Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
File: efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa (raw, json)
Hash identifier: j5r8gKXV9lrhg72sv25bojmB51jGqsigWNR0FB07/nY=
Subject key identifier: 8C:F8:DF:82:A8:F5:BD:3A:1A:08:EC:E9:66:EA:53:96:0E:F9:B5:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27304DCFD182D8AC2C5C0CC21FDA6B446DC023B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
Signing time: Mon 03 Aug 2026 01:30:16 +0000
ROA not before: Mon 03 Aug 2026 01:30:16 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:30:4d:cf:d1:82:d8:ac:2c:5c:0c:c2:1f:da:6b:44:6d:c0:23:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:16 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=605232878c892c8136626622f314838c8d88926b802da0ade53a8a4b9f3ecbb6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:46:4e:29:d2:da:e4:7e:7f:07:f6:c6:f5:60:
86:f3:a5:1a:c5:3c:db:34:1c:a1:2b:5f:2b:fa:79:
23:06:77:ca:85:fc:e4:c8:bd:9d:4f:d0:5f:3b:d6:
e5:b2:61:db:e9:43:05:43:78:38:4b:72:20:62:13:
51:8a:d3:02:d2:15:0b:bd:4b:55:21:f8:25:ad:e7:
9b:14:37:54:af:03:e1:79:ef:47:df:d3:14:32:ba:
d3:5d:18:4f:5e:81:88:30:85:e4:c7:ea:5f:73:21:
0f:eb:b9:56:b0:89:18:c9:94:7e:1b:eb:69:bd:97:
83:8a:35:fb:05:fd:89:da:48:b1:73:65:bb:51:5e:
da:67:d9:30:29:ce:76:b8:fd:31:98:96:e7:e2:23:
62:e0:37:7a:43:a9:9c:c5:ce:3e:18:c7:02:2a:55:
2d:82:bb:4f:51:f9:55:a5:a8:d6:49:55:3d:90:92:
1e:49:fc:65:ce:2a:d1:1e:e2:b7:1f:a7:e8:59:8a:
3f:6b:72:a7:15:b0:7e:f3:f6:86:b9:48:1c:bb:bd:
d0:12:16:57:37:a4:3c:c6:41:0f:e0:81:fc:25:51:
d2:32:12:72:14:0f:f6:e3:23:eb:d0:52:35:7d:1b:
1d:13:46:fd:79:da:56:d8:29:75:39:57:d6:09:6c:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F8:DF:82:A8:F5:BD:3A:1A:08:EC:E9:66:EA:53:96:0E:F9:B5:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:2000::/48
Signature Algorithm: sha256WithRSAEncryption
8f:c8:93:1d:bd:0d:32:04:ea:57:0b:21:1f:10:39:5d:dd:15:
bc:b3:b7:dd:63:e6:ae:59:35:63:04:d2:c3:7a:11:7b:f6:94:
51:87:fe:05:d7:bb:26:db:80:b8:80:b7:d2:ca:6d:87:45:27:
9b:c3:8f:e9:42:4a:50:ac:43:8d:bc:96:ba:ae:84:11:9b:14:
2c:24:e5:83:7b:b4:77:50:4f:60:11:be:1a:79:72:6a:de:a6:
85:0c:40:20:3f:26:a9:67:1a:ad:25:ba:3d:ee:df:28:fc:72:
55:02:df:fe:a1:bc:e1:e6:b6:a2:84:d0:3d:b1:a0:09:bb:43:
3c:d6:91:0a:47:c0:f1:36:0f:62:2c:93:13:0a:f7:75:70:4d:
1d:08:fd:10:61:4b:fe:69:72:25:89:59:d8:27:44:0e:14:ef:
f6:4f:01:ab:f2:bc:91:45:b0:23:c3:f6:05:f1:c9:72:f4:5a:
73:c0:e2:7a:68:22:86:29:b4:6c:dc:a5:55:95:97:c8:19:db:
8c:b4:c3:dd:08:be:fe:88:41:46:b0:b5:47:47:d2:30:90:63:
d2:56:2e:de:84:4f:98:53:52:e2:92:b5:a6:b1:bc:0b:8d:bb:
c9:36:ef:f7:13:41:7e:a8:2d:9d:34:0c:06:a5:ef:af:a3:56:
00:e3:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:12 2026 by rpki-client