Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
File: e437969a-a36c-4417-88bd-c48ac88d9a5c.roa (raw, json)
Hash identifier: qNCHPJa+N6rWcxI/RAwNxL5cHbawxV+oDGecDR41LT4=
Subject key identifier: E4:7A:20:E0:FB:F7:45:E4:69:55:40:A6:AE:38:38:FB:D8:E4:DE:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FC541832011E2571E04585CA63C762F64982A49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
Signing time: Fri 07 Aug 2026 05:20:56 +0000
ROA not before: Fri 07 Aug 2026 05:20:56 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c5:41:83:20:11:e2:57:1e:04:58:5c:a6:3c:76:2f:64:98:2a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:56 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9637121ca17ade3b44c7affe70699cef8047491818f313f2439964a69ce5a206, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:78:65:3e:1c:81:f6:ec:bb:70:ee:27:dd:
c5:70:9e:b6:8f:bc:c8:5f:38:7d:f5:cf:60:ab:f8:
47:7f:c2:38:5f:30:40:d3:76:fc:38:10:37:83:56:
5c:3e:e5:47:95:c5:54:4c:0f:d9:19:31:2c:6c:d1:
1e:42:98:6f:8c:70:b6:92:d8:2b:96:bc:9d:59:5f:
67:ff:93:45:05:e3:e8:2b:3c:72:fd:d3:d0:b6:d0:
08:52:d9:22:c3:89:0f:01:4d:7a:c2:c0:11:9d:ea:
f1:0b:50:b5:50:cd:72:de:4a:11:de:ae:a0:2a:e7:
12:ab:09:15:ac:13:41:0b:c4:c1:51:dc:15:cb:ac:
8f:c6:52:fe:5e:6a:e7:06:67:4d:59:cb:53:70:f1:
0b:b8:39:26:b1:85:72:95:cc:8b:9a:d4:30:f1:24:
79:06:8b:b4:95:3c:3b:cb:c6:6f:14:e0:62:68:8f:
e3:20:1f:38:27:61:7b:5f:b9:aa:6b:df:08:8e:46:
55:0e:d6:c6:be:bd:f0:cf:e0:8e:3e:0d:9e:3e:45:
02:7d:d3:cd:40:d4:59:f4:5e:38:97:ce:87:79:f0:
03:ba:ec:6a:24:9b:63:3a:e3:59:6b:fe:36:3e:74:
e4:3d:a3:bd:7c:8f:a2:07:79:2e:99:7a:2c:ab:ec:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:20:E0:FB:F7:45:E4:69:55:40:A6:AE:38:38:FB:D8:E4:DE:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:b080::/48
Signature Algorithm: sha256WithRSAEncryption
16:86:0d:1c:43:26:46:88:8c:e9:67:2f:e7:3f:6c:f8:2b:6d:
ab:fe:91:25:5b:f8:4d:c8:a4:bb:67:c5:64:8e:5b:d0:23:92:
2d:b8:92:b1:06:b9:0a:a5:fa:21:8c:12:e7:fb:a4:dc:3a:51:
bd:35:68:1d:05:07:a4:a3:5e:a7:f2:e1:3d:3a:b6:24:fe:1f:
33:75:08:e0:9d:4c:79:ca:1b:f2:75:7d:9d:97:a9:b0:38:0c:
e4:2e:5f:76:c8:5b:25:8f:50:5e:f7:70:86:34:95:91:1c:e6:
9a:6f:22:d2:99:f7:a8:2d:1c:42:ce:2a:d6:e1:58:6d:74:9a:
97:f4:95:a8:57:65:97:b2:62:d4:2e:23:39:fe:28:68:d3:89:
76:b4:4b:bf:8a:d8:c0:6d:4d:b3:53:1d:5f:cb:a1:64:15:7f:
51:97:76:ec:cd:c5:c1:ef:f7:20:ae:9c:0a:d7:fc:6b:41:8e:
da:05:9f:3a:f7:1c:26:2d:f6:56:31:cc:b9:85:ea:9b:69:d6:
24:78:2f:33:a2:99:9d:2a:bc:39:92:58:66:20:50:e5:e5:77:
0c:a7:11:a5:a1:6b:81:bb:7f:fd:cc:ea:da:b5:8a:41:9d:18:
35:09:f7:d9:71:4f:7e:84:44:1a:b7:61:f7:30:62:97:42:ca:
f7:dc:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:48 2026 by rpki-client