Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa
File: f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa (raw, json)
Hash identifier: 2r1LXvVQ3a5ZfFZ6h64NIhx3k+6vHNUfS78WyIEgWB4=
Subject key identifier: 44:9B:81:27:D7:5F:34:48:40:04:E5:78:9A:3C:D0:77:22:AF:89:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6410C31EBFB775580FD86B8FA29F49911516909F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa
Signing time: Wed 05 Aug 2026 02:10:07 +0000
ROA not before: Wed 05 Aug 2026 02:10:07 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:10:c3:1e:bf:b7:75:58:0f:d8:6b:8f:a2:9f:49:91:15:16:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:10:07 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=44b27127c6baf9c880d77bd0cc07f78f96725a1bb8de930343ced1272be26a12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:b6:ba:a0:d1:5a:5b:8a:2d:ca:de:75:c3:
bf:cc:35:bd:85:17:ab:bc:b4:68:46:d0:77:0d:f3:
de:e9:45:56:13:5b:db:f9:81:79:e3:20:36:1e:ec:
0e:02:52:84:61:a3:6b:e3:7c:ab:54:96:df:cb:9e:
27:fe:17:30:2f:74:fd:b7:d6:cb:fe:73:b4:3c:3d:
14:6c:ca:42:cf:7a:c7:83:12:89:04:8b:26:30:e2:
d9:0d:e4:bf:43:aa:ee:f8:84:9f:26:f8:50:7f:b6:
d6:1d:00:97:ff:38:42:d4:51:5b:a0:c3:ba:a2:6f:
df:40:3d:64:c7:0f:96:bd:89:27:05:47:96:47:8c:
bb:1e:1d:ab:42:97:95:d3:63:0e:4f:fe:17:44:d8:
86:f2:ab:b0:43:56:fc:55:66:d6:7d:99:4c:69:6f:
86:9f:5a:eb:a5:67:54:79:ae:56:79:01:0d:44:4b:
b7:9c:97:34:67:ed:83:a0:39:f0:d4:2e:62:a5:eb:
86:3e:46:28:1f:4a:a9:74:c8:61:80:7a:2b:68:5d:
cf:91:91:b7:56:11:56:fe:df:ed:41:9f:10:34:04:
6c:ba:c0:17:c1:72:92:8d:aa:9f:22:a3:67:fa:3b:
c9:ee:af:4b:2c:1b:14:cc:76:0b:da:12:0a:ca:7f:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:81:27:D7:5F:34:48:40:04:E5:78:9A:3C:D0:77:22:AF:89:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
69:1d:c9:42:f7:72:90:86:8d:bc:96:2c:9d:88:f1:d8:33:7b:
48:ca:37:e5:e8:e5:d9:bd:f1:a8:48:f8:01:6c:67:55:91:b3:
61:7d:22:64:26:20:17:e3:c6:34:0b:03:c1:c7:63:8c:11:b6:
d5:a0:dc:e9:29:ff:de:cd:bf:55:82:0f:70:f4:a7:e2:6a:9e:
f1:a3:be:44:c8:fb:15:66:a0:cf:2d:4e:3d:68:9e:ef:49:bd:
af:47:63:80:32:67:bc:c8:1f:bd:2a:c3:b2:02:bc:ea:56:17:
8e:e7:78:5a:e9:00:32:d4:ce:c7:8c:f8:b6:80:c5:fd:24:6f:
56:63:d7:d4:61:7e:92:47:4c:85:bb:89:ea:59:73:a6:64:1e:
33:d3:b5:ba:a8:b4:37:86:c5:7c:27:df:d9:22:7c:b5:3c:86:
72:06:63:cc:f0:7c:70:c9:5d:e3:db:7d:da:15:3e:4b:c7:a9:
3f:3e:bc:68:95:fa:c6:3e:dc:85:fe:ed:56:e3:09:0e:95:c0:
53:47:87:9c:0d:76:e6:19:6b:1a:a3:1a:15:51:08:6c:ab:22:
69:f7:97:80:12:45:8d:72:df:d0:cd:b7:c2:fd:09:c1:c2:9d:
7e:df:81:73:5d:15:f6:9a:d9:f6:f9:a9:1d:b1:7e:b2:84:2a:
2a:36:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:13 2026 by rpki-client