Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa
File: eadba346-c29f-4797-9fab-fc53bf489862.roa (raw, json)
Hash identifier: 8wbjlOR5/+GEVnIFPMdPvNPy3taOF26O8HY3gtU76+Y=
Subject key identifier: 3D:93:DB:D3:1F:A7:7F:8A:43:6C:BE:B4:85:E9:CB:6F:63:9B:72:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1821ACE1839BC9D43DA02163E0969B4E0B559753
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa
Signing time: Thu 10 Sep 2026 02:30:15 +0000
ROA not before: Thu 10 Sep 2026 02:30:15 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:21:ac:e1:83:9b:c9:d4:3d:a0:21:63:e0:96:9b:4e:0b:55:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:15 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=6d537084671c8ac1f0dbc8b5a7cd951b9656e378d0172a883f04d8aee660d5c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:11:e0:e8:3f:51:92:57:03:97:1b:ca:4c:
43:8a:0c:a5:82:fc:60:50:35:f4:47:14:ea:41:32:
dc:98:da:6c:eb:bf:5e:b5:a2:2d:60:35:3b:21:24:
f5:41:f1:0f:51:84:06:8a:ab:18:e0:87:a4:2e:da:
8c:32:7f:69:9c:95:39:c2:fa:d0:98:53:5c:bd:41:
16:9c:5a:06:6a:93:41:a0:9d:44:f9:08:72:37:4b:
57:5b:97:36:d3:37:e9:de:b1:60:e4:d9:2f:d8:46:
27:46:4c:d5:69:4c:86:96:ea:85:2b:a2:75:47:55:
c6:03:c6:05:41:0b:a3:18:02:06:e8:0b:a4:72:6e:
94:e1:6e:f7:82:0e:0c:bf:82:7e:f5:4b:ff:d3:12:
f8:d2:c3:95:51:3d:b0:e9:a6:91:d4:f9:56:17:92:
a1:79:af:54:0e:a3:88:05:88:da:00:89:e7:e3:dd:
67:d1:01:94:51:6b:4b:f8:6c:46:60:c2:2b:f5:92:
29:87:30:02:31:ff:81:87:dc:d3:70:0e:63:32:e7:
da:c0:69:0e:69:17:32:eb:d3:13:d1:6d:ff:03:19:
9b:ca:6c:4a:26:5d:89:9a:83:1c:9b:97:49:83:46:
e7:a5:cf:c1:ab:55:a2:91:d3:c2:e8:bc:62:30:d2:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:DB:D3:1F:A7:7F:8A:43:6C:BE:B4:85:E9:CB:6F:63:9B:72:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c020::/48
Signature Algorithm: sha256WithRSAEncryption
b0:ca:13:1b:15:bb:c4:b7:d0:08:0e:9f:6a:c0:2c:4b:10:75:
f7:5d:1c:4a:f4:e4:50:6d:5f:52:88:d9:06:d8:c5:a1:69:67:
2c:5c:b5:c5:34:55:93:1a:de:51:df:b9:d3:1e:a0:e2:c3:d3:
a1:54:b6:c1:7d:33:eb:0c:d0:ae:e3:df:ff:e4:39:0f:8a:7d:
04:4b:2c:cc:3a:43:56:7a:00:54:84:36:ab:b1:db:61:91:2f:
ff:95:85:33:ab:52:2e:22:83:61:32:b3:09:81:bb:07:a1:a1:
bd:ef:0c:5b:65:5e:ce:7b:53:1f:74:32:3e:42:91:da:11:a7:
44:bf:58:8a:35:69:b1:44:91:50:98:9f:ec:25:0d:b8:9a:c6:
8f:ac:bd:53:3c:ce:4d:34:4c:d4:63:fd:4b:c6:db:9a:9c:48:
fe:45:3c:e9:24:79:24:3c:71:89:0a:49:5a:e1:ad:30:f5:0a:
e7:65:d9:e7:47:3e:be:7f:7b:b3:37:89:61:86:e1:21:b1:e6:
9a:39:d4:e2:5f:47:35:89:23:39:13:41:e8:89:10:10:d5:e3:
24:64:50:de:af:fc:ea:b2:6d:e7:58:3a:5a:9b:30:bf:2b:24:
e7:33:67:ae:37:6d:4a:1c:f7:b9:b9:28:7f:b6:ff:66:4c:24:
f0:4d:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:47 2026 by rpki-client