Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa
File: f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa (raw, json)
Hash identifier: ZQLkLizBuCCGyU2uHGnivn3OBe+NNOsAkTCPfweZc1Y=
Subject key identifier: B4:3B:E6:E2:DF:1C:72:41:18:B5:99:AD:6B:A4:6E:25:4B:37:B1:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2ECCCE10A365D12EB94AC5F53BE8935D53702255
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa
Signing time: Fri 07 Aug 2026 04:40:57 +0000
ROA not before: Fri 07 Aug 2026 04:40:57 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:cc:ce:10:a3:65:d1:2e:b9:4a:c5:f5:3b:e8:93:5d:53:70:22:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:57 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a9d6614455ef7b04fe125c7b2e367263277e4eb42d7a6f3883347e87e4570095, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:0e:f1:32:41:94:71:9d:ff:c5:4a:29:25:
49:36:b1:d4:28:1b:04:7a:6a:c8:71:7d:dc:0e:eb:
b8:d9:5e:83:da:a4:bc:39:c7:48:fa:64:04:d3:6c:
c5:fe:23:7b:4f:63:96:9e:10:62:f1:ab:b9:ad:88:
08:f6:57:b0:60:c4:c9:50:28:a8:14:2a:a4:58:a8:
d2:ed:c8:2b:7c:7c:1e:8d:f6:ec:d3:5a:9b:f5:0b:
be:97:f8:5c:bc:45:19:ba:1b:b3:eb:55:0e:97:75:
4b:9b:ea:82:06:02:6a:de:f8:56:ac:79:ec:1d:1b:
53:de:a5:e2:90:02:ae:80:18:ab:0f:64:65:b0:78:
bf:b4:7b:8b:5e:9d:14:64:93:3c:e4:74:af:48:9e:
42:9d:81:cc:29:34:6d:8b:14:2d:c7:d7:8f:95:3f:
3f:ac:20:15:bb:b3:59:65:62:75:ea:32:f5:34:ab:
90:8c:82:9b:48:70:d6:3b:15:5d:72:47:1a:ff:48:
b6:3c:c6:0c:3b:41:9c:c8:44:54:17:0a:81:60:93:
d6:5a:32:53:40:e5:33:04:02:b4:e3:dd:3d:0d:e3:
56:8a:c4:00:f6:af:26:6c:d0:d2:62:52:e6:e2:82:
30:2d:fe:f9:f9:ca:e4:a4:17:ba:a6:e8:b0:b9:c6:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3B:E6:E2:DF:1C:72:41:18:B5:99:AD:6B:A4:6E:25:4B:37:B1:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019::/36
Signature Algorithm: sha256WithRSAEncryption
be:64:bf:05:f3:5d:bf:a5:ec:8a:d2:b8:a7:f2:e8:42:90:96:
f6:1f:65:a5:b2:16:88:ae:11:07:2b:ce:35:54:a2:fe:85:e1:
38:0a:c6:9b:44:9b:53:35:7f:f3:b9:fb:0d:85:25:69:52:8a:
fd:89:90:af:a7:9b:1f:c6:9f:c2:11:c2:5d:88:5a:e7:8f:27:
96:c0:f5:16:2a:e5:ef:d6:d9:63:3e:73:f9:11:0b:79:bd:55:
01:61:41:78:35:e0:05:89:19:fa:ff:c0:27:73:2f:d0:a2:fd:
62:ad:bb:a0:46:61:55:2d:57:69:b2:55:c9:7f:d5:14:33:3a:
2c:71:bb:64:54:8b:31:ca:1b:e1:1b:0b:26:8a:b9:2e:d5:c9:
cf:6e:b6:8a:af:5b:c2:8d:c8:52:3a:fc:ea:be:1a:6c:38:cc:
23:69:bd:47:db:9b:ea:9d:e9:65:37:cd:6c:60:15:1a:fc:c0:
a4:1e:3b:98:e3:ec:c9:88:9b:b9:c1:84:1d:25:ea:4c:c1:22:
95:60:eb:2a:9c:26:84:87:91:db:7c:89:f5:89:50:03:73:a7:
1b:64:78:47:9a:b2:ee:20:a5:aa:79:01:43:91:39:9a:2b:0a:
db:62:e1:14:1b:95:c0:03:e1:62:98:2c:75:4b:1b:f5:42:49:
a1:b6:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:05 2026 by rpki-client