Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e49c9199-e610-4935-807f-5d4a3c3186a7.roa
File: e49c9199-e610-4935-807f-5d4a3c3186a7.roa (raw, json)
Hash identifier: 47zFyqBmHDQFPwQNmutVHq6aTJIe+2iRjRJ+d4EfT1E=
Subject key identifier: 48:2E:8B:69:78:3E:92:C8:8A:D2:5B:59:CE:F4:F5:A9:37:66:A8:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C4E2C6885C6A5401CF3E22C8639EDC81A4296F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e49c9199-e610-4935-807f-5d4a3c3186a7.roa
Signing time: Wed 09 Sep 2026 16:15:17 +0000
ROA not before: Wed 09 Sep 2026 16:15:17 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4e:2c:68:85:c6:a5:40:1c:f3:e2:2c:86:39:ed:c8:1a:42:96:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:17 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=245a183eb6917205672efffe77a2fce0a8b0b94168c21d41aca3f085a36bde26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:51:0f:17:f7:bd:52:85:70:08:26:cb:c0:
51:f0:58:cb:98:13:37:42:38:f5:bd:cd:12:f1:7b:
20:95:3c:9b:1b:e1:9a:6b:59:e8:34:11:0e:56:8c:
f8:e7:45:b9:9d:99:e8:e7:8e:3f:da:18:6b:bd:c4:
86:a5:52:48:f7:35:10:f4:a4:b6:aa:4a:80:50:c6:
44:64:d0:3e:8f:b3:9c:69:e1:65:76:6d:33:c9:b3:
fd:a9:0d:db:51:54:c7:23:47:02:1c:fd:8b:de:11:
d7:d4:f9:f5:9d:d0:cc:64:99:76:71:c6:e4:af:b9:
d3:5e:86:77:8b:ea:b0:b3:a3:37:43:45:99:c3:86:
ec:28:23:b1:f3:2f:3e:94:d8:23:3b:78:31:e2:4f:
b4:4c:f6:6f:c8:43:40:a8:7a:55:77:5e:4e:0d:8b:
54:f0:57:3e:ac:6a:10:eb:93:13:dc:d0:45:f6:bc:
ec:07:99:87:d0:e9:b2:19:03:3b:e3:a9:ac:73:5c:
83:9a:08:5c:b8:79:41:ea:34:fc:c8:2a:6d:5c:bd:
2c:4e:0f:3b:6c:e8:cc:72:43:7b:3c:bc:13:55:ae:
f2:db:00:70:e0:17:c0:41:d6:7a:9c:97:62:da:b6:
3a:55:82:99:15:74:79:47:f4:7a:bb:4f:11:a8:55:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:8B:69:78:3E:92:C8:8A:D2:5B:59:CE:F4:F5:A9:37:66:A8:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e49c9199-e610-4935-807f-5d4a3c3186a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:4800::/40
Signature Algorithm: sha256WithRSAEncryption
78:ed:a8:ad:b6:93:fb:06:f7:70:8f:4b:83:a1:d6:57:a8:0a:
fd:27:d0:d2:b8:5a:54:4f:bf:1f:c7:6c:59:f6:eb:09:e7:30:
0f:f1:e0:63:06:6c:af:f2:eb:47:41:d9:43:ff:52:04:24:35:
f6:3d:d3:7c:02:f7:4d:8f:9a:61:6d:e9:80:00:bf:75:c5:b4:
57:28:1d:97:66:b2:08:b5:98:89:76:f2:b9:e2:ae:81:28:4c:
67:c8:cc:f9:ec:2e:40:ff:2e:96:db:71:bc:03:b8:ad:b8:2c:
e9:39:88:17:35:5d:4b:cc:d3:74:7b:e7:e1:4d:03:51:84:1d:
f1:d6:77:7b:63:04:0b:2a:0e:b6:c0:97:40:b5:32:a7:08:d1:
03:36:62:0f:07:c0:0a:ff:d5:d9:1f:43:55:b4:c0:ef:73:d6:
bb:ba:c7:0c:05:17:a1:eb:cd:f9:8b:da:95:38:bc:76:ab:f3:
a6:d4:57:e9:fd:9e:7f:56:64:2e:ed:c7:bc:7e:a5:76:39:26:
bb:5d:74:1d:c4:2c:15:00:d1:dd:02:f9:c1:31:33:88:ab:8b:
82:28:6a:96:5d:2f:0e:fe:87:70:2d:8b:40:ad:39:bf:02:ae:
72:d1:15:79:51:72:8f:76:c8:3a:73:d7:8e:1b:15:dd:65:6d:
c0:2c:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:41 2026 by rpki-client