Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df38c00b-a6b3-4e63-9f69-b8c3856ebdf6.roa
File: df38c00b-a6b3-4e63-9f69-b8c3856ebdf6.roa (raw, json)
Hash identifier: XWZFndxaS+ToetGNJaevAog/jnSUm523+iYV57KUJjo=
Subject key identifier: 17:B2:BF:E6:82:61:32:29:DC:7A:38:E9:1B:0A:88:DE:B9:84:91:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64DE7733091D9F887370FC202F84C68D20EE5469
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df38c00b-a6b3-4e63-9f69-b8c3856ebdf6.roa
Signing time: Fri 07 Aug 2026 05:30:16 +0000
ROA not before: Fri 07 Aug 2026 05:30:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:de:77:33:09:1d:9f:88:73:70:fc:20:2f:84:c6:8d:20:ee:54:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=dabd4c12b16d9054747122c2a3d239a5a9bfdaf6d735f11d4ef3e7aa3d38b217, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:07:5b:de:1d:a0:69:21:3a:46:8d:96:ad:
3a:2e:f1:df:c8:7b:da:6c:dc:cd:cd:bc:e8:58:c5:
d7:b8:da:d2:2d:db:89:89:9f:14:b2:f8:92:62:2e:
28:07:66:3a:56:18:9b:3b:22:de:9d:91:02:45:37:
3f:1b:13:92:e0:4d:48:31:fd:40:1e:63:dd:91:03:
9e:c2:7d:25:30:10:d5:2e:0b:14:53:5c:ee:62:85:
9c:7b:97:9b:06:af:55:2b:ea:68:9a:cc:a4:8a:33:
06:16:91:f1:29:ab:40:63:f6:08:95:5b:b1:a0:64:
48:bd:56:62:92:97:af:17:24:1c:ea:3d:20:7f:46:
fd:46:da:8b:e6:44:a6:e4:ed:0e:b1:fd:7c:7e:60:
16:04:45:f9:f3:17:2f:3b:9c:4b:cc:8a:24:a2:0b:
6e:72:3c:36:bb:93:05:36:d1:f2:4e:59:6a:49:e9:
67:25:f5:c0:0f:ad:8c:49:67:8d:c9:7b:76:f4:74:
ff:45:09:f2:59:d6:d0:ef:3d:a3:e3:64:ae:a2:d4:
f7:58:f5:2c:e0:ba:13:b7:ec:7c:66:22:f7:b5:cd:
16:77:26:64:15:e0:14:2c:7d:fc:b5:cd:95:1d:67:
1e:0e:61:de:9e:24:46:cc:42:1b:d2:06:9f:b3:13:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:BF:E6:82:61:32:29:DC:7A:38:E9:1B:0A:88:DE:B9:84:91:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df38c00b-a6b3-4e63-9f69-b8c3856ebdf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:8a:59:67:5f:cd:2c:1a:43:73:32:6d:18:a0:d4:db:b4:27:
dc:88:1d:d9:84:a0:8b:21:e4:ca:77:92:0b:ac:f5:4f:b4:23:
c6:96:c1:1f:a1:8e:7e:d6:bf:4f:2d:97:2f:ee:01:af:6b:6f:
31:ed:46:c4:89:93:cc:44:34:a2:13:91:2b:9c:5e:02:f7:86:
a1:a7:5c:a5:c3:11:43:d7:77:f5:d0:df:cb:78:e2:f8:55:e5:
2b:5c:47:2e:96:29:3a:78:91:32:34:59:d2:2f:7d:00:c4:a7:
6b:09:97:eb:3e:ba:7a:02:9a:ae:a7:c5:e1:d1:8a:29:2d:94:
70:b1:a9:71:52:85:e4:26:7c:a7:70:3b:b0:30:d9:63:d9:e2:
24:6b:b4:c4:94:02:f6:69:8b:51:5b:35:00:a4:a0:95:9a:30:
4d:d7:00:e8:58:40:36:47:f9:72:71:cd:44:32:a6:50:b9:c6:
06:f5:1f:17:af:70:8b:e4:ff:0a:fb:b5:58:4c:18:09:30:78:
2a:04:5e:72:fd:06:4a:fc:b2:da:ee:00:a3:10:e1:5e:c3:61:
9a:4c:e9:93:e7:6c:8e:19:8c:2c:c5:3d:ad:7f:64:34:fb:a2:
f0:40:7f:3a:44:7e:ba:44:2a:38:5c:f0:71:56:92:1f:f1:75:
4d:38:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:48 2026 by rpki-client