Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
File: f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json)
Hash identifier: CiQiLnMjdpRK+ua2FU5nvyREpjrS1xujVp0AdGbZx14=
Subject key identifier: D8:B8:BD:66:A1:5E:15:54:21:02:79:4D:2B:3F:75:DD:E7:5C:7A:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31F07F636C17A3ED10646AD2AE80F32DD453E5B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
Signing time: Mon 03 Aug 2026 02:00:08 +0000
ROA not before: Mon 03 Aug 2026 02:00:08 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f0:7f:63:6c:17:a3:ed:10:64:6a:d2:ae:80:f3:2d:d4:53:e5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:08 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=e7118fddac2eedc61d1438754d6bfc2dd7850ea8a500f138fd3932249bec9c2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:ed:0d:76:8e:82:88:fa:04:c9:ef:db:6e:
c8:5b:46:fd:4a:75:5b:42:30:91:e9:00:7c:48:f6:
f3:89:4d:2b:b4:37:f1:e7:a6:2c:04:86:36:47:5e:
04:7a:f7:c7:94:17:4d:5f:73:82:e3:bb:ed:13:4c:
31:40:54:8a:2c:37:ab:94:29:8f:e4:ab:a6:15:df:
c2:be:3a:56:a5:5a:0b:9b:d8:8f:4d:6a:f6:03:37:
37:78:fe:7c:2f:67:6d:e6:41:db:b2:a2:f7:22:a6:
3d:8f:1e:22:84:7f:60:ff:0a:a0:5a:58:96:17:0f:
a5:cd:95:30:6f:78:15:0d:ca:f7:1d:9c:3a:25:54:
b8:04:d6:5e:5b:29:8b:d9:7c:ea:1f:00:f5:95:4e:
6e:db:1d:c3:67:f4:ad:41:b4:01:68:08:5b:24:a6:
b1:41:df:ec:b2:3d:66:e6:c9:f1:9f:c7:a5:7e:c1:
d5:f9:33:64:e8:f4:a7:20:0b:51:e8:db:bf:87:11:
bb:17:87:3c:44:42:9b:0a:e0:5f:0b:6a:c5:ec:66:
2d:40:c3:73:93:be:a5:c7:15:1c:67:69:39:80:21:
bc:34:e9:95:98:88:60:43:39:4b:1f:1c:91:ac:93:
c5:38:a6:48:60:5e:b4:00:81:c6:b7:06:04:67:d2:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:BD:66:A1:5E:15:54:21:02:79:4D:2B:3F:75:DD:E7:5C:7A:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:e9:c2:f5:4e:ac:55:06:f5:27:02:2e:d6:aa:c2:b9:8b:7b:
93:eb:37:91:0d:ca:bc:b4:fa:d7:3a:5f:2f:24:7d:75:cf:9e:
fb:27:cd:f0:b3:a0:54:53:2b:64:4c:56:cd:fe:5d:60:38:7c:
87:db:92:8e:a1:dd:84:11:0b:a1:49:d0:97:59:3c:80:d4:d9:
33:70:22:d8:4d:7a:5c:85:ec:ae:16:8d:58:1d:36:b2:b4:be:
60:14:1b:c3:79:dc:4f:18:dc:70:28:36:cd:6e:24:87:0f:b7:
46:85:4f:fa:ed:51:d7:eb:25:cd:55:c8:d5:f7:4c:5b:e5:8a:
30:f4:85:88:03:6b:1a:27:0d:47:dc:00:9f:25:f3:7f:bb:de:
92:ef:27:e3:33:54:7c:3d:7b:30:2d:f9:4b:b7:8c:e3:4c:1e:
19:1b:90:a4:ed:d1:48:4e:cc:7e:ef:35:18:ee:1a:5b:af:81:
8c:b1:b0:a3:7f:97:5f:8a:f2:1b:04:6f:65:1d:f5:ef:a2:ac:
5d:14:52:77:25:46:f9:e1:b3:a5:b2:6c:28:db:3b:55:93:9b:
78:80:fe:37:de:f1:32:89:f9:eb:c6:37:63:07:7d:2b:1e:b1:
4b:d6:75:a2:be:2c:30:e2:12:19:ee:fe:36:71:a8:19:60:44:
a7:f9:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:56 2026 by rpki-client