Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
File: ec82a459-cf20-418a-8b9d-03c08dc90b73.roa (raw, json)
Hash identifier: ausckyLqsRR7Dr4CG7nlwuml1HP8zO4B4yOqMEXM9K0=
Subject key identifier: C4:E9:D2:58:F4:45:8F:35:D6:24:79:38:D7:B2:D1:02:45:61:8F:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28C4B2F5CA324D1304009881E3583C50CCD6819A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
Signing time: Fri 07 Aug 2026 04:40:28 +0000
ROA not before: Fri 07 Aug 2026 04:40:28 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c4:b2:f5:ca:32:4d:13:04:00:98:81:e3:58:3c:50:cc:d6:81:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:28 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3ed60fd0a2ce96045330b33ab81e1cf07031b79ae88c21ca48d9ee1b35d435d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:5d:2b:b1:39:e1:30:92:82:28:b3:06:44:
bb:64:be:29:25:cd:90:cd:de:85:ad:e7:0b:01:65:
00:d3:fc:fb:9f:7f:2d:12:3b:d7:56:63:55:ca:6e:
68:a5:48:8f:72:33:2a:8f:15:1b:ee:e6:bf:b4:89:
fc:cf:1b:ee:f0:4c:02:ae:7d:dc:b3:ff:55:60:ab:
79:f1:34:a6:1b:62:74:ec:c5:34:a4:b3:fc:56:81:
ae:f0:22:9a:fe:35:c2:d1:e3:c6:aa:af:2b:c5:ee:
45:22:c9:96:63:c2:cd:cb:1a:d6:1d:be:8c:7e:f7:
57:bd:ab:e7:99:ee:8f:e1:79:ae:70:6b:93:92:6d:
e0:13:5c:03:5a:16:52:db:56:e6:3b:ef:c3:15:a9:
15:ac:95:4d:13:88:6d:15:21:7a:06:01:e1:15:6a:
28:1c:3b:ab:e3:d8:3f:e8:f4:d8:69:d2:ee:a5:e2:
a2:d8:d2:80:42:77:f7:a9:dd:93:90:08:5d:12:41:
34:a9:5a:f6:cc:4b:cf:d3:20:0c:dd:2a:47:d8:f0:
e4:71:d9:c7:f2:f3:df:91:80:6c:c1:1e:1c:6a:15:
ca:f3:ec:c6:11:26:cf:7a:36:07:07:a7:ce:3f:bf:
5a:93:b9:23:aa:8f:ae:f9:11:0e:d1:1f:ee:ed:a5:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:D2:58:F4:45:8F:35:D6:24:79:38:D7:B2:D1:02:45:61:8F:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bc:e6:de:a0:73:0d:c7:03:3c:0c:c0:62:8d:80:c6:16:f8:
f6:da:96:af:c6:35:88:06:26:b0:51:9a:cc:a0:e9:d2:5a:ef:
76:6f:d6:1c:7d:74:fb:06:7f:fe:c0:c6:a9:f0:43:f3:14:95:
6a:91:15:33:09:91:f6:90:28:57:f3:55:19:05:cc:d8:b5:6b:
cb:3d:a9:93:47:93:08:77:3b:da:28:d5:67:99:63:38:fe:6e:
39:98:af:58:53:e0:76:e9:e6:84:55:64:e9:29:e1:be:9a:93:
f7:f8:cf:4e:af:68:e7:3c:c1:93:a2:66:67:1e:5a:6a:80:1f:
a7:3d:63:e6:cb:72:2b:71:f7:34:2b:a1:bb:81:48:4a:9d:93:
9d:6f:d9:5d:3c:8e:73:5d:d1:4d:93:e8:a7:8c:b1:d5:c6:a6:
0b:bf:75:5a:19:94:02:76:9f:73:32:e6:9d:1f:07:8c:a5:a1:
43:2d:7a:76:7d:df:ab:5f:3a:01:c2:eb:48:89:a6:79:c8:a6:
69:52:42:06:f7:69:75:10:6c:2b:fe:73:32:78:d7:e0:d1:90:
31:98:84:33:17:a7:4f:a7:26:d8:0f:5b:57:46:4c:ff:4f:ba:
d0:86:c8:33:bf:b9:6a:d9:94:f4:e2:5a:45:31:5a:a0:08:a6:
a6:e2:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:59 2026 by rpki-client