Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
File: de12834a-9370-4c63-969f-bf8eef4cd73b.roa (raw, json)
Hash identifier: DuQI915sHYDhr1gGXHyEomq9GACMHBxsTHXVLx8gVP4=
Subject key identifier: 2B:9C:27:55:F6:FF:6D:11:B7:EA:D4:40:44:E6:64:2E:33:FF:F7:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 412E4D906D8E5BE851C4E4FFCEC6DDBD939081B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
Signing time: Mon 03 Aug 2026 02:00:10 +0000
ROA not before: Mon 03 Aug 2026 02:00:10 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2e:4d:90:6d:8e:5b:e8:51:c4:e4:ff:ce:c6:dd:bd:93:90:81:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:10 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=389bda65e183b2e880b6f24f96a632df4ed49054ab18e8b22c93200bc2d2299a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:b7:86:bb:33:e0:28:dc:c0:2e:13:1e:3d:
6c:f5:69:4d:84:f7:99:55:c1:60:cb:cd:6e:8b:d6:
5d:ab:9f:fc:fd:e0:53:ca:5c:52:17:1b:4a:9d:3f:
a8:d2:c3:c3:fa:49:0b:3b:e4:4e:4f:97:9e:7a:69:
ae:ef:48:f1:9b:11:f9:65:56:05:7f:89:de:65:d8:
6b:00:ef:7f:90:50:de:eb:dd:44:8c:3e:f3:1e:09:
60:58:18:b8:b1:84:7c:68:78:10:e4:a7:81:42:a4:
25:c5:df:ea:2d:62:75:26:c6:be:81:86:59:d9:d2:
68:0f:72:9a:40:3f:e9:8a:c7:d9:05:c0:25:61:a0:
7a:10:73:11:d6:26:e2:b1:26:2d:af:04:3a:59:8a:
c7:d7:7c:c6:0c:1a:50:05:87:6f:d2:69:ce:90:5e:
d6:c7:0b:e4:c9:f1:eb:5e:9f:df:c0:95:41:40:f8:
41:97:fe:f4:9f:39:d2:c6:1f:85:bf:a6:ed:67:90:
07:aa:14:a8:8a:2f:ee:0d:15:1d:b3:d8:38:7a:5f:
11:a7:b7:e7:ae:65:e4:84:50:71:c1:f6:8b:f2:88:
27:ef:fa:4f:aa:23:f9:2c:97:12:0d:15:ad:09:51:
9c:f6:b0:ca:f2:fa:db:e1:1c:bc:eb:44:60:94:58:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:27:55:F6:FF:6D:11:B7:EA:D4:40:44:E6:64:2E:33:FF:F7:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4010::/48
Signature Algorithm: sha256WithRSAEncryption
c6:3c:75:db:cd:b4:24:4b:1f:2f:16:63:90:99:ef:c1:00:0e:
d7:3d:d7:16:1a:f4:92:64:47:40:c9:b9:21:cf:ac:b4:2d:f0:
4a:37:e6:0c:3e:04:b0:33:c2:71:b1:a5:3f:27:98:af:b3:8b:
91:f7:6c:da:ec:cf:27:2d:1c:b9:59:02:a0:aa:db:90:60:5e:
ed:6e:f9:aa:95:64:0d:8e:35:c3:eb:0b:34:60:0e:52:a2:c5:
f9:08:11:01:d7:15:7f:d3:70:1c:88:97:9b:ee:b7:6a:53:68:
c0:e9:f9:22:0e:ef:40:40:0b:0f:22:1d:62:a8:a4:40:ee:06:
42:e2:d3:71:e2:da:9d:21:ed:d2:0f:a9:0c:24:fe:3e:45:72:
71:6c:c7:1b:21:81:05:a7:40:b7:09:e9:8e:eb:4d:4b:0f:80:
0e:5c:3a:6e:8f:61:9c:3f:fc:be:61:7d:3a:68:ad:13:2d:20:
ea:d4:61:d4:c4:48:56:16:8d:4d:c3:76:cc:63:d5:9a:58:92:
5f:b2:35:bb:5a:31:b1:03:41:a7:05:68:54:74:fb:2d:a2:06:
73:3c:73:f8:cd:3a:c2:32:bf:1e:ca:3a:da:0c:2f:a8:05:84:
67:1f:4c:1a:07:fe:ac:28:03:1c:72:d1:11:01:4f:fc:8a:f2:
c3:52:a1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:15 2026 by rpki-client