Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
File: e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json)
Hash identifier: 1jR3kwkgvJIaYa+1c5NDTxe8X9Am4Jr1GlHdpi4LXX4=
Subject key identifier: FE:36:FB:F0:CC:96:A2:3E:D9:45:14:DC:3D:24:8C:6E:F5:B5:B4:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5733757696181D15274EC859B8555D8D4D5C118E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
Signing time: Fri 07 Aug 2026 04:50:27 +0000
ROA not before: Fri 07 Aug 2026 04:50:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:33:75:76:96:18:1d:15:27:4e:c8:59:b8:55:5d:8d:4d:5c:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=621a6147e111cbdc65922fe2a76b33471ca9e99df05209b841c3de32b1a089cd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:58:a7:69:4d:c7:d8:cb:ef:bb:4e:f0:7e:
a8:f6:e5:39:41:77:7f:9f:29:10:99:8b:83:6b:5e:
11:1f:50:5b:92:1e:d5:f7:4a:5d:8f:3d:d9:67:10:
39:19:f6:b3:c9:33:c6:ed:a8:59:24:f9:7d:48:ce:
a9:67:98:31:8b:67:77:38:b3:d0:0c:83:03:80:ef:
03:c1:0a:b2:99:22:7c:d7:f8:47:31:7d:48:52:3e:
a8:b3:66:c5:fa:3d:39:e0:66:31:41:69:57:77:0e:
47:6a:21:5a:5e:cf:ff:4e:61:89:41:d3:25:5a:ad:
bb:76:4e:ac:bf:ce:8b:09:87:8e:c4:ef:12:14:84:
4f:0a:b1:b9:6e:8b:90:2c:01:a3:f6:20:69:ae:3d:
de:a6:af:39:ff:5f:28:45:7f:c4:60:d0:8a:18:ff:
eb:cd:b2:e8:4d:1d:56:cd:20:01:4c:68:52:27:43:
31:9d:fb:b0:0c:f5:db:fc:b8:c5:9a:20:7c:22:24:
38:a7:00:3c:b9:b1:ed:bd:af:dc:4e:64:e3:e9:57:
2c:fa:1c:05:3e:8a:5e:7f:24:62:f4:66:4c:e5:db:
90:e1:3b:5a:80:f4:ce:bd:e4:d4:4e:fe:ae:d9:5a:
27:4a:16:f9:43:58:b6:50:f3:90:06:b6:bf:e0:a3:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:FB:F0:CC:96:A2:3E:D9:45:14:DC:3D:24:8C:6E:F5:B5:B4:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:00:e9:f6:20:75:aa:06:13:6e:4a:75:3a:9d:9f:1e:a9:83:
c4:37:d0:c1:ce:bc:50:2f:9d:29:fa:b8:88:8f:87:ea:36:e5:
89:d3:bf:e3:2a:13:ac:08:a9:f0:99:28:13:f4:39:83:99:a0:
73:19:b3:d3:20:3c:b4:3e:f6:62:fc:c4:da:73:27:33:e6:69:
c3:91:1b:63:50:8a:2b:82:fa:7a:16:5b:ba:54:32:d8:1b:96:
be:23:c6:a0:f6:c9:28:80:54:03:0a:e1:0a:8d:76:2a:d9:12:
b3:d9:4d:92:b2:a0:a1:b6:15:9c:bd:7b:f0:df:96:2f:6a:1c:
61:2f:25:5e:7b:34:93:6f:e7:3f:b3:86:f9:a7:17:5f:19:88:
ce:83:84:67:3e:e7:77:4a:1a:0d:8e:5c:68:04:93:69:18:cb:
09:d0:d4:e4:f6:cb:7e:2f:ff:28:11:53:b4:6d:b2:f2:68:8f:
f0:5a:58:f7:f6:90:4d:6a:94:ff:42:97:db:8d:d4:0e:81:6b:
7e:46:c9:0c:a8:48:07:56:98:d7:34:21:6b:d7:3b:9a:64:92:
90:aa:5e:28:cd:98:b1:47:09:a8:02:7d:1c:db:f9:c1:98:25:
42:b4:37:d4:61:9e:9a:cb:33:26:01:9b:02:44:7b:84:88:40:
3e:d5:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:43 2026 by rpki-client