Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f55891ee-bc6b-4038-acb6-ebd5b61fab0d.roa
File: f55891ee-bc6b-4038-acb6-ebd5b61fab0d.roa (raw, json)
Hash identifier: Gy8fkLDtGCwbqA2U21p3v4qVG6eQVxpC680O7ZPlseU=
Subject key identifier: F0:2D:FA:64:93:BA:4D:E2:1C:2A:89:55:37:CD:31:93:BF:86:11:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3165908286C2CA9005E0A999AE30F7AB95C229DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f55891ee-bc6b-4038-acb6-ebd5b61fab0d.roa
Signing time: Wed 09 Sep 2026 16:12:58 +0000
ROA not before: Wed 09 Sep 2026 16:12:58 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:65:90:82:86:c2:ca:90:05:e0:a9:99:ae:30:f7:ab:95:c2:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:58 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=8e761d77afd8ff11b4c7947191acd015deb1bbb98c4ccc562f588409a43c74d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:f2:99:33:53:dc:cd:d0:08:3d:83:31:29:
eb:dd:d6:81:09:43:a4:48:87:90:24:2a:a7:63:6d:
dc:e9:3d:eb:08:24:e3:36:ba:ef:47:a8:2d:b4:3a:
0e:69:e5:b6:ab:a7:5b:98:75:84:39:03:7b:3c:2f:
c6:97:79:3a:92:cf:a6:ba:cb:f9:c2:ed:73:c6:4f:
65:dd:ee:bb:97:1b:eb:e0:ff:89:b8:bc:95:45:a0:
0e:6d:c2:b5:52:21:51:81:4b:05:21:d9:88:5d:97:
7e:b5:bf:50:72:fd:f5:45:08:4b:7e:a9:4f:8d:9a:
85:c8:98:0d:91:e1:05:3c:df:ac:be:47:20:36:6a:
e0:d5:0e:f5:cd:1d:42:5b:b1:e9:38:5f:1f:c1:e2:
ea:00:fe:d4:50:52:c4:f2:0b:4d:df:99:a5:e4:46:
cf:0d:5d:93:5e:b5:72:91:75:65:65:2d:e3:54:f9:
0e:e3:8c:55:51:ff:8c:5e:8e:5e:16:b3:4c:d0:ef:
78:98:e1:ac:68:99:64:c0:7e:2e:86:fb:90:5c:7f:
5f:9f:14:13:bb:60:2c:f5:15:b4:1c:3e:3a:6c:83:
6a:2f:7d:b0:ef:1e:f8:d0:e8:25:c1:9f:f2:29:24:
ad:2a:2a:11:30:a6:ab:74:c2:c4:a5:d8:d5:bb:86:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:FA:64:93:BA:4D:E2:1C:2A:89:55:37:CD:31:93:BF:86:11:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f55891ee-bc6b-4038-acb6-ebd5b61fab0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4800::/40
Signature Algorithm: sha256WithRSAEncryption
bd:11:91:2c:23:00:79:57:18:2b:40:28:8d:9d:49:57:81:b2:
0b:f8:03:36:cf:96:1a:f1:59:9e:34:ae:13:11:ac:6a:dd:6f:
61:41:1d:6e:58:14:03:a1:6b:6f:c6:11:34:64:bc:5d:d3:a7:
d3:3d:86:a9:be:59:b9:9c:f8:ed:16:8e:ce:8d:fe:5b:d5:f2:
ef:53:e0:de:65:76:13:49:5a:9e:9a:2a:56:ee:35:1e:d5:97:
89:30:89:ee:4b:1e:7e:e4:de:08:0f:24:dd:2f:40:05:5a:d6:
93:2b:c9:fc:26:27:21:2d:79:0b:9d:06:b4:5c:4b:66:c3:b1:
5b:aa:b0:49:8f:1e:c5:18:e0:a2:ff:31:23:94:1e:fb:82:af:
69:c4:1c:c9:de:09:e2:bf:0f:ac:df:3b:41:bb:a9:7d:5e:12:
f0:ca:7b:ed:73:56:94:77:9f:45:8a:3d:77:91:93:a6:5d:c6:
9c:65:59:91:0a:fb:ca:ee:b3:fd:92:97:e9:d1:24:86:1f:2d:
2b:53:cf:34:5f:78:08:d3:0a:82:71:c6:95:5f:5e:e1:98:54:
0b:21:cc:5c:cd:9b:7a:65:06:7c:ad:73:50:20:f6:da:83:53:
a0:09:0d:bb:d1:a3:e1:39:39:4f:67:a2:08:30:9e:aa:b8:12:
90:48:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:40 2026 by rpki-client