Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc9b2683-4cdc-4d80-b142-00514c8fd290.roa
File: dc9b2683-4cdc-4d80-b142-00514c8fd290.roa (raw, json)
Hash identifier: 15HQFMkJQbW2HuBjJpQycBSzVc+2+dPnEkkiabqG59g=
Subject key identifier: 13:CD:C8:DF:B7:53:9C:B2:DD:E2:7F:F4:FB:DC:D1:59:C4:33:83:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4005D1F0C0BD94CC07A15F837C105941302B7F13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc9b2683-4cdc-4d80-b142-00514c8fd290.roa
Signing time: Thu 10 Sep 2026 02:30:17 +0000
ROA not before: Thu 10 Sep 2026 02:30:17 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:05:d1:f0:c0:bd:94:cc:07:a1:5f:83:7c:10:59:41:30:2b:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:17 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=6be128d6d298034b0659402865349f3247efb0ace82682e4c03deab358d181bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:db:94:f1:5a:16:81:ce:07:c8:33:1b:56:
ed:4d:3c:17:98:f9:55:f3:3e:3e:8a:80:8c:2d:76:
d1:aa:91:d5:fb:3e:54:d9:78:2d:bf:f4:69:61:fe:
62:1f:dd:b8:c8:40:33:5e:0a:87:14:89:59:7b:f2:
64:76:e1:70:46:31:55:0f:f3:03:73:3c:f7:38:de:
7a:3f:78:d1:98:e5:25:a6:9f:a2:24:96:98:ec:e2:
55:72:77:80:80:ac:d7:19:29:44:b1:bf:1b:68:88:
59:d3:db:a2:43:a9:e3:3b:14:54:26:08:a4:88:87:
16:6c:0e:74:88:b1:59:a0:2f:e7:26:b2:e0:01:d7:
ec:21:e9:8b:38:59:9c:b7:42:62:4c:15:6f:a6:6c:
1e:15:e9:6f:6b:d9:68:c4:bd:47:1e:d4:25:ee:43:
16:4e:3b:ff:a8:12:5f:a7:b8:0e:04:d4:cd:fb:fa:
ec:29:e2:3b:ac:c5:fb:ba:fc:c8:b1:03:9d:19:fe:
25:87:6b:30:11:db:80:72:2d:52:c1:96:ba:49:2d:
38:de:94:ae:48:b6:d0:98:96:c8:01:b3:a4:23:fe:
aa:f7:75:b7:e2:2d:61:8e:be:85:66:26:cb:d4:2d:
e9:08:7f:b9:c9:59:f5:6b:3e:8e:46:93:4a:55:a5:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:C8:DF:B7:53:9C:B2:DD:E2:7F:F4:FB:DC:D1:59:C4:33:83:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc9b2683-4cdc-4d80-b142-00514c8fd290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:c3:2e:e7:ed:3e:34:9f:96:f0:0f:2d:13:34:aa:1a:ce:6d:
ed:e4:60:71:26:29:47:c7:37:17:8a:dc:eb:2f:20:3e:ae:91:
2d:8b:04:40:a4:12:27:6e:ed:ab:e9:3b:49:0e:89:72:e5:92:
89:bb:46:24:16:e4:54:b0:db:2f:f6:75:57:2a:b2:57:4a:68:
5e:61:ec:5d:96:0b:07:78:fe:5e:7f:40:02:23:07:43:66:d3:
f6:6e:8e:1f:8a:62:7e:89:00:49:80:31:b8:49:f1:d0:8c:e4:
11:60:55:18:da:30:77:d6:38:f4:0b:3d:a9:d8:b6:d2:e2:24:
69:87:01:1d:f7:34:be:29:7f:04:25:0d:fc:83:43:f2:90:13:
15:e4:6a:70:f4:ab:60:fd:4a:19:e3:61:7e:cc:79:81:a6:85:
65:ad:e1:66:9f:f5:2e:bc:11:df:5a:fe:24:75:3a:f5:6c:17:
7f:43:ce:70:75:a5:62:08:a0:b0:4c:d5:cd:82:b0:8c:7c:fb:
37:0f:d3:b9:75:cd:aa:98:94:00:19:ab:e1:c5:48:be:69:f8:
9b:5d:8a:aa:45:bb:c8:b3:6c:27:7e:5f:f8:7e:cf:c1:06:c7:
13:c0:39:18:9f:5d:91:21:27:0f:40:8c:aa:8a:d1:df:15:66:
7e:cb:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:30 2026 by rpki-client