e2:43:c1:4a:b7:b4:63:c3:d1:a2:99:
5b:06:4c:c3:71:f9:02:de:77:e1:e5:0e:2b:69:0a:
31:8d:7f:da:71:99:e1:dd:2f:be:0c:40:92:36:62:
f4:14:5b:1b:d0:cc:82:7c:d4:37:61:87:cb:31:39:
30:04:3a:66:90:92:b7:b1:23:58:b3:62:71:e2:5e:
13:ae:04:b3:e6:fb:69:06:40:ee:62:64:ef:dc:ea:
a3:30:37:89:0a:08:3a:9f:75:ab:f7:8a:df:99:ff:
55:8b:bb:96:9d:79:7e:a3:43:b8:ee:23:4b:ee:26:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BE:9C:AA:7A:56:B7:D6:55:57:AB:BB:1B:A3:FE:73:BB:28:6D:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:b000::/40
Signature Algorithm: sha256WithRSAEncryption
73:c5:1d:68:09:5f:51:79:bd:19:38:b5:3d:32:60:97:26:fd:
64:cc:b2:7b:03:09:e9:57:67:d8:c4:20:bc:94:9f:d6:f8:5d:
fc:3c:78:59:cd:81:fc:35:2a:54:62:70:49:e9:96:b8:c6:87:
35:aa:17:fd:5e:83:80:24:e0:35:51:76:04:5c:48:d3:52:53:
f0:38:bc:13:c2:76:d3:07:30:4c:8f:df:3f:ac:95:16:fd:ce:
06:1c:a3:d7:62:bd:62:1c:e4:15:70:6f:e5:c2:3f:29:58:2f:
8c:38:bd:fa:25:fc:7f:a5:ae:81:d6:90:60:7b:05:09:9b:18:
47:39:a6:00:6d:57:00:cc:66:34:18:cc:18:bf:94:36:e7:a4:
a9:92:0a:14:3c:3b:a5:ec:e7:ca:cb:da:25:86:f3:73:e9:a7:
c0:0f:22:eb:89:8c:c3:76:ff:48:2a:db:1f:db:ee:5e:06:ce:
cf:31:ce:05:90:2e:35:3c:70:a1:be:c8:2a:16:c6:bf:61:dd:
ce:57:66:2c:8c:4f:84:08:72:34:d1:10:c1:d3:72:d9:f1:dc:
a3:ce:17:a6:c7:ad:b3:c6:8b:76:44:9a:67:d8:34:4e:e1:c5:
ff:69:e7:c4:04:18:3f:06:57:85:3b:d2:10:16:b6:7a:a2:96:
68:02:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:17 2026 by rpki-client