Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
File: decd4459-2e9b-442e-a3bd-6633fdd0250b.roa (raw, json)
Hash identifier: jTi2tnSrEteZKd3RhmqSETASZuB7ZtbbJooS4c5qsDk=
Subject key identifier: C4:31:3D:7E:4B:7E:CD:E4:14:B4:30:2E:19:EA:FE:23:2A:D8:4C:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1AB8CE4CE7C752DFC96C5825DD974DC070B54E82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
Signing time: Fri 07 Aug 2026 05:00:31 +0000
ROA not before: Fri 07 Aug 2026 05:00:31 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b8:ce:4c:e7:c7:52:df:c9:6c:58:25:dd:97:4d:c0:70:b5:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:31 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0f23d8fe0620d4cee1f1d9ea2dbebbba2169dc8b9df34d9403e245d48fb1b464, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:20:e9:1a:14:6f:bc:9a:39:2d:6c:15:35:
da:07:bd:fb:e2:2b:06:c5:12:31:47:47:c4:da:cc:
2c:25:e0:4d:38:e8:ae:11:f3:8b:2d:d1:e9:97:c8:
90:e7:a6:77:2b:87:be:7c:ef:55:14:47:45:03:c5:
82:41:a2:78:18:8b:be:ed:3d:a0:d2:09:02:bc:d6:
a9:82:a7:f8:81:37:fa:a2:33:d6:4c:64:df:aa:3e:
23:3c:d8:03:a9:e3:d1:1e:bf:ed:e0:36:cb:93:30:
77:74:32:83:50:0e:b2:12:3d:27:5b:87:63:21:de:
37:79:7e:c4:5b:77:cb:c9:ca:c9:a9:54:59:52:b1:
6c:f6:f9:ce:de:c0:48:f6:2e:4d:7c:db:8f:25:62:
cd:c9:a4:03:13:bc:74:61:45:2a:c5:fc:12:90:aa:
a3:11:70:5b:1e:03:39:e6:54:98:2d:2f:4b:7f:e4:
2d:98:36:44:58:72:22:9e:30:78:9b:da:86:38:8a:
f0:aa:79:6c:25:e9:ed:34:cd:83:d1:55:bb:ec:a1:
56:ac:32:72:6b:a9:30:a1:31:17:74:96:20:ce:39:
47:a1:28:d6:18:af:8d:1b:df:8c:de:bb:7a:b0:bf:
e1:04:7e:64:76:e7:e8:ff:f1:46:db:70:7f:f2:6c:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:3D:7E:4B:7E:CD:E4:14:B4:30:2E:19:EA:FE:23:2A:D8:4C:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:1b:6c:e5:10:80:3f:5a:7e:5a:68:fc:5d:35:31:cb:46:01:
b8:ca:04:73:bb:58:a3:0d:83:43:cf:db:fb:38:8e:ab:d7:5f:
33:84:55:3f:95:dc:9f:06:01:29:b3:6f:22:20:49:e1:c5:9c:
ee:f1:67:83:78:d1:2d:cc:64:8c:53:9d:63:08:8c:33:b2:bb:
dc:ed:19:02:78:55:b5:eb:90:fa:5e:a6:33:10:14:31:dd:94:
a7:02:05:90:ad:98:4d:c6:10:f3:d1:23:90:ac:e3:8b:6a:88:
e3:92:f6:b7:22:aa:32:03:87:fa:7f:89:78:78:4a:8b:89:b9:
96:36:52:68:38:e2:59:70:6f:ba:8e:f6:02:c4:d0:a4:6d:4c:
7f:b3:25:fe:5e:50:51:1c:89:87:56:b1:47:89:45:da:cc:fd:
aa:8b:ad:74:7a:ca:0f:39:34:dc:b7:ce:3a:88:bf:31:e3:50:
23:96:52:6e:61:ab:19:50:ed:1e:79:2a:35:47:94:35:6f:a9:
3d:1a:e2:48:f7:b8:0a:5f:25:0f:93:c9:51:a8:35:f0:0d:c8:
2e:06:c1:c3:d5:b3:2a:ce:b2:86:65:0b:9e:e7:b1:59:f5:db:
a3:76:10:b1:d5:f2:b8:16:2e:66:65:29:56:f5:96:87:c2:05:
c8:92:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:33 2026 by rpki-client