Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json)
Hash identifier: 4AwHTdQ4wVZIlmejlam4VYzjxcDCNI+Ze9wJEZ+/IyY=
Subject key identifier: 06:30:6E:D0:28:5B:D9:D4:7E:7D:5E:10:21:63:27:85:41:5E:05:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D84ADC25A0BD6780BC944E072032E9193B2248C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
Signing time: Fri 07 Aug 2026 04:31:01 +0000
ROA not before: Fri 07 Aug 2026 04:31:01 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:84:ad:c2:5a:0b:d6:78:0b:c9:44:e0:72:03:2e:91:93:b2:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:31:01 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8e251f3af9b59f5b26c0cbe0994269f329208788b999dd5e1fd0405c53ac4f82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:15:66:8c:e9:44:8c:46:9e:4c:d4:b8:a4:
6b:3f:bf:60:fc:64:ec:36:0b:40:e2:6d:9f:98:cd:
4d:9c:7e:53:e2:4e:a2:e3:af:85:6b:e2:3a:cd:d3:
e3:18:28:dc:8d:c2:7b:6b:5a:1b:fc:1c:4d:a3:fb:
09:1f:f5:02:5f:c9:93:18:2e:41:3a:be:03:f6:00:
91:ac:53:26:4c:82:f6:6d:76:ee:21:b1:8c:25:48:
d6:4b:99:16:6e:52:a7:a4:73:45:94:eb:b0:aa:af:
a9:fa:3d:3e:08:79:9a:7c:7d:6c:7b:75:3e:e9:c3:
72:de:a5:cc:8b:98:e4:9c:ee:47:e9:eb:f7:4c:c5:
a6:85:1c:69:bc:ae:b3:5c:66:cf:78:79:9b:68:eb:
58:90:e1:5a:9f:85:40:4b:af:f1:41:ca:c8:99:23:
cd:12:85:c4:63:91:1f:59:a6:bd:a2:19:25:e7:ab:
bf:aa:f5:ee:d0:ed:fd:7e:36:69:15:9b:66:a0:fd:
bd:8b:d2:e5:1f:e4:a8:fc:50:ec:37:d7:88:ac:5b:
bb:50:fd:f4:45:c5:a2:a6:ab:23:05:4d:91:f0:7d:
9b:cd:19:5d:2b:4b:3f:fc:1d:fe:c3:4c:f0:a1:b0:
f5:cf:86:7b:03:4f:49:45:5f:c4:7f:b4:a4:bd:13:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:30:6E:D0:28:5B:D9:D4:7E:7D:5E:10:21:63:27:85:41:5E:05:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
9b:24:11:a4:f8:02:62:ad:18:a3:6d:63:b6:10:71:d9:21:f1:
3e:e3:2c:e6:99:ec:dc:00:1e:c8:d4:ae:65:6a:67:d2:3e:96:
41:bb:78:c9:a7:b5:ad:bb:cc:e2:b2:8e:1b:b0:ec:1c:96:89:
8a:2e:d4:6c:7c:54:50:25:47:e3:2d:af:8a:b8:1b:54:7e:82:
19:eb:95:0b:5b:cd:ad:d5:66:c1:82:e0:8c:82:a8:78:cc:2f:
d5:ae:71:28:0a:fb:8f:83:eb:fc:98:05:e4:20:03:df:56:02:
1c:da:d4:dc:28:03:67:4d:6e:9c:85:8f:c6:09:ef:cd:e1:22:
99:09:9c:c3:aa:4b:eb:71:4e:9f:9b:7c:34:8d:05:7f:40:ab:
d5:cb:0d:c7:9b:3f:6c:17:b4:88:45:c4:b0:0b:53:cf:46:e9:
bb:64:38:56:1c:fe:9a:10:fe:46:e7:47:a1:aa:0a:91:e2:4c:
4c:02:58:a7:30:df:0d:e7:8e:09:d0:67:cf:1e:27:24:4d:24:
46:d2:1b:d3:28:4a:fd:64:ba:ff:6e:cb:3a:20:d3:b4:a4:07:
1f:91:5a:47:b4:82:19:a0:2b:a9:9d:ee:34:b5:6f:8e:b5:8a:
76:75:ad:07:71:ed:f7:d5:23:66:8c:51:bd:51:d9:44:28:59:
52:eb:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:40 2026 by rpki-client