Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f918e3b5-68b2-4171-9160-1ce297e0fb45.roa
File: f918e3b5-68b2-4171-9160-1ce297e0fb45.roa (raw, json)
Hash identifier: MAvKqLTa/UaB1Gtoor4sTxK/xFdVOvy+E9QF9kF3Sug=
Subject key identifier: 85:FF:7A:DA:E5:3D:05:1E:59:45:FA:37:58:3B:F8:1C:58:EF:A7:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D2CA1912BF8AEAF9DD6277171F2C3394EA40666
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f918e3b5-68b2-4171-9160-1ce297e0fb45.roa
Signing time: Mon 10 Aug 2026 00:50:27 +0000
ROA not before: Mon 10 Aug 2026 00:50:27 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2c:a1:91:2b:f8:ae:af:9d:d6:27:71:71:f2:c3:39:4e:a4:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:27 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=074c91b001c5c3948302bf9568e85ef4e003c9b8dd60d19d1e3ed20e63651c54, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:b1:5b:47:70:47:af:51:c5:8d:90:c0:cd:
7c:41:ca:fc:7d:91:b2:d2:6c:ba:52:ef:5b:5e:f0:
2b:fe:e3:ad:01:0f:86:8d:99:a3:15:f2:56:74:9e:
92:7c:fb:26:db:ee:ba:14:75:36:b6:21:63:75:d3:
fd:d6:6c:25:06:23:0e:f1:47:b0:e6:16:e8:24:50:
78:ad:bf:bd:da:1b:c2:2d:68:84:0c:c9:19:1f:13:
e1:19:87:82:e8:d5:39:61:3b:41:4e:5d:e9:ff:3b:
af:b3:f4:b3:c5:66:bf:7d:19:d8:86:10:38:a7:9f:
c1:ff:ed:b3:0e:f5:7a:0f:44:43:94:72:d1:16:71:
31:7e:03:fa:99:25:58:66:54:31:30:61:d7:42:d5:
41:4b:b3:2b:74:c0:fd:c9:37:b0:f0:42:c0:65:5c:
b0:ce:7f:6e:29:b4:92:14:ef:e3:82:cd:a8:30:bd:
13:0b:21:1c:06:0f:1d:4c:16:97:92:b7:3e:29:95:
73:0d:80:68:a7:c8:9f:45:3c:1b:69:7b:86:6d:52:
c6:fa:22:f9:2f:87:dd:17:6d:20:21:6c:ef:f7:41:
b4:8a:c5:fb:7a:34:7c:31:52:8e:c2:48:a4:b8:ad:
09:29:aa:ed:37:71:06:c6:cc:37:10:87:ef:5f:5d:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:7A:DA:E5:3D:05:1E:59:45:FA:37:58:3B:F8:1C:58:EF:A7:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f918e3b5-68b2-4171-9160-1ce297e0fb45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:c040::/48
Signature Algorithm: sha256WithRSAEncryption
46:8d:fd:f3:e5:ce:e8:64:68:bf:55:cf:bf:e0:51:06:57:0b:
af:24:96:49:f2:e8:4d:8c:6d:b1:22:6e:eb:15:11:57:44:d5:
4f:08:7c:f8:c8:45:74:ac:91:e6:95:52:cd:c4:83:be:92:27:
59:c5:94:74:d3:8e:97:8c:03:66:b1:1d:5c:1f:7e:3e:ed:05:
bc:fa:82:b1:1f:20:66:0e:ee:a0:4e:5f:ca:f2:ab:da:18:c5:
df:bd:6e:81:04:93:80:b4:69:80:78:85:20:65:14:33:c9:df:
59:29:59:54:09:ce:09:80:7c:fb:bb:42:04:e6:b7:50:b0:57:
78:38:44:ee:b5:a6:54:80:42:a5:d6:74:b5:c5:ec:9c:16:f0:
ad:24:a2:cc:02:eb:55:01:71:4c:ac:ba:91:12:a0:4d:25:2c:
1f:e3:7d:af:12:18:3b:0d:93:ae:47:a7:99:d3:1c:55:c5:5c:
9a:b6:20:51:a9:de:d4:90:21:b8:cf:fb:cc:4f:01:77:36:e9:
2f:15:58:fc:e7:fe:86:7a:b9:e1:07:e1:c8:51:57:8d:63:48:
ee:65:6c:34:93:14:bc:51:8b:ea:64:99:8b:0d:1e:01:f3:72:
ad:72:76:0d:f8:c9:5c:e1:dc:a2:48:f7:7c:5d:73:40:99:ca:
4f:d0:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:21 2026 by rpki-client