Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa
File: ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa (raw, json)
Hash identifier: T3K1OKUFxjH3mHpr/bZvVyHyw6t1M+PXFZXPyfoJvWc=
Subject key identifier: 83:30:F2:32:21:53:96:63:04:01:95:FF:EA:9C:11:AD:AA:4B:29:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24CAFB54397FCFFB048B53BCDCED5AFC99BAFE83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa
Signing time: Tue 04 Aug 2026 01:10:04 +0000
ROA not before: Tue 04 Aug 2026 01:10:04 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ca:fb:54:39:7f:cf:fb:04:8b:53:bc:dc:ed:5a:fc:99:ba:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:04 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=5bd9333a5031cf7a854dd9731c041cf0d84a3e293f89bd6affd1a9ff461ad8ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:fb:81:15:eb:fb:1b:05:9b:0d:33:28:48:
39:b3:25:4b:17:59:64:da:37:a5:4b:86:52:3d:55:
bf:66:97:12:ea:af:36:bf:ae:df:04:5d:70:01:c7:
3b:ff:d8:93:7f:24:f6:0a:43:2a:d7:81:21:da:1b:
96:7d:82:37:ed:b9:41:e6:32:89:ec:81:de:23:75:
70:6d:ec:78:ed:6f:55:8a:40:7b:dc:a3:c9:d8:8a:
d4:9f:7c:e8:25:7b:da:5c:e0:73:7f:0d:17:bd:b6:
ed:27:f9:2c:29:ea:9a:da:f3:da:82:91:a0:38:ce:
82:c2:46:ae:ea:dd:9c:51:98:a8:59:4d:20:69:8b:
0b:94:7e:1b:a6:ee:85:4e:28:00:2c:a3:47:70:29:
c5:50:f6:6c:f4:43:e3:df:c3:6e:ee:90:2b:2d:5a:
3b:7d:7d:02:66:bc:20:75:74:5f:b5:30:90:e6:5e:
b1:44:92:46:4f:5c:73:25:10:4b:de:ca:13:b2:19:
d1:3d:46:7b:74:44:bc:c6:5a:0a:58:39:47:bd:c9:
d0:6c:93:ae:1f:dc:7f:ee:fe:61:99:25:9b:90:3c:
63:da:bc:f3:a2:2e:bb:64:42:24:2c:55:5b:a0:1a:
00:e3:ea:74:4b:3f:90:3b:f9:45:cf:58:32:73:e9:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:F2:32:21:53:96:63:04:01:95:FF:EA:9C:11:AD:AA:4B:29:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed4fb2e2-531d-453d-9efc-d69a8a9e2312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8000::/40
Signature Algorithm: sha256WithRSAEncryption
50:ca:06:44:c3:04:2e:89:7b:0b:4e:66:68:25:66:54:d8:7f:
52:03:9f:05:93:1b:5b:be:41:83:8f:c4:c9:66:66:a0:6b:8d:
c0:9d:f0:b1:43:b8:8f:be:3b:8b:88:b0:8c:2e:50:a3:e1:01:
d4:5f:e7:4a:31:15:62:8f:42:d4:09:aa:74:d1:e9:c7:52:00:
26:25:8c:d6:e4:27:3a:0b:72:12:17:ff:1f:6e:08:cf:5f:03:
93:e8:6e:00:a6:b7:d8:d1:72:47:59:d8:45:42:00:89:63:8a:
d9:00:e1:c9:93:f3:2e:c9:99:65:d9:0f:21:07:e8:72:fe:44:
1f:7d:9b:8d:ec:59:25:d4:19:9c:b4:2c:97:9c:da:a4:53:78:
a6:bb:1b:8f:21:87:8e:15:21:b6:f6:08:c6:27:24:ff:94:d3:
a6:7b:30:fc:a4:d9:43:63:c0:2c:89:1f:7b:72:b3:c9:fb:85:
ff:d6:9b:90:5d:73:0f:e6:4d:8b:90:15:aa:9e:50:cc:e3:d8:
ca:01:94:c1:9f:a4:06:b8:2a:9f:71:7e:c6:63:d7:56:c5:00:
5d:94:d9:a2:ba:7b:30:63:c0:73:50:a8:33:57:43:6d:c4:74:
eb:26:3b:b2:1d:47:63:17:f3:1e:42:5f:96:dc:48:91:b3:87:
6f:f4:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:47 2026 by rpki-client