Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json)
Hash identifier: hzfpvjbKwlX1Oq0SdyupUnsr3QN8StbQoyHB+akL018=
Subject key identifier: 8E:85:02:AD:5C:CE:86:7C:CB:0F:61:7D:E9:E3:6F:A7:31:BB:96:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E1353912C7F489E3E276B7FE5C58811F343C014
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
Signing time: Fri 07 Aug 2026 04:41:14 +0000
ROA not before: Fri 07 Aug 2026 04:41:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:13:53:91:2c:7f:48:9e:3e:27:6b:7f:e5:c5:88:11:f3:43:c0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=600dd6f323c32271b6cf863d8e48f19c191356a4a5837890d3912cf923e12e78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:00:53:4e:f5:e9:d9:87:8c:8d:f1:ab:a6:
18:65:27:40:1a:84:83:65:00:e0:d2:62:70:9c:23:
f0:3f:6b:5e:85:0f:11:54:5f:62:30:0e:dd:ce:ed:
ed:ec:8c:d5:cb:ce:57:a8:42:72:e8:5d:f2:90:f0:
d4:81:f6:b5:ff:4e:4c:5f:68:1e:56:47:6d:0e:ed:
2f:a4:c1:fa:42:e7:99:eb:41:d4:d9:50:91:ce:5c:
84:ad:e9:61:7a:80:bc:fa:e2:bc:2a:b9:03:f7:1a:
f0:0c:17:a3:90:0e:bf:c1:ee:18:d2:36:c2:d0:3f:
67:4d:f7:01:c9:80:2c:62:7d:87:f1:07:fe:6e:f7:
f7:e4:1b:c0:1d:fc:19:40:8d:8b:9e:4b:06:5f:31:
8f:11:91:6c:a3:30:0f:78:2d:11:2c:82:5b:01:c2:
d5:66:96:f5:a7:eb:38:4c:a7:f6:54:e9:c0:ec:b0:
44:18:d1:c4:90:05:c9:9f:7a:6d:8c:f8:f5:21:44:
d2:e3:91:b5:16:e0:44:4d:04:1e:ee:4d:2d:2a:40:
ee:6b:97:b0:d1:d5:06:49:de:30:44:8f:ea:04:ea:
51:12:f8:22:ca:86:69:ea:e2:9b:4a:ee:4f:17:92:
b6:27:b7:7f:7c:9c:10:8c:da:9f:be:a9:3b:22:4f:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:02:AD:5C:CE:86:7C:CB:0F:61:7D:E9:E3:6F:A7:31:BB:96:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
9a:d1:46:55:0d:e1:92:33:95:0c:6b:54:a1:8b:4d:1a:b6:55:
f9:a2:97:67:30:8f:97:9d:33:79:ec:57:97:5e:56:5a:8c:cb:
52:60:e0:44:25:db:ea:ed:8b:fe:39:75:4d:b5:6f:34:e4:dd:
a0:c4:0e:9c:09:a9:40:88:d6:a9:f3:72:70:56:ec:a1:ff:d7:
38:f6:e6:0c:fd:11:44:c5:0e:ee:db:70:62:44:1d:3c:0b:8c:
4e:b3:d0:f3:26:85:dc:04:1f:f4:d7:fc:03:1f:99:3c:cd:2d:
1e:dd:3d:77:2c:ee:08:04:b7:39:98:c7:f2:4f:c0:db:d7:69:
f5:63:47:da:b6:87:cb:00:e5:f6:c3:0b:a0:31:2d:02:7f:03:
cf:02:ad:11:6f:35:bc:70:da:07:1a:15:8f:5f:1a:ce:7f:2d:
a1:b0:28:ce:8a:e4:7e:50:07:cc:5e:2c:15:4d:64:dc:18:37:
da:01:89:8a:42:49:ad:7a:fd:5e:89:8c:52:d0:d6:6d:e6:77:
86:7f:07:da:42:d3:24:6f:ff:47:ef:ba:af:3e:04:fc:91:61:
6f:f4:2b:61:05:c6:c2:25:ec:2f:8f:12:ed:bd:18:5c:c1:9e:
d6:ea:7d:e2:9e:d3:c1:22:a8:b0:e5:4a:87:a4:ac:bf:9c:4b:
eb:17:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:13 2026 by rpki-client