Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File: d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier: dDiYJZIQ9H7hw6zYJOFOQF69rL7Wnv2koXlgEvc7bPg=
Subject key identifier: 17:63:A3:67:5E:2D:21:5D:7F:AE:C8:C7:B8:6C:12:CC:4A:B8:7C:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18C15FBCE21B5DAF55F82F103EEB33BA9BF60406
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time: Fri 07 Aug 2026 05:30:18 +0000
ROA not before: Fri 07 Aug 2026 05:30:18 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c1:5f:bc:e2:1b:5d:af:55:f8:2f:10:3e:eb:33:ba:9b:f6:04:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:18 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d5f0bc2617ac6565b77bbe99619f9d3572348b0168d07e499faf880fa1466d16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:d5:3a:69:7f:d3:1c:80:c6:31:3d:31:ad:
b5:98:d6:d5:d7:f3:fa:6e:07:73:d8:12:5d:49:30:
22:6a:fd:66:28:1e:ab:ab:b2:05:53:8c:71:75:b2:
0d:cc:03:6a:ac:f7:fc:3f:a6:12:46:87:8e:c3:a8:
5f:3b:d9:e6:75:d6:bb:6a:39:56:37:42:97:e9:f8:
84:35:65:4e:e9:c0:a1:c3:2d:de:d7:91:f3:52:9c:
91:aa:06:ee:c3:9b:8b:61:00:4e:7d:67:e6:22:f2:
1f:7a:70:06:e7:61:be:d4:a2:67:d9:4d:0b:39:f6:
7f:44:79:01:0e:8e:22:f5:8f:40:a9:c4:65:a1:4f:
68:87:e1:f8:38:2b:a4:1a:b6:da:34:25:01:19:45:
78:7e:72:03:ea:ea:c1:4e:d3:6d:c0:98:85:27:5a:
16:15:d1:59:a2:ec:b4:5b:2e:e5:62:84:46:93:08:
7f:e5:10:9e:ed:23:aa:21:4a:3f:ca:9e:c6:19:77:
25:54:a9:85:89:85:ae:27:9a:e4:9e:95:6f:0c:2e:
e7:28:d9:e7:fd:cf:0a:fc:53:e5:a0:39:27:58:d0:
d1:d7:d6:df:7e:bc:7a:3b:e3:40:ff:e0:19:11:da:
33:b3:ca:e0:5d:3a:be:d2:64:a4:e5:84:d2:59:51:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:63:A3:67:5E:2D:21:5D:7F:AE:C8:C7:B8:6C:12:CC:4A:B8:7C:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c080::/48
Signature Algorithm: sha256WithRSAEncryption
26:b5:67:d4:1e:fe:12:6c:aa:55:db:5a:29:03:74:44:fb:85:
11:8a:f2:70:8e:63:14:25:41:c6:ab:c7:f5:fe:0a:14:8c:ef:
17:35:24:52:14:bf:2b:78:84:1b:56:e9:98:5e:1f:2c:2d:24:
a7:8e:77:36:58:68:73:5f:bd:06:eb:6b:3f:a3:47:16:50:7f:
c7:39:4f:70:3a:a6:c7:e7:95:fd:c9:20:08:00:be:14:c7:29:
02:18:39:30:35:91:c4:e3:1d:8e:04:8e:c4:86:5b:c1:54:00:
9b:33:0b:39:7c:98:4d:42:5f:8b:d3:0d:82:3f:8f:4c:f0:86:
b4:d6:bd:b6:6d:2a:d8:cf:2f:30:c2:5b:f7:67:8b:84:ec:5a:
1c:f2:9c:be:6f:57:b2:9d:f0:15:1f:0e:5c:66:1a:1f:35:dc:
76:a0:87:e5:f3:10:e2:98:ce:87:0d:59:ff:31:c9:ed:e3:0d:
ac:05:46:34:cc:05:e4:15:cb:d0:90:12:54:56:7c:17:92:c8:
95:22:88:31:27:2c:4b:5e:e8:b5:f6:18:6e:8f:e1:71:8d:54:
60:73:ac:4e:28:a1:fe:18:46:af:77:15:1c:a4:77:a4:77:d2:
6a:10:df:2b:f2:70:49:8b:90:b5:05:31:a4:64:ec:99:2d:6a:
ea:49:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:04 2026 by rpki-client