Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba74179-36d0-4268-9a93-f954eae8b993.roa
File: dba74179-36d0-4268-9a93-f954eae8b993.roa (raw, json)
Hash identifier: iY6ZkdSGl+f7DM6dczIayEVTaSJOgwZZEjpeoUOUDug=
Subject key identifier: 96:D1:CF:92:A8:AC:10:F3:30:DD:1E:05:6A:AA:18:67:AE:44:D7:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 295B23EB30D96E988DAF040CD14846D8BC05754C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba74179-36d0-4268-9a93-f954eae8b993.roa
Signing time: Wed 09 Sep 2026 16:12:57 +0000
ROA not before: Wed 09 Sep 2026 16:12:57 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5b:23:eb:30:d9:6e:98:8d:af:04:0c:d1:48:46:d8:bc:05:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:57 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=f1f11360b47f7cce2ba235c3fc61334ea8db12c53403ec8cfd6b58e656bedda2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:af:3e:d8:b9:eb:43:61:15:ab:b1:89:45:
c4:0a:0c:b2:99:5c:7b:30:b5:72:6a:1b:b7:2e:16:
f7:71:a0:d1:48:75:a3:7e:dc:70:49:7f:a8:7a:e9:
aa:e5:88:04:a5:f2:19:dd:9b:bd:8e:83:51:bf:fc:
c2:e2:80:a2:35:28:dd:ae:ed:15:62:60:ca:a2:c8:
83:73:1a:42:27:b2:1a:b6:27:d5:43:a7:d7:21:7f:
47:07:c5:f3:d7:1f:66:54:80:17:97:d3:9a:7e:61:
8a:8b:7f:72:8b:06:a4:82:be:61:19:69:c0:05:f7:
42:2a:75:ca:3a:4c:74:64:6a:40:3e:4e:da:ac:0e:
fc:6d:99:33:05:91:46:85:67:a3:56:56:11:9b:7c:
0e:aa:21:14:cf:b7:03:21:43:39:c2:32:91:0c:e4:
25:74:c3:a3:a9:b6:0b:9e:35:51:95:d2:c8:71:2a:
f6:7f:f9:0b:a2:81:60:0a:2c:98:75:54:b5:93:33:
8b:26:2f:00:e7:80:5a:5f:eb:71:41:7c:98:5d:db:
66:00:d5:18:62:ce:cf:0a:8d:5c:3c:a7:29:9a:b3:
4d:92:cd:dc:85:e2:f6:ec:20:80:7d:e9:fa:9c:a8:
a1:26:35:d3:15:38:53:9d:ca:20:00:87:64:bc:8f:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:CF:92:A8:AC:10:F3:30:DD:1E:05:6A:AA:18:67:AE:44:D7:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba74179-36d0-4268-9a93-f954eae8b993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:8800::/40
Signature Algorithm: sha256WithRSAEncryption
7e:43:6e:3d:80:62:15:d4:d5:f2:d9:8a:02:94:a0:d0:e8:a8:
c7:20:59:a5:a2:91:5e:50:47:fd:9d:c9:29:a3:04:89:30:73:
3a:7a:95:bd:48:2b:3f:96:98:a4:72:64:5a:f3:4a:39:13:76:
cc:58:ec:65:37:db:93:93:c0:5c:6b:43:01:59:93:db:e0:6c:
83:63:e1:db:05:35:1b:52:36:93:92:16:ca:78:34:e4:17:4c:
31:cf:d1:90:6e:59:06:d3:86:3f:71:62:3f:94:8f:00:02:06:
9c:bb:b2:3b:0a:43:86:c5:4b:a5:13:9e:8f:fa:d8:fc:6e:92:
59:8e:9a:54:89:5a:16:a1:70:70:27:83:49:cd:35:c1:a1:fd:
f0:e0:c4:da:87:34:b7:42:9d:11:20:8f:f5:1b:d0:5c:50:d6:
b1:66:eb:d9:3a:8c:33:28:10:1c:33:50:82:ff:03:ac:ae:d3:
8e:2a:b7:cc:79:17:40:05:a3:b0:8a:10:df:17:36:84:97:1c:
d3:39:e6:50:16:6b:1a:b9:cc:55:b8:cd:5c:70:49:77:b9:9d:
ee:78:10:e6:d3:6d:f7:7b:d0:da:e1:28:f4:9b:82:01:16:d3:
00:4c:c2:42:8e:6d:21:58:0a:06:c7:9f:6d:78:b2:e0:55:30:
f2:a8:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:27 2026 by rpki-client