Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
File: df2565df-3632-4ab6-afc7-e11564fe17f9.roa (raw, json)
Hash identifier: 5XORlH/lV3Y9Z8D/UHovjHvh+q+WXmQXlKlOPUwZqTM=
Subject key identifier: 68:0A:EB:88:CD:09:FB:D5:00:0F:A0:C5:BF:A8:F7:4D:D6:C8:03:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FD1F00B532B3734F0BE135D25B15CD54DD0EC31
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
Signing time: Wed 19 Aug 2026 00:50:07 +0000
ROA not before: Wed 19 Aug 2026 00:50:07 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d1:f0:0b:53:2b:37:34:f0:be:13:5d:25:b1:5c:d5:4d:d0:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:07 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=8d7a00a79cb94d25d6e664aac86b97b3f5602639f17f08e2f0c94d90c1be92c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:24:4c:bc:9d:09:70:aa:ca:63:ee:da:14:
06:34:03:b0:a5:e4:8e:24:ed:66:d5:1e:d8:75:d0:
71:4f:f6:ec:db:20:83:75:18:30:fc:70:98:71:ec:
b6:7f:22:aa:66:ad:f9:99:7c:91:4d:e2:6c:ca:e0:
5a:1f:d6:02:bd:5c:3a:53:64:c6:91:78:b0:ef:de:
75:d2:9f:5c:d4:9f:67:ff:fe:57:ef:0a:95:f0:a6:
8d:52:5e:53:ae:eb:62:dd:5d:82:61:15:16:78:66:
be:ad:1b:58:c1:88:7e:01:7c:4a:76:26:10:f0:03:
18:35:8d:ea:5f:a4:71:ac:1b:14:21:43:0d:2f:cf:
0d:fa:22:10:b5:be:f1:cc:4a:a1:36:ed:2a:41:99:
ef:57:1d:d2:01:e8:b5:e3:fb:04:67:c4:ad:3a:90:
8f:26:69:11:57:eb:36:2b:9c:03:fb:11:e5:f0:a7:
c3:b3:ce:97:56:22:07:b0:ea:1a:9c:a1:da:01:dd:
97:9b:c0:88:27:79:6e:9f:a8:ff:87:54:84:2d:4b:
60:ba:13:a4:92:7c:f8:cb:c0:ff:46:d7:d5:85:19:
7d:c1:81:ea:1a:29:11:0d:78:61:13:dc:f4:e9:0a:
0a:c9:8a:b3:54:ab:0c:f9:b8:ab:2a:b8:f0:b7:28:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:EB:88:CD:09:FB:D5:00:0F:A0:C5:BF:A8:F7:4D:D6:C8:03:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5040::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c9:e4:06:bd:72:70:6f:54:6e:e3:bc:c9:57:49:2e:ed:91:
f2:83:cc:5d:c5:51:fd:9b:ae:8d:dd:01:a8:f0:bb:c1:49:fc:
35:da:5c:1f:de:f4:89:45:2e:dc:ac:a2:f0:2f:ad:e1:12:cc:
50:da:ee:9a:d9:49:03:93:4c:8e:5f:42:39:cd:ed:94:31:99:
77:b2:5a:42:8c:88:ee:b0:54:09:ac:5c:eb:ec:19:d8:15:90:
18:13:cc:7c:83:f7:05:90:1b:a6:6b:e2:93:22:b1:cd:66:6f:
01:1d:12:7e:06:8a:82:ad:4c:7d:ce:b5:06:ca:fb:27:56:e4:
1c:c0:52:55:8e:0a:b0:bc:72:d9:0a:ae:ee:fa:f0:a6:ec:dc:
04:57:62:c3:8b:d0:5f:50:66:00:cb:8d:e3:4f:08:7b:61:aa:
1d:5d:63:ef:b1:80:45:5a:ec:67:bc:72:57:7d:0b:cc:16:1c:
43:6a:4d:a8:10:c8:93:77:b7:9c:07:bd:6a:6e:7e:e1:b4:1a:
dc:f4:e2:f0:b9:0e:42:3f:94:b5:7c:29:64:16:39:bd:a0:38:
43:1f:ac:2f:b8:50:ab:9f:7b:19:60:8b:a2:5b:34:e5:a1:c9:
56:b4:f3:b7:14:3d:f0:57:5a:bb:18:13:f5:3a:e1:82:72:2c:
a9:ec:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:18 2026 by rpki-client