Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
File: e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa (raw, json)
Hash identifier: K/op1ZoSjz6e3fycBUH2qfgjwHRwU4oGss5pdmHlGRs=
Subject key identifier: 20:90:A0:19:DE:CB:90:A4:F7:86:C4:59:04:17:3A:11:6F:43:93:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 697472845C0343C4ECC98482709ECA5A2A38E589
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
Signing time: Fri 07 Aug 2026 05:10:42 +0000
ROA not before: Fri 07 Aug 2026 05:10:42 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:74:72:84:5c:03:43:c4:ec:c9:84:82:70:9e:ca:5a:2a:38:e5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:42 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=908019585d5ac97d7971bddafb40c38d2209b624e2fa4458a30ca7dddda3aa58, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:fe:05:92:ce:bf:2d:25:fb:61:1e:08:8c:
da:5c:a3:0d:6c:54:2d:1d:ad:70:49:6e:e7:6c:c9:
b5:55:20:6f:ae:9c:a1:87:e3:e0:14:cf:8b:5f:de:
b0:53:93:00:3f:57:af:73:3b:6a:49:d6:e3:92:08:
f3:d5:b5:9f:cf:1e:dc:a1:2b:c6:52:5b:ba:38:8a:
9e:20:f0:f5:81:a0:8d:61:c6:1f:80:7b:7e:c4:73:
a0:40:28:5a:6c:cd:c7:6f:5a:ca:d7:03:b8:f1:81:
66:ba:fb:fe:74:f3:ec:d3:ba:65:73:22:8f:bb:71:
74:1e:65:ac:26:ff:57:8a:6e:18:25:85:26:7e:a0:
73:38:62:cb:83:42:1a:87:0e:ff:fd:15:99:55:a0:
2e:28:b9:72:aa:dd:c9:c9:2c:72:10:78:d4:5d:5c:
52:cf:41:ce:77:d9:02:14:b2:4c:06:ce:8f:a9:8f:
3d:22:cc:3e:a7:a4:00:21:6e:c4:7d:72:98:3a:42:
52:7d:03:42:ec:98:99:4f:47:c7:0b:71:d8:4e:37:
76:dd:6b:00:bf:9a:72:80:25:4e:7b:92:3d:79:b9:
13:1c:c7:6a:dc:e8:7b:8f:06:53:05:de:02:95:2a:
38:60:fb:05:58:ca:81:48:f7:f6:75:a2:89:03:3f:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:A0:19:DE:CB:90:A4:F7:86:C4:59:04:17:3A:11:6F:43:93:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/35
Signature Algorithm: sha256WithRSAEncryption
3e:ec:e0:fe:92:b0:0f:9c:d2:cb:c6:a9:ab:d8:04:90:5a:fa:
f1:8c:84:b7:2a:42:7f:01:25:2c:1a:11:b9:39:9f:a3:ae:7f:
f4:b3:42:d8:90:3a:ac:57:dd:42:0d:de:6d:e3:51:86:cd:8f:
81:1c:84:2b:87:3d:e7:65:12:a2:94:cf:7a:d8:d2:3c:52:ba:
27:13:dc:16:ae:68:8b:91:2f:23:4e:47:b7:9e:5d:5f:6d:37:
ed:67:b9:c7:d7:09:7f:c7:54:44:0b:52:9d:e5:3e:7d:d7:62:
80:b4:97:94:b8:2e:13:fd:b1:6d:8c:ce:b5:4a:41:72:6c:c2:
9a:2f:62:6b:32:0f:ba:26:a1:de:a9:d8:07:25:c7:db:11:ee:
ce:86:d7:04:e3:5d:42:4c:62:b6:3b:05:56:f9:1c:41:20:0b:
b5:6d:9e:26:00:89:98:f9:a0:77:dd:ed:79:5b:d4:20:cc:31:
26:4c:5a:fd:ea:6b:15:83:1a:30:39:c7:ad:77:26:84:11:ea:
64:84:d0:39:89:9e:83:35:a9:9d:27:4a:b5:60:a0:4a:ad:67:
5f:64:b4:27:60:62:fa:89:5b:db:17:e7:04:d2:6f:90:e3:0d:
79:d7:33:b2:12:66:bb:a7:69:8a:05:2d:3f:7d:f2:a4:a4:ee:
65:50:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:24 2026 by rpki-client