Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
File: da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa (raw, json)
Hash identifier: rZ44DhhTQ1EDdiCyqGZUVL8/DBDOn+ezAJmUnhncDkg=
Subject key identifier: F2:3C:81:70:78:B3:AD:55:9E:50:8C:56:98:E1:AF:A0:3F:BD:EC:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24CEC4FBA43228C397315E916030956D1237F30F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
Signing time: Wed 19 Aug 2026 00:50:10 +0000
ROA not before: Wed 19 Aug 2026 00:50:10 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ce:c4:fb:a4:32:28:c3:97:31:5e:91:60:30:95:6d:12:37:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:10 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=b30ff0ec0f97b3149b1bf0798bbe01532eaf8f10480ca4beda0603a09e681eee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:ca:c9:c1:49:8f:86:db:e7:88:8d:8c:c4:
46:f5:60:01:89:ba:61:f9:47:f6:3f:6c:b7:f3:c9:
7d:d9:fa:8b:0e:25:7f:89:54:1c:86:57:cf:ba:b8:
62:f0:e1:30:71:b1:aa:d5:b2:d3:9a:5f:85:e6:cc:
5c:9b:0d:f6:f7:ed:fc:11:87:3d:7a:c6:5a:2e:c0:
e2:2d:6f:a1:39:49:0f:8f:ef:ae:cb:38:49:cb:83:
41:91:f8:20:61:01:6a:c6:ef:77:ac:f8:56:f9:e0:
4d:7c:52:34:76:97:79:00:3e:d5:6f:c3:ca:2c:5c:
58:7c:c8:35:48:b0:b1:b1:1b:c3:a1:9b:48:74:cb:
65:ec:62:6e:c8:cd:54:d3:2f:43:26:c7:e0:06:ad:
4e:e3:44:e2:b6:a2:e7:fb:e4:8c:b2:be:1b:28:ad:
99:12:e1:cd:07:e2:8a:00:0b:d4:4a:3a:66:28:93:
4c:e5:7a:4f:c1:65:a3:d0:06:a0:f6:c7:b7:a9:48:
06:03:3c:1a:b0:e9:b7:c2:1b:f6:1c:46:97:bf:aa:
82:5a:83:ec:c2:d2:ea:6f:cc:43:7a:32:62:66:97:
da:66:9f:9f:23:82:3b:2f:d4:9a:e6:1f:5a:7c:c6:
e5:b7:8a:c4:5f:bf:9b:f1:4d:18:56:d1:57:b5:cb:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:81:70:78:B3:AD:55:9E:50:8C:56:98:E1:AF:A0:3F:BD:EC:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
49:53:c6:b4:56:13:61:05:84:0a:19:7a:e8:86:28:3f:cb:c0:
16:53:44:fd:c9:14:0e:69:50:a0:2c:4f:5c:3f:6a:ca:bd:c4:
03:99:40:ba:69:da:37:13:29:ea:60:37:62:68:33:98:9c:b2:
ad:4b:3d:db:d8:90:a1:ea:f8:53:93:3d:01:1d:96:7b:42:f1:
a6:24:a3:00:da:b1:88:ca:d5:1e:fb:7e:72:69:46:b9:d8:3f:
53:6f:96:f9:ab:fc:60:56:f8:00:25:4f:43:3b:c1:f9:73:66:
54:7d:eb:d4:b9:ce:11:70:dc:30:5f:eb:38:29:e7:fe:34:1c:
ca:79:bc:fc:20:28:6b:d4:e0:09:c5:4b:ff:89:62:c7:95:71:
75:0c:29:ef:71:8f:1d:77:4f:b6:83:45:f6:c6:7d:af:d2:e5:
b1:88:fa:e4:ef:78:d2:91:93:b7:3f:bb:31:0c:1c:77:51:21:
c9:22:47:e5:38:ff:1a:03:09:cf:ce:01:11:88:5a:f9:4f:92:
e8:26:74:b8:a8:7a:f2:f9:a7:50:f0:ac:21:1c:94:1d:74:ff:
b9:17:19:8a:a4:d9:71:1f:5f:0b:41:c1:c5:de:fa:25:01:85:
f6:7f:d9:b2:ff:ef:57:e7:ce:58:81:b9:24:d3:9d:df:e7:70:
45:8e:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:34 2026 by rpki-client