Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb07fb46-6a0e-49aa-bc2a-0a76771c9c49.roa
File: fb07fb46-6a0e-49aa-bc2a-0a76771c9c49.roa (raw, json)
Hash identifier: bH+KZBtcKCKM+JoBcuQVAeBXgQfN8aI8FZoKINDrvto=
Subject key identifier: 67:51:0C:9A:D5:52:CB:1A:92:1E:16:55:BA:91:6E:D6:82:2F:38:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FE7EFA8D86298DA1CAC4E49907E116721FD0FAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb07fb46-6a0e-49aa-bc2a-0a76771c9c49.roa
Signing time: Wed 09 Sep 2026 16:13:00 +0000
ROA not before: Wed 09 Sep 2026 16:13:00 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e7:ef:a8:d8:62:98:da:1c:ac:4e:49:90:7e:11:67:21:fd:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:13:00 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=ed867d90dacdc4a844db311604d3b989db5a251b9eb7666b4e9ca69cd2e0f80d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:53:a3:b8:1d:b4:23:68:16:ab:af:b8:81:
b4:dc:2c:77:55:be:3f:5d:c8:58:a7:be:2a:18:b2:
a4:ac:ac:f6:78:9f:27:d6:d7:40:5c:89:7f:61:7b:
ac:d6:2e:75:96:bf:f0:10:ad:d9:12:e8:87:94:ca:
01:6c:bb:2c:68:ed:32:b6:93:58:fb:74:45:12:f7:
be:ac:25:85:25:b0:8b:0c:39:a2:ae:0e:a3:5a:81:
fd:ef:0f:ac:72:c4:e7:38:c3:ad:8f:51:77:0b:39:
ac:2f:ad:86:39:d4:b8:13:5c:cd:c0:11:5d:bd:44:
88:1a:11:ea:30:73:28:f3:bd:59:0e:f7:55:27:62:
21:02:99:33:b8:aa:77:96:7a:0a:9d:4d:4d:bf:31:
f8:1b:b4:78:c5:df:7b:83:f5:43:d4:aa:0f:be:40:
9c:5a:fb:a1:ab:f0:64:2b:f0:36:00:2b:e7:f6:28:
d0:1f:a7:d2:0c:23:de:70:c1:67:1b:f1:cb:8b:44:
66:24:00:dc:2e:e7:26:fa:2e:91:cd:7d:a6:61:f0:
3c:6f:47:b6:e0:3f:38:56:79:45:fe:66:9a:3a:71:
ba:f0:1b:b1:a1:7b:ec:a7:31:69:e4:71:16:dc:ac:
c5:f0:e5:e3:0a:51:ca:3d:71:1e:1a:36:eb:8f:24:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:51:0C:9A:D5:52:CB:1A:92:1E:16:55:BA:91:6E:D6:82:2F:38:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb07fb46-6a0e-49aa-bc2a-0a76771c9c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:8800::/40
Signature Algorithm: sha256WithRSAEncryption
5f:82:c4:ff:9a:d1:cf:ca:67:bd:f8:a8:b8:61:a2:82:68:a9:
b3:76:73:1d:a9:f9:11:63:d5:6b:c7:4c:14:7d:68:12:5d:86:
0d:ad:8f:fc:58:ed:80:bb:c0:5a:7d:45:02:aa:c0:46:65:47:
b1:b8:44:ad:90:51:57:1e:e8:bf:f8:7e:6e:45:b8:fe:88:e5:
1e:36:68:fe:57:b2:17:7f:59:e2:f2:13:82:78:79:ff:ee:72:
1b:bf:13:fe:fd:71:13:5f:03:13:82:03:da:3c:d3:d8:47:4b:
f8:84:65:fd:c7:50:8d:8f:62:06:e9:e4:f8:9b:39:5d:a2:ba:
76:90:d6:47:9a:07:22:20:fa:00:f7:b1:54:ce:6f:06:c5:cd:
15:e9:92:d7:f3:1e:19:02:99:32:e1:d4:40:32:3e:8b:e5:7a:
00:d5:df:bc:46:2b:5e:d9:dd:ea:38:aa:e7:20:eb:9e:90:ee:
e2:34:b4:f8:20:9e:13:3f:12:0a:0c:41:53:e4:44:53:8a:2f:
8e:9c:14:be:62:0c:b8:42:64:af:96:3a:12:90:be:ec:3c:80:
90:9f:d9:c5:30:a9:d5:0a:2b:ce:98:90:dd:e6:40:63:4e:57:
42:08:26:ad:6c:16:3f:f5:18:6c:99:81:67:09:a6:4b:58:5c:
a2:5b:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:27 2026 by rpki-client