Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
File: fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa (raw, json)
Hash identifier: MB7Dj9lQJCTW9329l0zLatCKFUH8Rr8C9wMXaqwS8Xc=
Subject key identifier: 38:B5:59:BF:5F:7E:48:5B:E8:63:F2:0F:FB:F0:40:70:00:04:BB:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22485A5A5FC580B9687BC29663BF707F3D59BABA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
Signing time: Fri 07 Aug 2026 04:30:13 +0000
ROA not before: Fri 07 Aug 2026 04:30:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:48:5a:5a:5f:c5:80:b9:68:7b:c2:96:63:bf:70:7f:3d:59:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=865340c1988c5a21f1d0728148f07f55cc0fb513669d80195c98a50ec7ca4916, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:11:1e:9d:64:a1:f5:c7:9c:8e:ea:ed:01:
69:4e:11:ce:c7:75:c2:1e:f5:fb:5b:66:ea:f0:9d:
40:48:f0:2e:32:89:b2:9f:1b:f0:39:92:03:24:2e:
cf:31:86:e1:f0:42:c5:f0:bb:34:e9:28:6c:d3:57:
ac:b1:4a:ab:cf:61:5e:99:c0:d4:e3:84:31:f6:64:
87:06:fe:8c:e7:07:84:5a:4f:fc:12:f6:84:b2:49:
54:80:71:da:d8:84:db:d8:8a:1d:39:ed:51:9d:dc:
ef:f1:d3:cc:64:68:7d:6e:4d:b5:5b:99:5e:8b:b7:
93:1c:fd:b3:52:ab:58:3e:85:02:5f:8b:ec:db:b6:
80:69:eb:c1:6b:6d:e2:b7:09:c6:88:e1:fd:ce:94:
a2:7a:a8:6f:67:c3:d3:55:70:b2:c9:89:31:3f:63:
9f:94:35:bd:75:c5:54:96:89:87:a5:cf:29:5d:15:
3b:38:65:39:16:cd:57:d6:5b:2d:59:1d:13:06:b3:
7b:4f:5d:c5:90:cd:43:a0:d1:6b:74:a8:11:bc:77:
3b:26:49:ba:18:e3:4f:7e:45:b2:b1:b2:17:b3:62:
6c:d4:6c:67:6b:d8:05:b6:49:33:86:30:6b:8d:84:
19:d5:58:72:fd:b1:f0:5f:c1:ee:74:c5:22:e9:de:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:59:BF:5F:7E:48:5B:E8:63:F2:0F:FB:F0:40:70:00:04:BB:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
3f:04:ac:78:8e:59:4f:2a:55:36:3d:85:4f:2f:f8:e9:1c:1a:
c1:88:af:3f:9d:0a:28:cb:25:95:70:84:a6:b4:dc:2d:69:0f:
e1:a3:7f:ec:87:6d:63:0d:08:f3:13:2f:c2:b9:1b:06:83:bf:
b2:f2:c7:1d:b1:f0:c4:7d:89:f8:0d:df:f6:1b:2b:d4:96:22:
21:aa:6a:30:ee:7d:9b:97:9b:9c:ec:ce:b8:6b:ad:8d:e1:0e:
8e:df:6d:d1:41:9d:e7:ad:5e:b7:5e:1d:dd:aa:2b:00:93:d6:
38:cb:50:fc:4e:a0:e2:1c:a3:ca:8e:cb:bc:af:13:df:b4:8e:
22:d9:9a:a5:5a:d3:1f:da:93:1b:e2:d7:45:7c:7f:08:c6:67:
40:00:0b:cd:9e:13:55:c2:a1:e8:a2:e1:13:15:c2:37:70:32:
01:4c:2c:2d:0a:0d:73:77:6d:6a:2a:3d:aa:af:3e:bc:11:f6:
0a:70:29:4c:20:e6:01:58:79:56:25:de:b3:98:34:50:62:fa:
cf:5f:e4:12:35:c6:d6:10:39:f9:c2:94:73:a2:93:0e:60:7c:
6a:ea:0e:dc:9b:84:c2:cf:41:a6:fd:35:3c:ac:95:ad:b0:6c:
e3:37:e0:34:82:39:01:cd:2b:ac:5a:aa:1c:b3:d5:54:7c:ab:
ab:84:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:49 2026 by rpki-client