Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
File: e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa (raw, json)
Hash identifier: vss3SmAcmLoHwioKQilVMbbSSmqBp1Ry91VM2z6NkXQ=
Subject key identifier: 75:6F:C0:CE:BD:39:15:E2:81:85:3C:A6:CE:CD:04:A1:87:AD:7A:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 630E6E220436714242054E60CF5BD72F67112F58
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
Signing time: Wed 19 Aug 2026 01:10:16 +0000
ROA not before: Wed 19 Aug 2026 01:10:16 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0e:6e:22:04:36:71:42:42:05:4e:60:cf:5b:d7:2f:67:11:2f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:16 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=590a07a4c6d0bb78a0aa11d537f23682bf86c516e4037534c7e74e1addaa2e0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:b6:87:6e:53:47:22:f8:e8:5b:f5:61:06:
e9:28:56:2d:69:3c:9a:98:13:0d:c4:b1:0e:bf:0d:
32:b2:bd:c6:4b:fa:7d:29:aa:99:16:c5:de:84:4c:
a4:ee:ed:ec:ae:fc:f0:88:07:ce:29:58:ef:7a:b9:
b5:19:10:05:62:0c:43:ac:20:4c:90:20:fd:aa:0b:
ba:d3:37:b6:bf:55:cd:94:35:f9:2a:55:d3:52:ed:
03:41:66:4c:8e:75:e3:78:76:11:d1:b4:b5:a7:8a:
5b:4d:4a:05:76:17:22:ee:40:30:90:5d:49:c9:5c:
cb:ea:82:fc:bf:a0:3f:07:40:42:6b:3c:d2:ec:6c:
97:40:43:94:0c:8d:5e:63:8b:2e:56:23:8f:11:bf:
ff:84:d3:68:5a:cb:5b:6c:5f:94:a5:69:8c:43:08:
86:d0:b8:5f:3c:c1:c2:be:5e:d0:f0:82:7f:69:d3:
3b:1a:1f:81:c3:1f:e5:63:6e:99:34:0d:a8:65:6b:
e3:fe:91:3e:89:55:e3:2c:20:3e:ab:53:75:9f:a5:
16:ab:c9:91:c9:d4:b1:e5:63:77:78:01:7a:22:cd:
0b:1c:d3:49:9d:dc:60:ed:1c:26:a3:c8:64:a2:ad:
b6:ef:fe:c3:20:14:e6:cd:ba:57:c8:65:61:2d:d0:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:C0:CE:BD:39:15:E2:81:85:3C:A6:CE:CD:04:A1:87:AD:7A:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c080::/48
Signature Algorithm: sha256WithRSAEncryption
2f:19:bb:00:ae:6f:03:65:e9:04:3f:0b:24:e8:2d:58:8d:6c:
0a:c2:e3:d7:d3:bd:6f:77:49:d9:34:65:3a:62:6a:56:78:e7:
17:1d:73:31:e8:ce:f8:77:80:7f:d0:60:50:b9:cc:b7:d9:2c:
7d:08:47:6f:6c:c3:be:ee:f3:b4:32:66:a2:45:f0:54:c6:c5:
3f:ba:49:af:20:f5:6f:2f:7b:49:86:a0:cb:0a:60:1e:a2:27:
f0:8f:9c:35:d8:69:8d:44:22:c5:11:2c:bb:0e:53:39:6e:96:
da:b7:d3:0d:f8:b2:64:9d:6f:90:ba:ba:78:34:a6:bf:95:8f:
a9:23:9d:6f:f3:92:d2:36:e3:39:7a:b8:5c:d0:d4:cd:9e:ec:
d1:a7:03:f4:89:28:c2:6d:52:57:c8:9c:c3:00:68:77:bc:dd:
9c:6b:f7:7c:03:e9:f0:68:0e:db:9e:d7:bd:be:c8:db:77:4c:
b3:03:0c:91:4a:a4:d4:cf:d8:be:fa:56:6b:67:ce:b5:2f:7b:
7f:9e:2a:cd:e5:54:70:da:ae:44:a1:c3:ad:a3:7e:74:a1:9b:
7c:ef:aa:a4:4b:b2:45:f3:72:6f:2f:c8:21:95:39:de:36:ef:
f8:c9:be:82:0e:bb:2d:38:8b:2c:ea:39:ee:82:c1:08:cb:ba:
b1:b8:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:56 2026 by rpki-client