Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
File: e396d806-dffa-4609-8ae4-1e8fdbde728e.roa (raw, json)
Hash identifier: 7XWP3qYSIGK/Dm2MCGbWfamJF8IjkzBMaMEY3fQkKRs=
Subject key identifier: CF:23:07:32:05:C3:EB:16:71:2B:CC:8E:0E:B6:32:F8:9F:FE:1E:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65EF5E40B3244B4463EE756959E5B021FA19D29F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
Signing time: Fri 07 Aug 2026 04:50:12 +0000
ROA not before: Fri 07 Aug 2026 04:50:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ef:5e:40:b3:24:4b:44:63:ee:75:69:59:e5:b0:21:fa:19:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1087c4c179d1856c8fb1ebacc72a949d92ec10a071c966956298d9a9cfc5df7a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:cf:e8:ee:4a:ab:b6:8c:a1:59:76:3f:84:
13:87:cd:33:73:4a:47:3e:47:69:07:62:d7:ce:e3:
5c:9e:7f:a8:85:1a:0e:42:94:90:0f:19:00:97:c3:
c7:bc:e5:a8:84:d8:4f:ec:ee:aa:b1:ee:a0:c7:f6:
b7:17:3a:d1:7b:7b:82:94:92:24:a3:03:63:7f:73:
cc:ca:4b:c6:18:b9:cc:27:75:91:f8:a5:30:3d:53:
1d:c4:61:ee:77:af:21:cd:6d:0f:ce:63:4e:26:b0:
3e:5c:da:7e:b6:3e:97:c3:d1:c2:06:ce:73:1e:3a:
71:6b:2b:d9:33:1a:4e:ef:b1:e5:f4:6f:90:7f:3b:
78:b5:d4:81:e4:b2:4d:f6:f0:5b:dc:41:45:be:ac:
92:17:60:16:3b:7b:2e:c4:99:99:b1:50:8d:45:e2:
42:ff:92:90:c0:4e:ff:40:ea:76:2b:99:3b:11:f3:
e2:d8:a1:6b:25:7b:c5:97:f0:39:1e:5f:a4:e1:5f:
90:d7:23:08:b7:89:20:33:4a:45:a0:60:47:20:dc:
95:4b:8a:da:d4:3d:c8:e1:3f:24:77:3e:15:a4:f3:
25:6e:b9:6d:b0:a1:13:a5:d4:65:a4:84:07:a6:1c:
6f:5a:32:72:e7:4d:1b:76:f4:35:91:eb:1e:b2:08:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:07:32:05:C3:EB:16:71:2B:CC:8E:0E:B6:32:F8:9F:FE:1E:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
72:0d:73:b4:25:5c:a6:d6:d5:60:04:15:b0:35:af:70:f7:75:
0a:4c:c5:24:9d:ce:7c:8a:1a:d1:87:02:e2:9b:3b:f3:57:c2:
0a:71:1f:76:29:61:b6:3b:b9:e2:5e:c3:44:ea:f4:66:79:45:
f5:c5:6f:06:29:24:be:9e:82:17:44:64:e6:dc:22:aa:fe:72:
fe:d9:85:72:67:d6:67:df:db:07:bd:f5:9d:29:5e:c8:72:85:
e1:f7:3d:01:59:29:c1:c5:45:15:da:ff:7c:52:f6:2c:93:51:
0b:3c:b1:c3:2f:87:b0:30:46:ed:f0:03:55:6b:ad:a0:db:6d:
da:f3:e3:e1:df:51:f6:7a:8c:3d:0f:a3:09:d1:d3:46:31:02:
35:a0:e8:43:14:3b:23:71:8d:c1:50:5b:04:c5:89:93:1d:95:
7b:56:7e:4e:e8:97:7a:b9:fb:51:28:22:fe:ab:4a:01:b0:5c:
1a:1c:23:82:4f:61:95:77:16:e2:7f:31:19:88:b7:39:d8:0f:
4e:a6:6f:a2:cb:ad:08:5c:49:15:20:4d:98:92:77:00:9c:d8:
f4:70:65:af:f4:8f:7b:7f:bd:46:d6:0f:6c:42:f0:20:2d:94:
66:c5:6f:d9:1d:ca:6b:96:38:85:d7:f2:5e:6e:2e:0f:2a:f6:
81:44:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:28 2026 by rpki-client