Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea38b698-2d11-4401-949d-9e0f145ce40b.roa
File: ea38b698-2d11-4401-949d-9e0f145ce40b.roa (raw, json)
Hash identifier: A/i/uP5NboBGq3h/cvoVgKZ+ajHGAN/qWg32QoczFGo=
Subject key identifier: B6:8E:B6:85:89:66:28:C4:FD:5F:C8:B5:57:37:EA:68:E5:9A:6D:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0271AD04C27EB897A6AB5EDA1600FD3433A00210
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea38b698-2d11-4401-949d-9e0f145ce40b.roa
Signing time: Thu 10 Sep 2026 02:30:17 +0000
ROA not before: Thu 10 Sep 2026 02:30:17 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:71:ad:04:c2:7e:b8:97:a6:ab:5e:da:16:00:fd:34:33:a0:02:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:17 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=1dee30659028e57c09341f1635e8ed354b7102ef6fc2359b8e8d9ce9edf6d488, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:a3:8b:62:a2:83:19:b5:bb:e3:f4:96:2f:
2d:47:32:72:0f:09:0e:d9:eb:d3:a9:5a:16:48:ce:
31:67:f7:a7:8b:54:d3:d7:3b:9d:51:c0:ca:8b:da:
6e:8d:12:84:e4:ff:27:40:05:ba:4f:4e:9f:8d:5b:
b9:0a:a2:42:40:55:c8:02:cb:42:95:6b:97:6b:5e:
ed:07:63:8f:3b:43:c3:cf:a7:68:a7:90:ce:2e:d2:
e8:e1:92:89:4e:b9:ac:d5:f6:47:3b:e7:fe:91:e7:
49:41:1f:02:47:3a:af:2e:bd:ff:48:2c:5c:b8:cf:
df:3b:36:04:e5:fa:2d:9e:b5:a1:d8:9a:dc:71:d1:
f0:5c:3e:2d:c4:00:87:a1:d0:29:47:1f:64:ca:57:
3f:93:37:06:8e:0c:8c:06:17:94:98:48:24:af:f5:
98:72:b2:cb:61:35:ad:47:b4:e5:3c:ec:d8:e8:c1:
d2:88:59:ec:e0:fd:98:9e:05:64:bd:a7:f2:6f:3b:
e2:b8:75:f3:e9:a0:5d:a1:18:f3:cc:8e:b0:95:58:
5d:98:cd:6c:64:79:c5:cc:f0:1f:d1:71:4d:16:39:
c5:96:3c:d2:55:04:d7:dc:ab:b7:aa:07:a7:21:78:
00:a8:d4:26:27:2c:1c:3e:d4:18:3c:2c:fe:9a:19:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8E:B6:85:89:66:28:C4:FD:5F:C8:B5:57:37:EA:68:E5:9A:6D:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea38b698-2d11-4401-949d-9e0f145ce40b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
4b:03:de:5e:30:cd:26:85:2c:cf:d2:22:2b:28:93:7e:4d:88:
81:cc:49:4d:8c:b0:28:45:48:d8:fc:f5:df:2d:b8:3c:cb:02:
01:ed:2d:9d:9d:f2:47:48:f2:a5:64:ef:c8:b3:ff:be:95:25:
ad:cf:c5:b8:dd:39:10:0d:28:43:78:9d:a2:69:1e:e9:2d:d4:
ba:a4:70:56:8c:5f:5a:9b:82:9a:98:45:b8:79:16:b0:41:78:
a3:39:98:7b:b1:5e:98:36:85:23:74:2e:ec:9b:73:7a:d2:00:
70:a0:40:97:db:4e:ee:96:8a:c5:67:06:ed:c2:37:6b:30:8c:
f0:a7:99:6c:2b:f7:c1:b7:5c:f0:ab:3b:3b:25:bc:11:27:e6:
42:28:08:be:d0:d4:aa:49:e7:88:da:6e:cc:ff:b4:c7:79:fd:
1f:5e:35:de:b0:48:6c:aa:88:be:be:7a:ad:2b:a1:4b:bb:7e:
58:71:1c:6a:14:a4:78:d1:99:c2:cb:11:eb:b2:5a:74:5c:1a:
e8:f2:4e:43:56:9e:d5:3b:9e:76:7d:f2:f3:48:76:0d:d8:cd:
6d:fe:82:49:52:12:c6:e8:21:c4:4c:02:72:7e:02:a6:de:9e:
dd:71:b7:51:18:60:81:cf:4c:85:ca:2c:b1:3d:c8:89:d1:f2:
ea:7a:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:11 2026 by rpki-client