Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb0c6bec-0345-4f72-afa3-9220fe75b260.roa
File: fb0c6bec-0345-4f72-afa3-9220fe75b260.roa (raw, json)
Hash identifier: AmIlmcCO/qfktWJHEKIg5joEH+zfPPypKm/U1ouz8T0=
Subject key identifier: 6B:0E:BE:D1:89:76:57:2F:10:95:AB:37:6C:98:0C:23:CF:D5:C3:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7EBDEA47758C572C933BABD90F2997B6E28460A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb0c6bec-0345-4f72-afa3-9220fe75b260.roa
Signing time: Mon 10 Aug 2026 01:00:49 +0000
ROA not before: Mon 10 Aug 2026 01:00:49 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bd:ea:47:75:8c:57:2c:93:3b:ab:d9:0f:29:97:b6:e2:84:60:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:49 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=7aecb9a355134cd87c1dab0a2147b568684917c634171bb15f9d88519c6f9fc5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:3a:a9:88:35:36:8c:86:1f:84:df:23:9e:
81:73:29:ed:88:b2:03:99:9d:5f:b7:23:46:d6:2b:
90:70:ba:cf:1a:96:2f:dc:34:27:ff:89:74:40:9f:
a8:a1:2e:a0:54:49:23:e6:d3:9f:cb:52:1f:08:af:
72:fa:2b:7b:0e:36:4d:41:83:bb:5a:88:b0:f6:12:
6d:c0:cf:c3:e6:b8:0b:70:45:87:f4:7b:f1:a1:60:
2e:5a:c1:93:6c:bd:26:fa:81:21:15:60:40:f3:94:
62:e7:92:3c:68:5a:1e:15:9f:19:33:f4:43:38:78:
5e:3d:3e:1b:df:61:32:bd:07:aa:1b:db:8a:4e:d0:
77:de:a3:e7:6e:1d:82:55:c1:e4:cd:0d:3b:e1:5a:
36:75:1b:94:a1:e5:80:26:20:3b:1f:09:92:e5:cf:
02:3d:1a:d0:9f:c7:d2:ae:de:66:96:fe:53:c3:2e:
94:de:cc:54:e1:1e:ff:9e:a3:48:a0:37:5d:39:20:
d8:ce:56:55:b3:be:17:d5:d9:86:de:18:79:48:5a:
7f:d1:6e:64:fb:74:03:73:49:05:8b:ea:27:5d:72:
24:b5:2e:47:9f:af:70:5f:98:21:72:2c:e3:51:d7:
e5:7c:0b:e0:15:51:a0:eb:cf:c7:37:5e:0c:41:1d:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:BE:D1:89:76:57:2F:10:95:AB:37:6C:98:0C:23:CF:D5:C3:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb0c6bec-0345-4f72-afa3-9220fe75b260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4000::/40
Signature Algorithm: sha256WithRSAEncryption
44:a7:9a:34:03:c1:09:98:fb:a3:ce:92:7d:07:ae:18:9a:30:
90:5f:3d:d5:40:83:96:78:16:07:dc:b4:ab:33:bd:d0:2c:a7:
86:d9:c5:88:61:75:5c:93:bb:0f:ee:5c:b4:48:aa:9d:26:5f:
97:f4:bf:38:d4:ae:28:29:76:e5:f3:00:ee:f0:02:b6:06:c8:
0d:9b:bf:b9:44:61:80:77:4e:7a:4a:33:57:b9:28:dc:52:92:
20:29:fd:cd:73:cd:47:c8:9c:6a:41:66:d3:d5:21:1b:6c:5b:
b5:e8:89:75:ba:97:10:88:d7:1a:46:e3:53:a6:c4:6c:29:43:
23:bd:87:19:ba:de:80:0b:a7:3b:dd:38:c8:38:20:f3:7d:4c:
fb:7b:c5:98:0d:42:a1:7e:94:5f:1f:d9:f2:df:8d:54:97:79:
56:3c:c3:90:69:db:ee:31:f7:65:ad:c9:8e:bc:15:4c:f9:3b:
65:c2:5f:8e:b1:0b:43:db:e1:56:9f:03:0d:55:a6:a9:79:37:
6c:d8:b1:b2:5b:61:49:1a:ef:c8:28:99:21:b8:f3:01:19:03:
21:d9:a5:59:9e:de:57:97:84:62:ab:ff:d6:5b:7d:b3:99:fa:
8a:29:46:a3:00:29:15:8d:06:63:ba:12:ac:3a:3b:ef:ec:7b:
ef:21:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:36 2026 by rpki-client