Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8353e05-ab34-4f17-8e25-b11a10868a5a.roa
File: e8353e05-ab34-4f17-8e25-b11a10868a5a.roa (raw, json)
Hash identifier: G+LNiM6kExhhkO/4mw5Mi/TSDXn1gN3ujzvJWUFM7MI=
Subject key identifier: BE:09:49:55:02:8B:8C:4D:E4:EB:1A:E6:D2:6A:13:37:08:F0:AC:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DCE117B4B200FDE020B1A8EE494213591FBC893
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8353e05-ab34-4f17-8e25-b11a10868a5a.roa
Signing time: Wed 09 Sep 2026 16:12:53 +0000
ROA not before: Wed 09 Sep 2026 16:12:53 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ce:11:7b:4b:20:0f:de:02:0b:1a:8e:e4:94:21:35:91:fb:c8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:53 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=3f7be15a3d0d6488073237008669a982542c8b0c40eb0fca66c5399b6d5e8ae6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:8c:d8:0c:3d:9c:13:d7:92:d3:63:08:7f:
18:59:55:c4:1d:8d:df:ac:92:dc:c8:98:14:c0:78:
3c:89:d6:8e:ad:80:92:0e:d4:32:93:86:36:3a:e2:
c5:8c:da:fb:94:6a:06:0b:42:a2:4b:e9:8a:2a:fc:
8c:d5:28:42:e0:5d:23:5c:1b:8c:0d:a0:67:33:fd:
ce:10:17:bd:a0:ee:53:82:3c:89:35:68:31:d2:5b:
2f:cf:32:ef:47:b4:47:0a:1f:87:f3:d6:35:dd:10:
39:79:e9:ed:89:9e:bb:90:06:b8:71:fd:6a:52:10:
7d:5a:d3:95:df:b0:a9:14:e8:4b:24:18:98:e7:53:
0c:e2:69:cb:1d:62:f5:8f:9b:05:03:01:a0:0e:3d:
f9:cb:ed:24:ae:f5:5e:cc:29:39:cf:8b:22:89:40:
ff:07:c1:76:5f:8e:3c:53:9c:6e:02:71:b3:5e:87:
16:b4:de:9a:fa:6e:4a:2c:78:f0:0f:7d:6b:c4:f9:
e3:db:e9:c9:99:d2:1d:ee:3f:2a:e7:a6:43:8b:eb:
10:23:41:14:cd:3e:95:c4:1b:4d:dc:32:67:94:01:
aa:b0:ae:00:39:53:0b:ed:c1:44:f5:7b:6d:41:98:
39:5b:53:ee:a7:9f:ad:60:fb:af:7d:d7:ad:2f:61:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:49:55:02:8B:8C:4D:E4:EB:1A:E6:D2:6A:13:37:08:F0:AC:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8353e05-ab34-4f17-8e25-b11a10868a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8800::/40
Signature Algorithm: sha256WithRSAEncryption
44:5b:2f:bb:ef:fd:7e:2e:fe:a5:d5:f4:89:1d:bd:18:98:c1:
6e:d5:25:3c:fb:bc:e3:5e:f8:dd:80:00:fd:5d:4e:3d:61:62:
06:bd:40:c6:97:96:ab:f1:f0:25:2e:f0:d6:09:24:80:da:ad:
8b:b3:3b:88:d0:8f:7f:55:1c:12:2c:89:0e:22:10:26:61:31:
48:ba:94:1f:56:32:9c:8b:7e:69:78:8d:40:54:95:c3:12:e5:
26:93:42:7e:2e:28:c0:3a:2c:1c:ed:f4:15:73:ef:5c:57:ac:
a5:33:ca:d1:a4:c2:0e:d0:2b:0d:92:49:2b:6f:95:07:f8:e9:
2f:8d:84:0b:5d:14:72:3d:f2:37:f8:6c:8d:56:37:ee:58:1d:
59:10:e9:97:f5:d6:e1:25:34:d3:d7:bc:bb:0b:f9:3d:9d:03:
4e:c8:cf:ae:b2:52:3c:48:60:3a:53:27:a1:74:d9:7a:d2:2d:
d9:74:a2:61:65:aa:87:fa:c0:a2:2d:bd:7a:df:b9:da:9d:7d:
65:37:5f:0c:7a:f9:ea:6a:17:75:8c:4c:34:3c:a9:da:bb:d1:
b6:b3:9b:f6:7d:42:70:d2:48:8a:04:45:a1:2b:1f:29:c1:62:
00:af:9a:9a:1a:26:19:94:50:92:21:29:b8:0f:c0:2e:41:a9:
53:8d:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:27 2026 by rpki-client