Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc276dba-3859-40d5-b39a-849f34a86248.roa
File: dc276dba-3859-40d5-b39a-849f34a86248.roa (raw, json)
Hash identifier: JwqnFI5S8db4x50ufj+yxt10ZBqqSi+vDUKYUdMvoKE=
Subject key identifier: A7:60:6C:99:56:3C:B6:F7:72:97:71:68:19:3B:35:58:39:D8:D9:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FBD592596C6A441DB9E5134A828F74ECEDA5EE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc276dba-3859-40d5-b39a-849f34a86248.roa
Signing time: Wed 09 Sep 2026 15:12:34 +0000
ROA not before: Wed 09 Sep 2026 15:12:34 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bd:59:25:96:c6:a4:41:db:9e:51:34:a8:28:f7:4e:ce:da:5e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:34 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=5186cfe97e9877277c8128d539dbb85d2d0b93f6172e365f21f9a52aa5d80c42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:6f:6b:8d:c2:8c:94:81:9b:e9:37:0e:9f:
b5:27:d8:de:b9:20:5c:d0:5d:4a:6e:39:b0:23:99:
cc:38:0f:2b:e4:de:4e:24:cf:49:73:03:c8:f6:7f:
4c:47:72:d7:2e:3a:43:4d:3b:93:53:01:3a:76:91:
00:0e:52:2c:ee:d3:50:cd:54:71:a7:00:1e:9b:01:
73:80:f9:41:1e:27:29:38:a5:67:28:22:e5:4e:e8:
54:a8:b1:12:ad:17:b0:4e:f5:85:35:2a:76:16:88:
f3:27:ca:c1:7d:91:31:72:08:e8:c4:ef:37:b3:d1:
50:c5:94:b3:10:92:93:ec:da:ea:10:6b:58:b2:66:
c6:99:2e:3f:62:82:d5:f5:7f:4e:54:40:56:4a:ef:
26:52:6b:97:06:a6:87:5f:e4:86:80:75:fe:fd:48:
d7:3b:98:4d:9a:1d:20:2c:ee:5f:15:36:e9:a1:b0:
bc:46:0a:b6:c2:5c:ff:8d:c9:81:0a:43:ae:6c:b5:
58:65:0f:8d:41:c7:a9:f2:5e:e7:0d:f3:c2:42:0f:
9d:fd:c5:74:ca:ce:78:6e:da:83:ae:51:7b:8a:01:
01:8e:99:f6:08:a4:37:2c:4b:d2:00:cb:db:af:d8:
46:37:63:7a:a3:e6:0e:4c:7d:75:bc:a1:34:23:f4:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:60:6C:99:56:3C:B6:F7:72:97:71:68:19:3B:35:58:39:D8:D9:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc276dba-3859-40d5-b39a-849f34a86248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4880::/48
Signature Algorithm: sha256WithRSAEncryption
12:a7:17:02:d5:6a:fb:4a:2e:e9:55:01:a7:d8:77:22:8d:af:
6d:0d:98:02:97:7f:1f:74:54:19:62:5e:97:41:b4:67:17:96:
e6:6c:f5:a9:92:7c:8c:7b:e0:cd:4e:4e:10:1a:ad:17:e3:57:
c2:43:4d:46:7c:86:5f:97:d8:bc:9d:41:82:d8:f6:1d:1e:53:
d9:a3:6c:3d:27:ee:c4:8a:75:71:17:7b:33:44:71:da:ee:e9:
86:86:76:af:69:1d:20:c1:e5:d6:ce:d3:73:74:b5:2b:67:61:
1e:e4:14:c3:cb:4b:26:c4:ef:da:44:f7:9f:87:e6:4c:d7:51:
e1:6f:42:78:aa:88:91:e0:e9:9e:f3:26:e7:7a:4d:11:49:da:
01:67:0d:bd:36:50:b9:f3:60:da:16:4e:89:95:71:90:db:09:
31:9e:80:48:be:34:44:4f:9d:90:fd:5c:aa:c9:f2:b9:d2:3e:
a7:77:38:5f:37:63:b0:29:3e:5d:66:9a:6d:e1:97:b8:bc:dd:
87:af:97:47:30:04:6f:a6:aa:36:50:6a:58:41:18:00:71:73:
6d:6b:55:43:cb:5f:51:9d:81:1d:35:29:67:20:9c:c7:3b:28:
af:50:ee:f0:1e:18:96:11:c3:40:18:cd:af:f7:5a:9a:13:c2:
4f:db:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:25 2026 by rpki-client