Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb9b325f-3895-4a2d-8702-2793fb487f39.roa
File: eb9b325f-3895-4a2d-8702-2793fb487f39.roa (raw, json)
Hash identifier: SYTIQRO8i5e6xeeCPR4uT1HmUmbkSRDAmQUrvFklwTg=
Subject key identifier: 87:57:BE:1B:6C:BD:35:CD:79:C6:21:0D:93:21:4D:32:EC:EC:26:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 105756F691D745503E6F77BB7739552C858D3192
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb9b325f-3895-4a2d-8702-2793fb487f39.roa
Signing time: Wed 09 Sep 2026 16:12:55 +0000
ROA not before: Wed 09 Sep 2026 16:12:55 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:57:56:f6:91:d7:45:50:3e:6f:77:bb:77:39:55:2c:85:8d:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:55 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=04923c1975dae9541e39abbcd56a2f14bcf743048abaecd368a5b46d54310d7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:a0:36:9a:49:1c:67:a6:22:3e:d4:51:d8:
b4:58:94:41:d2:c0:ea:09:a8:53:b0:4d:50:d3:23:
c4:08:62:6d:cd:ed:1f:75:dc:21:4f:bc:e6:8b:cf:
10:f7:e2:47:bb:f8:a8:36:6b:37:ce:10:11:3c:ee:
35:1b:9e:1c:ed:38:9f:e9:c6:d3:63:16:78:36:30:
3f:23:13:f1:5e:f4:ba:8f:23:aa:58:e0:13:11:19:
8e:79:e7:fa:1e:88:2e:68:ff:aa:e5:2a:ca:cf:48:
e5:21:49:5a:b3:0a:4d:b9:37:48:68:48:97:c3:c7:
4b:00:3b:03:92:f2:07:31:52:cb:a9:41:23:f8:0f:
d9:cf:f5:7c:1b:94:57:50:3c:b9:ec:59:51:23:1d:
67:c4:c5:33:5a:f5:e6:a6:34:28:7f:fc:e0:e8:d6:
fd:6e:53:b8:19:07:9c:79:c1:cd:5c:3c:b4:e0:0d:
c5:69:40:3d:79:50:b6:22:47:12:83:39:ba:67:0f:
1c:75:85:ae:2f:74:47:e1:f4:02:b2:d3:26:6c:86:
5e:cf:52:92:0d:01:9a:ce:fa:61:f8:fc:8b:f9:7d:
b4:7a:08:d3:47:d3:a1:ea:4f:8c:be:c3:f5:4b:9a:
c3:5e:2a:0c:40:ce:f7:5c:c4:67:2c:24:0b:b4:03:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:BE:1B:6C:BD:35:CD:79:C6:21:0D:93:21:4D:32:EC:EC:26:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb9b325f-3895-4a2d-8702-2793fb487f39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:6000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:20:1e:2e:74:68:f3:07:12:a3:09:ff:a3:65:ac:ca:60:b8:
23:82:16:d9:07:27:66:99:d1:7d:4d:75:6e:9f:6c:3f:58:27:
bf:65:1f:be:e0:6d:34:1b:38:7b:44:ac:f0:61:fd:c4:1e:5f:
8e:af:06:05:73:02:f7:fa:af:22:5a:51:80:a2:a8:e0:43:7d:
ff:4e:5e:99:b1:a2:14:e1:05:db:99:cb:75:5f:ea:e5:55:95:
5e:83:01:3e:d1:d5:a7:c3:9e:b0:72:4b:60:d6:bf:de:fc:94:
40:c4:5c:a4:33:b3:b7:f6:40:a0:9e:05:72:45:fe:30:2c:9d:
8d:5f:f4:e4:20:54:02:c4:a4:74:eb:48:c4:05:02:5e:ff:f9:
0b:9f:f2:f3:22:d3:54:d3:c7:da:6d:86:92:34:2b:25:24:55:
56:e6:3e:9f:90:94:da:a0:51:47:67:a6:93:33:66:05:a1:6a:
dd:c4:3c:57:ee:61:76:32:1f:36:20:c0:a5:cd:e3:d2:d1:fe:
f8:1f:ec:ec:b4:20:bd:9b:2e:61:a9:a7:dc:eb:30:97:06:ea:
8a:b3:24:18:8c:9b:3d:6e:45:6b:6c:99:7e:42:d7:a3:2c:ec:
1f:76:7f:cf:56:54:78:a2:2b:9b:cf:45:ed:87:9c:da:f8:2f:
e8:db:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:40 2026 by rpki-client