Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
File: 84b89066-b432-45c3-befb-ffa2b4be3b71.roa (raw, json)
Hash identifier: mDW3ys10JJEAq1ZkizGcc4lTnV/wS2FOhgvc4BF5YDk=
Subject key identifier: 16:67:53:1E:4C:9E:85:26:42:DF:CD:18:41:FD:C3:A2:BF:83:DC:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 117E914AE78EAA3B5B9CBE8B19654192614921FC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
Signing time: Fri 07 Aug 2026 05:20:59 +0000
ROA not before: Fri 07 Aug 2026 05:20:59 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7e:91:4a:e7:8e:aa:3b:5b:9c:be:8b:19:65:41:92:61:49:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:59 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8924923f8c0843c805e65f3be69ec532873fed06577afb8f9bc68f1582b55f6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:47:61:43:f4:e7:09:53:5a:43:11:9a:ba:d9:
e9:0e:6c:2e:09:75:e0:a3:a8:bf:97:85:61:73:7b:
e8:ef:30:e5:b0:2b:40:df:55:a8:2a:b0:fa:31:af:
06:d5:a0:96:23:23:01:a4:57:55:09:0d:51:d6:9d:
8a:67:89:96:30:4b:33:58:3f:57:57:e5:b6:45:a8:
76:07:fd:2b:d0:0d:26:c7:f6:2e:e9:c4:b0:81:b5:
98:17:63:90:36:10:34:46:92:c6:80:0c:e2:4c:21:
0d:67:32:0c:5f:e9:35:34:79:47:27:86:41:37:bf:
6e:a1:c2:1d:f1:18:9c:8e:5b:f1:3d:c7:e8:cf:fd:
d8:e3:96:8d:a0:4a:1c:81:c6:87:4c:ba:6b:bc:6f:
4d:db:51:85:53:bd:76:7b:7b:df:14:c2:7d:b4:89:
73:61:ae:86:53:14:78:18:54:1c:9f:56:b5:43:53:
5b:dc:c4:3c:1c:86:ad:28:9e:96:8a:49:35:ff:4b:
40:13:0d:35:cc:a5:c6:03:d4:ac:8a:4f:7b:fa:57:
30:d3:b6:35:f2:fe:a3:02:e6:b9:0c:9d:27:92:e1:
0a:2f:8e:6f:2a:eb:a2:be:87:06:0a:77:d0:b5:e2:
df:53:13:7a:da:66:96:3b:e9:df:77:93:f9:27:97:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:67:53:1E:4C:9E:85:26:42:DF:CD:18:41:FD:C3:A2:BF:83:DC:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:4000::/40
Signature Algorithm: sha256WithRSAEncryption
35:66:98:01:43:ff:d5:ad:4c:85:ef:26:41:a7:47:56:c8:6d:
2b:b7:f3:c6:2e:3e:c2:ff:c8:01:fb:a9:46:b6:9a:b2:ef:cd:
58:2f:e5:31:03:96:b4:93:82:02:a0:2f:a0:b7:92:6f:3e:f7:
16:50:30:c2:b3:e4:7e:c2:e6:86:00:37:78:f8:44:93:0c:fe:
0c:88:0d:6c:74:a8:c6:ab:ae:e3:24:ad:86:a0:f5:65:ff:1b:
8d:5e:c7:94:73:3b:a2:41:fb:80:69:72:0b:e5:41:a6:77:cd:
5b:dd:8c:80:a9:95:43:65:0a:1e:1d:88:62:ed:67:b8:34:3f:
bc:dd:73:04:b2:22:89:23:d0:08:a1:87:fb:e4:a5:7d:ad:bf:
0a:c2:72:92:db:51:e2:49:18:76:f0:c8:50:bf:b9:19:49:d9:
9b:17:64:1d:4d:64:cc:86:b2:b6:8e:aa:f8:76:43:94:38:37:
db:85:71:52:9e:6f:93:3c:bc:f6:d7:92:2d:ca:96:1b:f7:fe:
bf:d8:37:c6:f4:da:a7:a9:bf:3d:4c:3d:e9:5a:05:92:37:94:
dc:6b:37:f0:2b:4a:1c:85:8e:b9:71:93:37:d8:e0:58:88:76:
9a:27:5c:d3:98:5c:8d:97:37:b8:21:8e:75:ac:b5:fb:43:8d:
81:99:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:24:40 2026 by rpki-client