Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f51bf20f-531a-411e-baff-37a38bc29ce9.roa
File: f51bf20f-531a-411e-baff-37a38bc29ce9.roa (raw, json)
Hash identifier: XgRqL5DcqUvcNoYN/l9olWcZsUYVjRtWQ1ETKwazsdA=
Subject key identifier: 8D:F8:68:56:68:1B:0F:6A:8F:DC:21:86:11:92:8C:63:FD:E8:ED:D4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12CBDB3AD75FDD8CC64F7B0137AF99E7BD683207
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f51bf20f-531a-411e-baff-37a38bc29ce9.roa
Signing time: Fri 07 Aug 2026 05:10:42 +0000
ROA not before: Fri 07 Aug 2026 05:10:42 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cb:db:3a:d7:5f:dd:8c:c6:4f:7b:01:37:af:99:e7:bd:68:32:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:42 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6602bffc54bd7dfcd5197d20f13bb6799e8844c7b225accf8cccb6312213874b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:bf:95:70:9e:28:11:0a:68:b1:39:c2:b1:
c3:ac:8b:d4:87:77:91:9f:6b:55:f9:9e:0c:da:93:
48:b3:1a:02:21:86:c6:73:c2:93:e7:a4:c9:13:29:
51:8c:3e:2c:bb:db:1b:8e:98:56:eb:60:cf:dc:ff:
27:de:ce:bf:e3:80:07:67:57:bf:d5:3d:2e:f9:23:
5d:be:ea:b1:3c:4c:3d:df:91:55:46:b8:e2:95:2c:
a8:7c:3e:39:57:47:bc:a5:df:ea:89:0c:cb:ea:67:
ba:be:dd:42:de:b3:f2:c2:1d:84:c8:0c:a1:05:81:
b5:c0:67:81:bd:c3:d6:33:ea:5a:e4:e3:c1:6c:11:
e4:80:52:d0:21:77:df:cb:fc:97:42:12:d8:0c:3d:
f8:74:da:8c:6a:6f:8c:17:37:a3:78:21:32:36:bd:
d4:06:f9:71:76:10:fa:01:63:e8:57:0d:a0:f2:1b:
ac:b4:59:01:61:60:47:3c:5d:ad:00:3b:73:82:2e:
91:ae:76:79:2c:e1:38:e2:09:f8:aa:62:ae:3b:24:
83:dc:07:93:c4:df:9b:a3:8b:a2:8b:5c:40:d0:15:
83:82:c1:00:54:17:43:77:73:c8:31:dd:82:24:df:
fa:eb:ab:77:85:72:e4:6f:1f:d6:10:70:2c:88:98:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:68:56:68:1B:0F:6A:8F:DC:21:86:11:92:8C:63:FD:E8:ED:D4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f51bf20f-531a-411e-baff-37a38bc29ce9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8020::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c0:03:71:ff:a8:90:ac:5e:1c:1c:04:5f:95:ce:09:0b:45:
f1:31:35:49:7d:cb:6f:82:2c:88:3f:9c:cd:55:c5:06:4b:53:
dc:f9:49:c4:70:35:0e:47:3e:89:b7:a4:7f:40:ec:24:79:ae:
d2:c7:7b:7b:39:7c:d6:f4:ed:54:c2:60:be:c4:d2:0f:02:df:
ea:70:1e:fe:01:b3:dd:9f:40:d0:5f:0a:23:55:2e:30:28:0d:
7d:d6:4d:7f:43:55:08:82:d0:9b:ea:06:e4:53:3a:de:cb:01:
77:f4:3c:15:b8:b4:dd:8a:0c:d3:a2:46:25:e2:b8:88:70:fd:
2b:b4:40:22:a5:b0:fe:28:fb:10:1f:49:35:2d:3b:8e:d3:dc:
21:0a:67:cd:84:0d:46:8e:be:33:db:70:86:19:21:7f:aa:2f:
0a:a7:66:4e:f9:b8:ba:71:ce:15:43:b9:65:1c:b6:0a:68:a7:
fe:a2:c8:8c:55:7b:8d:89:33:91:f9:d7:1c:d7:26:ce:c3:8f:
a9:13:31:e8:03:1b:06:43:53:bf:f2:a8:64:d6:4d:68:9d:31:
ee:db:6a:cd:33:c1:8c:bf:09:d0:ed:6c:3c:d7:46:5a:2e:4f:
07:93:f3:14:a8:88:7c:16:4f:56:06:f9:a7:28:7a:81:91:c9:
ea:d9:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:50 2026 by rpki-client