Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5bc893b-21b9-487c-a51d-bb198783570b.roa
File: f5bc893b-21b9-487c-a51d-bb198783570b.roa (raw, json)
Hash identifier: 8rNeflRDkesI0zLIlq4W5mDJPbmDgCyareMtBh/nz3o=
Subject key identifier: 08:16:C1:C7:BA:8A:56:E0:5C:A8:F2:60:56:82:4F:98:E1:ED:DF:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57B4088317AF68D517604EFC854FDF835EB0B612
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5bc893b-21b9-487c-a51d-bb198783570b.roa
Signing time: Mon 10 Aug 2026 00:50:14 +0000
ROA not before: Mon 10 Aug 2026 00:50:14 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b4:08:83:17:af:68:d5:17:60:4e:fc:85:4f:df:83:5e:b0:b6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:14 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=9cc8f443705e05688951dfa810f457d3d780c20d3010fd2c414031b7e6e2da4b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e4:22:f9:77:9e:8b:1d:d6:a7:20:3e:a0:69:
c5:00:e8:18:54:f8:8c:94:16:ae:fc:ea:76:6e:39:
05:1b:39:6f:14:34:e9:c3:87:08:38:f0:62:0d:87:
53:92:c5:89:d4:bf:78:45:e1:13:a1:bc:52:c1:42:
08:17:c2:47:7e:ef:15:eb:73:d5:ee:f0:de:af:84:
43:8c:1a:42:34:8d:ff:4d:5e:84:3e:0e:c7:b8:bc:
de:0a:49:b0:e0:56:41:78:fa:4b:48:16:ff:35:d5:
40:d3:b0:76:2b:21:0d:b7:a3:c6:7f:cc:37:0f:13:
01:0a:cb:79:ff:cc:35:3d:4d:0b:70:23:40:58:0e:
43:c8:8b:7d:a4:fe:35:9b:a5:db:5c:55:c6:86:34:
50:62:e6:b7:60:ca:ea:7b:f5:9b:6e:88:3d:3f:88:
f7:d2:98:fd:43:3d:50:1b:92:f8:16:6a:fa:a7:05:
33:37:38:ef:87:6a:4f:a3:1b:f6:30:10:7d:65:6b:
17:f8:a5:b6:54:e2:06:68:5f:93:3b:ff:16:34:a6:
c4:9f:d3:84:cf:21:1e:e5:3e:f2:c5:0b:69:63:e9:
c4:46:0a:24:d5:23:2a:38:9d:cc:e4:1d:57:01:b4:
05:b7:d9:98:0a:01:59:13:f9:cc:36:08:3e:e7:94:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:C1:C7:BA:8A:56:E0:5C:A8:F2:60:56:82:4F:98:E1:ED:DF:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5bc893b-21b9-487c-a51d-bb198783570b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4040::/48
Signature Algorithm: sha256WithRSAEncryption
30:12:5d:95:9c:26:49:af:0a:51:b6:2c:7e:8f:43:dc:43:8f:
fc:cc:14:78:60:6d:cb:d4:3b:12:5b:0f:e9:08:fc:91:1c:ea:
af:2d:9d:16:25:d4:75:04:40:c9:aa:41:0b:26:7a:ea:57:e2:
c8:06:e1:5b:58:bb:04:aa:3e:34:76:a2:12:81:32:3d:cf:e3:
64:ff:9f:c0:95:c9:c4:cc:64:5b:2a:d6:be:57:74:4e:d0:a2:
19:11:3e:55:e5:ed:10:37:71:81:f3:5b:37:b0:58:fc:0a:6d:
48:99:d3:44:38:b9:08:67:4c:5f:c4:80:43:21:b8:b7:f2:4e:
7c:4e:5b:e0:67:57:75:24:82:6b:4f:f0:1c:d0:01:4b:70:47:
0b:44:62:46:e2:a4:03:b0:e7:b1:42:49:c3:40:2d:ac:d7:1b:
b3:5a:70:2c:b7:11:05:e6:89:d0:a3:b9:92:c8:cd:e1:89:69:
8a:69:32:05:d3:d3:8c:6d:40:c4:40:d7:d3:b8:d3:88:dd:ff:
83:cc:b0:a4:4e:e7:17:55:8a:2e:61:6c:57:3d:81:f1:a5:a5:
fa:6f:5c:dc:0f:e2:0d:37:c3:e2:5d:39:3b:c3:21:16:3e:85:
f8:6e:cc:3a:60:a4:dd:14:be:40:93:f9:27:ee:4c:5b:c0:98:
e4:8e:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:27 2026 by rpki-client