Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
File: f3736ec9-491c-43bd-b672-c821fdae78f1.roa (raw, json)
Hash identifier: 3iqLvIYmW8a6q+wDs4Kn1FZkGkfkuHEdiGL1z7wi0JE=
Subject key identifier: 0F:B8:94:08:2E:26:43:DE:7A:70:98:8C:5D:06:19:AE:72:2B:67:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EF050557392D2EDB24834877C961DC4579EBBBE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
Signing time: Mon 03 Aug 2026 02:50:08 +0000
ROA not before: Mon 03 Aug 2026 02:50:08 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f0:50:55:73:92:d2:ed:b2:48:34:87:7c:96:1d:c4:57:9e:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:08 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=d299183a64fd1506df7423814a5082a75f695eb1283737ba3a697efb1655ff05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:d9:4a:6c:2e:3e:e0:7d:98:05:b3:6f:f8:
53:0c:98:a6:a4:1a:28:30:a0:4c:69:3f:98:0c:3a:
ba:74:71:52:f8:f4:fa:a1:18:a8:c0:0f:3f:c4:49:
4b:2a:78:52:24:9f:76:3f:8a:6d:f2:88:7b:db:94:
16:eb:a7:cc:4a:47:d8:c5:cf:d3:67:1f:d5:dc:39:
17:6a:1b:5d:75:40:9c:b5:fe:0b:f6:9f:a7:19:a3:
87:11:44:1c:73:09:86:8f:87:d8:03:65:dd:cf:2a:
05:fd:90:f5:bd:33:8e:06:99:f0:e8:01:f9:1b:f1:
c9:66:46:0b:bf:46:90:ae:a2:06:0a:77:43:12:18:
dd:09:f1:44:cd:9b:07:fa:3a:51:27:29:ed:4a:31:
1a:e7:0f:80:82:c0:cb:d7:f9:c2:63:61:8c:ee:ae:
6d:e3:a5:67:20:dc:65:a6:6f:40:f7:aa:d8:d4:9e:
3f:b9:32:17:14:fa:3b:44:b4:ce:42:71:a3:6f:ef:
f2:26:4f:84:c3:aa:6e:7b:d1:59:aa:cd:80:b5:d7:
72:fb:52:71:6c:a0:ba:1f:a4:b7:5a:0e:77:ea:17:
50:80:e6:2c:41:7c:9f:b0:11:91:52:9c:2b:02:30:
79:ff:87:52:34:90:93:08:31:21:8f:6a:88:07:ff:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:94:08:2E:26:43:DE:7A:70:98:8C:5D:06:19:AE:72:2B:67:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/48
Signature Algorithm: sha256WithRSAEncryption
79:cd:80:53:c8:34:7c:da:61:4c:cf:dd:e2:42:cd:e4:ea:fc:
49:94:08:3d:2d:f3:d1:95:8e:af:1a:b3:ca:88:93:5e:2f:dd:
5e:74:fe:d3:d0:c0:cf:3f:ef:80:94:f4:0e:bf:23:0c:b9:a0:
65:2d:40:52:a0:36:28:52:b3:29:e4:00:76:09:36:cd:ad:d6:
ab:0e:bb:8b:26:a5:7e:c8:1c:9b:a5:c0:bd:6e:95:13:b0:1f:
94:66:b3:34:8b:95:1b:e8:a6:5f:08:56:0d:3c:3f:fd:e7:23:
6a:c1:1b:fb:4a:c7:90:a6:f3:dd:c7:64:64:96:68:77:5a:04:
ef:f3:d1:80:c5:3a:20:1c:0a:0c:4d:0c:57:c7:1f:fd:6c:5f:
04:ec:ea:7c:e2:ce:7c:b2:ac:68:91:7d:73:04:33:b5:83:44:
83:84:8a:51:05:cd:32:05:e8:8b:9a:f5:6a:19:c0:8f:f3:4b:
24:29:4a:4a:01:26:85:4b:3f:d3:e7:e0:28:84:14:43:07:e6:
47:9e:81:38:80:39:f7:71:42:52:0d:46:0f:2e:b5:d9:82:a6:
9e:96:89:e1:dc:4a:53:5b:8d:62:25:90:33:fd:37:a4:02:b6:
92:50:3e:6d:e2:d8:7e:5e:d0:7c:92:43:bb:5c:78:99:df:e3:
20:e7:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:47 2026 by rpki-client