Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fff94e8b-545d-470d-9a32-716ea7107d36.roa
File: fff94e8b-545d-470d-9a32-716ea7107d36.roa (raw, json)
Hash identifier: r2Psc4ElL8VueBYgo5yM6LgkqJCoDqpp4NrjIK8i37M=
Subject key identifier: 3C:12:B5:C7:EA:41:1B:73:81:0F:DE:1E:84:42:21:45:77:50:87:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27F2F68750D8610C1834635D2FE386E219A604AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fff94e8b-545d-470d-9a32-716ea7107d36.roa
Signing time: Wed 19 Aug 2026 01:10:22 +0000
ROA not before: Wed 19 Aug 2026 01:10:22 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f2:f6:87:50:d8:61:0c:18:34:63:5d:2f:e3:86:e2:19:a6:04:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:22 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=88cf77c840eb8c6706b05c4cb7d03f8cb86dcbc2b69f6a0af502a02cdcf55cff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:40:01:19:06:9c:e3:13:eb:9e:ab:06:22:
33:66:44:6e:ec:4e:0c:05:66:35:e4:dc:6a:7a:55:
08:71:a3:ce:fb:f7:54:fd:c0:6b:da:83:a3:ca:52:
49:d7:48:a6:4f:ce:16:6a:ae:17:a2:d2:35:36:eb:
28:bc:7f:67:59:79:5d:c5:d5:75:fe:1f:50:17:ee:
e2:78:a9:9d:2a:c8:5e:26:94:55:6b:04:38:dc:93:
61:e0:28:52:f7:f7:80:a1:0e:e9:f9:65:8f:d3:ed:
6b:52:fa:8e:e8:70:c7:ba:79:2d:2e:c2:9c:44:19:
36:c2:31:de:e9:73:4a:30:06:fa:7b:bd:c7:06:42:
d7:22:b0:a6:48:f1:12:08:ff:f0:66:f7:2a:72:ae:
7b:32:6a:a8:9e:ea:f0:3a:e9:49:4f:f2:d2:0d:2e:
5d:1d:d7:ee:5d:1c:95:b0:f0:77:ee:49:bb:ca:9d:
6a:37:74:39:b9:6b:e9:b0:b1:4e:c6:3c:82:16:94:
7e:da:c9:81:01:3b:12:49:84:16:72:cc:71:da:7a:
2f:ef:c7:13:f2:1a:44:f3:98:60:f1:7a:e1:38:2f:
c8:1d:58:6e:a3:84:6d:36:18:e6:07:e7:f6:1e:6b:
63:cc:99:62:a6:9a:10:df:fe:eb:41:8b:a9:7b:db:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:B5:C7:EA:41:1B:73:81:0F:DE:1E:84:42:21:45:77:50:87:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fff94e8b-545d-470d-9a32-716ea7107d36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:9040::/48
Signature Algorithm: sha256WithRSAEncryption
97:bc:7f:6f:45:70:a1:90:90:85:2a:69:3a:c4:35:ca:71:57:
64:d0:76:74:86:fa:55:10:1e:10:ea:21:d3:f8:89:b3:fa:9f:
32:5f:54:79:c3:1a:4c:18:d0:b6:49:15:02:f9:77:ce:0e:ec:
d7:89:2a:ae:36:e7:3b:b5:74:5b:18:4a:f6:dc:56:0b:4f:1f:
34:0f:fb:cd:a7:ab:d8:f5:d9:6e:de:02:d8:46:17:b9:10:80:
08:e1:03:d5:1b:fd:30:f2:aa:8c:b5:28:45:da:d8:c0:06:2b:
99:9d:05:ce:d8:25:62:c8:0d:50:22:e6:b8:fa:96:e1:c1:91:
3c:cc:27:a1:81:06:cc:a5:4d:2c:ad:b5:b0:ad:57:71:a8:58:
4f:0c:80:f7:37:ab:c2:14:7f:39:4e:6d:35:c3:b4:7f:36:6e:
5d:7b:63:15:d8:6b:d5:3d:53:b3:c0:08:4f:0a:bd:2d:34:4a:
60:a6:4e:8f:fd:e2:c5:d9:2f:76:09:45:03:21:bf:51:bd:72:
45:7d:ac:a6:cd:a5:4f:35:17:22:d8:0d:b6:2b:82:5c:96:f6:
4e:0a:31:12:61:e2:aa:df:ff:ab:c9:3e:1d:91:34:71:6e:59:
38:b7:76:d3:76:72:7e:32:17:90:7a:d0:eb:37:f5:8f:a5:3a:
92:49:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:11 2026 by rpki-client