Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa
File: dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa (raw, json)
Hash identifier: BZLZtG1Lmz15+9qjsDJQ5TL11O7O2Afyw55nyKP3xj8=
Subject key identifier: 89:A3:C2:1E:4E:FA:D9:26:18:9B:3D:D2:A4:A6:87:35:A5:5F:0C:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25D8191EE84D5357A6E5176CF8977B80FF13527F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa
Signing time: Wed 19 Aug 2026 00:50:09 +0000
ROA not before: Wed 19 Aug 2026 00:50:09 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d8:19:1e:e8:4d:53:57:a6:e5:17:6c:f8:97:7b:80:ff:13:52:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:09 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=fcbc13a437ae33504d5ec4c439649d7074e7aa6720b800c83cc915b07b6d4b9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:89:4c:df:bc:cd:16:bb:70:83:ab:f6:f0:
48:13:20:06:1a:77:15:47:09:da:aa:ba:d6:88:fd:
2e:28:79:71:52:d2:7c:e6:e8:ac:47:2b:b4:86:dc:
20:17:f3:80:69:c7:03:4d:a1:15:46:8e:10:a9:bd:
ce:3c:3c:ef:36:ed:9f:66:70:b7:2d:00:9e:01:c8:
91:b7:6a:c8:b0:3a:95:33:71:32:b8:e5:b7:0b:af:
d9:13:74:2e:46:e1:fe:0f:0f:6d:58:ad:80:73:dc:
f7:a8:d5:d3:e7:de:5c:ac:29:1a:cc:17:e7:58:25:
a5:5e:a9:47:87:7a:b0:6a:86:ec:91:43:5f:14:2d:
55:14:c5:d8:13:5e:f8:bc:3d:f1:1f:c1:c1:12:77:
1e:a4:eb:68:23:41:c2:3f:44:ef:53:30:f2:25:f6:
c5:3b:11:e7:5f:fc:44:63:52:65:8a:2a:39:5f:a9:
6c:59:01:a6:cc:18:56:84:64:52:6c:26:d8:e6:ea:
68:00:04:a7:5f:2c:ca:1d:da:40:96:aa:46:12:31:
a4:eb:6f:76:56:dc:ef:b8:da:c7:6c:b7:ad:2c:b5:
f9:75:6e:58:73:a7:8d:34:f4:a5:b2:c2:05:b2:40:
11:00:78:c3:1e:20:09:f0:67:3b:c9:b1:15:58:05:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:C2:1E:4E:FA:D9:26:18:9B:3D:D2:A4:A6:87:35:A5:5F:0C:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1a:dc:eb:ad:c5:29:7a:da:b3:38:c5:25:f9:9f:61:f6:d0:ea:
6b:77:1f:45:fa:ef:a0:09:51:2f:69:fc:44:a1:1e:dc:69:1b:
8a:b6:36:3e:fd:e3:40:e8:6a:7e:81:ce:75:16:f7:89:96:14:
f7:2b:43:1c:90:01:c8:ac:43:f1:2c:65:42:58:51:aa:8d:58:
c2:3f:1c:79:bc:89:b0:57:d7:bf:0d:c5:c5:eb:5c:43:ad:6b:
84:b2:85:26:44:32:c4:4d:80:9a:ed:43:14:dd:05:6c:a6:af:
20:59:f8:14:de:bb:c9:30:d6:5f:6b:cd:7b:72:c3:9c:62:8f:
b4:ab:87:5f:2b:7e:e7:bd:88:78:a6:b7:e0:eb:29:46:02:ee:
66:88:0c:51:3c:eb:3f:17:af:0d:ec:af:1c:33:fb:74:db:0e:
9e:c1:bc:da:2d:4c:52:9a:44:15:1d:9b:a2:79:28:dd:5b:ab:
63:f5:b4:82:9a:62:98:67:17:a9:20:9a:ac:c0:c3:f2:8b:31:
d8:a4:49:41:08:ce:05:68:ad:21:c1:bb:7b:66:43:72:7b:09:
63:8c:38:97:08:32:e2:1c:2f:c4:c0:08:96:93:33:23:80:5c:
e8:4c:9b:6e:9f:3b:4f:21:14:1a:cd:bc:63:ee:1c:fe:92:9f:
df:60:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:50 2026 by rpki-client