Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
File: dd7649a8-cae4-4d67-90f1-f01144285a2f.roa (raw, json)
Hash identifier: MA07FbhDfB52DZNugGRCqkE2pcyKmsBwpqoudlvlsDY=
Subject key identifier: B6:89:4A:15:60:0B:BE:85:EF:C2:D5:8E:91:75:C2:CE:CE:FF:76:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17AD468C777E0B89ADE57C2BC02EE87CC4044FFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
Signing time: Fri 07 Aug 2026 04:40:13 +0000
ROA not before: Fri 07 Aug 2026 04:40:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ad:46:8c:77:7e:0b:89:ad:e5:7c:2b:c0:2e:e8:7c:c4:04:4f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d8369efcda40aeae69adcad5398bfad92eed0738e86496b5b72e884fcce90fb0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:f8:29:05:5f:ce:54:45:fe:d1:87:40:6e:
55:d6:c3:58:8f:97:a6:00:21:6a:5a:cd:69:cc:2c:
40:53:23:4b:f4:b0:05:19:05:0c:4a:b5:1d:9e:a8:
d8:a8:8c:e7:20:b0:f9:f0:91:22:a8:ba:9e:a6:2e:
66:c4:d0:0c:9d:47:19:19:4a:f7:5a:16:77:26:f8:
32:a8:0a:d6:29:57:48:78:f9:c4:5d:7e:29:1e:dd:
ba:ee:71:c8:1e:f1:b8:d2:8f:c5:e8:46:c3:34:41:
e1:06:0a:55:51:08:f6:01:8a:dd:69:8a:37:ce:e9:
20:33:b8:e9:a6:72:7f:f2:16:de:42:79:41:dd:3e:
30:fe:39:11:52:6f:6c:4d:23:6f:a2:ff:34:0c:ea:
be:2e:7a:92:d6:6b:90:83:1c:67:8e:df:d5:37:f7:
9f:22:31:b8:53:20:72:12:62:e8:d5:c3:bb:69:1c:
5d:19:66:27:ee:1a:ad:17:71:32:76:81:ff:11:0a:
d3:41:8d:ab:3e:1d:1c:cf:da:43:d8:dc:74:04:43:
06:aa:6f:e4:c6:c5:3f:d0:8c:95:c8:ae:1e:75:13:
b9:e1:68:a4:db:49:7d:38:df:5f:f2:04:1d:f2:61:
07:86:d3:4d:f9:bc:01:4a:dc:a5:2f:fe:b8:d7:f5:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:4A:15:60:0B:BE:85:EF:C2:D5:8E:91:75:C2:CE:CE:FF:76:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4040::/48
Signature Algorithm: sha256WithRSAEncryption
33:32:66:9b:66:10:02:e5:86:3b:13:87:1d:d2:19:bb:80:7c:
d2:6c:c5:e0:95:ac:39:bb:8e:44:99:f2:1e:dc:b2:49:61:29:
38:8c:bc:29:11:a4:1a:3f:19:ae:fb:4d:92:2e:af:aa:42:43:
0a:7d:1f:40:a4:4b:8f:f9:e5:fc:0b:38:2b:29:d9:6b:c2:27:
b0:62:c2:23:48:4e:f1:46:6c:af:ac:dc:46:3b:c8:77:57:22:
17:76:04:0e:fa:46:d9:0e:fa:49:ad:d7:c5:2d:14:7b:ed:ed:
40:5a:09:bd:1b:a0:09:af:4b:ee:0f:6f:be:e9:0d:08:bf:cd:
d9:f5:41:76:03:84:b5:b3:f5:42:60:d0:48:75:dc:60:04:34:
55:42:57:18:b1:74:32:59:87:06:dc:78:5e:be:e1:ce:cc:00:
99:d0:13:30:6e:fa:61:60:d5:b1:42:a9:99:95:36:77:e7:08:
61:8c:76:06:34:92:27:be:fc:13:aa:dc:29:a2:c2:fb:26:f4:
0e:80:3c:f1:e8:bf:3d:32:6c:1b:d2:83:1e:82:77:4d:38:8a:
d3:6a:ea:8f:15:24:4c:09:75:62:b8:00:fa:c8:39:c9:d2:3a:
26:01:ac:a4:d5:66:fe:8f:7b:7a:49:e6:3f:81:32:8c:7e:21:
40:4c:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:28 2026 by rpki-client