Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9b32e5a-82bc-4b48-bde6-ace5aaff4677.roa
File: d9b32e5a-82bc-4b48-bde6-ace5aaff4677.roa (raw, json)
Hash identifier: legBzu3e3nX8Q6Osh1YpaAqejBEQ0sIiuApZdIi4vJg=
Subject key identifier: 9B:72:FB:B6:84:D0:BC:66:6B:FA:F5:B3:D7:30:B4:BE:20:C4:A9:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 756D8EA9A61D17CF06303D75BDB59C111459DCCB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9b32e5a-82bc-4b48-bde6-ace5aaff4677.roa
Signing time: Mon 10 Aug 2026 01:01:11 +0000
ROA not before: Mon 10 Aug 2026 01:01:11 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6d:8e:a9:a6:1d:17:cf:06:30:3d:75:bd:b5:9c:11:14:59:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:01:11 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=7c05727ca15cc849a3ecb2e16ba881aeea7ba589c7620cc93b651ee4456575cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:13:15:25:c3:74:b6:2a:54:9c:f5:6f:32:
8d:fa:dc:83:8a:d7:91:60:54:54:69:c5:76:1c:78:
24:f8:5b:1f:76:b8:71:73:17:93:4d:6e:8e:da:32:
8a:63:e0:dc:5c:c2:9b:20:ea:be:72:33:27:7a:14:
ba:46:f1:99:f3:08:f5:28:0d:cd:39:db:76:ab:30:
04:b7:1d:f7:bf:05:1a:41:42:8d:e4:4c:72:f3:48:
89:fa:b7:44:48:08:2a:63:79:cb:82:e2:43:56:2a:
b1:16:79:40:f0:7c:2d:15:21:28:06:35:0a:5f:3f:
fe:ef:d7:3d:7e:84:03:7f:7b:8c:d9:4c:a9:4f:38:
56:e0:ed:b8:63:dd:83:b3:c4:50:8a:9e:34:ca:2f:
4d:6e:8c:1d:b9:0c:8c:41:e6:75:35:e2:39:a8:81:
f1:af:2e:34:34:e0:9b:9f:3f:37:c6:f1:24:32:16:
40:af:83:0d:21:a4:47:6f:1d:ba:7d:0b:7b:06:64:
3e:17:ff:5f:d4:59:6f:e7:ec:e5:90:9e:3e:84:a2:
9f:aa:10:e7:5f:3b:a1:f1:01:fc:d5:30:70:0b:ea:
ef:74:f4:d8:53:b5:47:20:6d:92:31:76:d6:2a:78:
ed:64:eb:2d:0e:f0:1c:20:53:fe:ed:57:a1:25:fd:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:FB:B6:84:D0:BC:66:6B:FA:F5:B3:D7:30:B4:BE:20:C4:A9:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9b32e5a-82bc-4b48-bde6-ace5aaff4677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:5000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:a2:e8:69:3d:91:3d:d2:c9:f4:f2:23:4d:05:bc:ad:98:37:
a0:7d:4f:5f:cc:a7:2d:c7:aa:8a:66:46:50:14:d6:0a:3b:c9:
32:af:b7:8a:9b:f1:81:e4:42:5e:10:59:15:e2:39:3d:a1:a3:
51:36:a3:a5:15:8e:68:85:fe:ed:9d:02:a6:ba:59:db:dd:dd:
b4:4b:ad:86:20:31:12:f2:a5:f2:44:2d:8c:04:3a:ae:53:d3:
39:8e:90:b9:a9:c1:bc:99:7e:56:92:d0:28:af:ea:b6:81:5d:
44:ed:59:31:b2:7f:07:dc:21:fd:45:45:ef:62:02:78:71:10:
84:3b:0f:eb:5c:e1:d6:86:8f:5a:1d:c3:78:cb:5c:c5:03:14:
11:1d:01:fa:38:85:b6:e5:cc:5e:0e:1b:4d:a0:c4:26:e5:c3:
d4:a8:91:31:7e:f7:22:c5:a0:65:13:c6:21:ef:57:16:fc:83:
2c:6e:74:8f:f2:57:81:61:ba:2c:c0:c5:9a:92:69:bc:b8:92:
97:28:63:59:44:9b:20:7c:cf:65:c7:da:a6:05:f1:ef:ee:04:
0d:92:14:95:29:77:19:63:29:da:97:d0:3a:ef:3a:be:3f:d6:
8e:c1:9a:01:08:0f:c1:5f:a3:75:64:d8:44:dd:94:92:94:10:
84:9f:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:26 2026 by rpki-client