Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier: hZ8Md+UA8G6b7FrR27twO0roYimnHR23/IHB8MBfzTA=
Subject key identifier: AC:16:9F:5E:99:DC:03:A0:23:90:56:0A:D6:43:9E:1F:1A:A9:F7:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7942FFC3F1E6FDCD71F38B1369342BEDB1378BED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time: Fri 07 Aug 2026 05:30:16 +0000
ROA not before: Fri 07 Aug 2026 05:30:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:42:ff:c3:f1:e6:fd:cd:71:f3:8b:13:69:34:2b:ed:b1:37:8b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=317fe471bf18c4c5480782c86b23988874c539cf01c478e01246fc263d1537c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:9f:17:80:35:40:33:ef:3d:82:87:6e:fb:
98:a9:ce:e2:25:c9:e0:97:9a:4c:fd:67:2f:83:53:
7a:89:bf:82:e2:7a:a2:f1:35:a2:15:8a:18:38:38:
0f:a6:29:f2:80:41:76:ef:b9:7e:89:6a:13:01:06:
44:97:eb:da:03:05:36:34:6a:9a:7e:b7:f3:4d:f3:
2b:db:f8:dc:5a:5c:84:d4:41:70:8b:9c:78:0d:ee:
ee:bf:61:de:d9:8d:5f:fc:98:22:37:ff:21:ff:8a:
da:fd:72:05:64:56:05:f3:57:a5:60:eb:95:d4:3d:
31:d6:4e:11:34:2d:46:89:1c:1c:e3:a8:84:c9:b0:
f6:7d:17:bf:62:b8:5f:3c:57:66:59:89:b1:62:35:
de:d3:60:fa:b8:80:d6:99:11:d2:f9:92:62:73:f7:
1c:84:47:f6:1f:0f:8c:4b:27:f0:eb:a9:36:50:bb:
fd:ed:8e:a1:39:4b:0e:ea:9b:0c:35:d9:37:e8:ab:
e4:01:56:b6:c1:52:5a:f1:7d:32:99:ce:17:56:ad:
f0:f8:5f:2c:e8:3f:27:21:4e:94:af:3e:1c:63:81:
ab:ea:8d:c3:b8:78:f3:5c:00:b7:65:77:ab:98:0e:
b9:58:82:4b:96:cc:b2:42:53:1d:01:b6:e6:b8:b1:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:9F:5E:99:DC:03:A0:23:90:56:0A:D6:43:9E:1F:1A:A9:F7:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9040::/48
Signature Algorithm: sha256WithRSAEncryption
c0:06:16:11:12:f4:39:64:7b:5d:35:fa:5a:c9:42:1d:5a:bf:
c5:4f:b8:a1:24:d9:bc:9d:45:61:a1:0a:4a:8d:0a:ba:c5:da:
91:f7:c3:b4:79:52:17:9f:cc:72:2f:5d:bc:02:83:e3:47:97:
af:da:de:36:31:9b:8a:2f:a1:db:8a:bd:c8:cd:f9:c5:19:fa:
47:08:54:b5:82:4d:fe:4e:60:6e:ea:f4:c5:6c:97:ae:27:5d:
1a:91:37:e8:b8:8d:24:74:34:64:9e:52:91:fb:fb:25:e9:08:
12:07:f5:38:d9:85:c0:49:61:54:20:f3:12:25:49:84:1f:50:
c2:00:be:9e:45:25:81:92:6c:d6:5f:f0:e3:da:31:25:7b:a3:
d6:14:ab:b1:b5:51:61:0e:8e:39:38:af:7e:0e:17:82:62:cf:
04:b0:f1:ce:38:29:a9:df:95:b3:d0:14:04:58:ac:8a:1a:6e:
69:f8:9a:59:df:e7:0e:8c:66:54:fe:06:d5:9e:cc:76:aa:6c:
78:27:7c:62:5d:16:3e:f9:7a:68:6f:7f:70:ea:6e:e1:f9:ad:
c4:11:ad:f1:aa:cd:63:c3:40:d6:29:9e:39:64:08:e3:3b:86:
61:ad:f0:b4:35:a8:8e:92:3b:1e:43:48:b5:4e:71:05:73:e7:
4d:11:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:44 2026 by rpki-client