Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e8f7de4-db4c-48d4-b38b-387a8380d716.roa
File: 0e8f7de4-db4c-48d4-b38b-387a8380d716.roa (raw, json)
Hash identifier: QWl7njewPNZ2o295s33knj3mk/IDluyYeSHrtDobXvg=
Subject key identifier: 5B:20:A5:43:3F:6C:38:0F:F2:CC:3F:01:0D:C2:72:73:68:21:27:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27A5D9AB31050AC07C10C3A9160EA22262666BC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e8f7de4-db4c-48d4-b38b-387a8380d716.roa
Signing time: Tue 21 Jul 2026 01:20:30 +0000
ROA not before: Tue 21 Jul 2026 01:20:30 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a5:d9:ab:31:05:0a:c0:7c:10:c3:a9:16:0e:a2:22:62:66:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:30 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=89f4373117a730eb232d33b1b3400efca2dcdb680d3c50224f91307c2be52de1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:b8:9b:8a:41:b9:fc:9d:ce:e0:f5:31:e7:
21:31:05:bf:97:53:02:e2:34:d7:65:21:e2:ab:0a:
14:af:e7:2f:b5:78:9a:ad:e2:a1:11:91:ca:8c:6a:
3c:ef:04:57:6e:1f:ed:e8:b1:0f:50:d4:c6:bb:e7:
e8:17:96:50:a6:c7:ac:45:3f:ae:a1:df:20:e8:01:
57:80:c7:f2:9d:5e:1e:ff:fe:3d:c2:cf:3a:83:56:
53:ca:a9:10:48:bd:09:40:af:48:63:c1:d2:68:c4:
4f:f7:58:0c:1d:07:a1:e5:d1:c1:b5:34:ec:d0:3b:
33:bd:ea:55:b3:ce:b1:93:0e:63:cc:d0:c1:d5:0f:
c2:a5:0c:5f:14:da:9a:cb:be:9b:21:34:d3:d5:cc:
37:31:39:69:54:4d:35:09:04:8e:63:f9:f6:ec:98:
8d:c4:0a:16:12:b7:61:20:17:44:3c:2e:c4:a1:51:
33:ba:d0:c4:d7:03:05:cd:7d:d1:88:23:d9:cd:94:
7b:32:22:22:fe:f1:62:24:bf:35:b7:c7:d9:8f:6b:
b4:e3:53:48:81:0e:7a:f4:1a:1e:de:14:38:96:49:
a9:4e:37:03:b3:16:8f:af:f9:e8:ce:6a:f9:f6:59:
6f:db:b1:07:70:2a:ed:5f:3c:04:c6:74:38:d3:84:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:A5:43:3F:6C:38:0F:F2:CC:3F:01:0D:C2:72:73:68:21:27:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e8f7de4-db4c-48d4-b38b-387a8380d716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
29:b3:a9:72:e0:b7:ea:f5:49:7e:50:16:90:52:d8:f4:c5:b9:
a6:61:0a:cc:ed:94:7a:8e:4d:34:a1:c2:5b:b7:0b:43:d4:01:
15:c9:1b:c2:2e:ec:af:96:c6:d5:35:6d:48:ee:16:e6:a6:7f:
b2:4b:1f:c3:f9:52:a9:37:dd:a1:05:55:e8:4d:d4:ea:f7:9d:
c2:d8:ec:35:7b:72:43:dc:5e:b3:05:e3:dc:5d:e3:39:0c:c4:
44:c6:f6:72:89:c0:19:c4:cb:87:0e:58:aa:53:fb:21:10:ff:
38:b8:a8:d7:bc:e1:56:5f:15:9d:ea:b6:70:7c:68:8a:22:5e:
42:3a:3c:d1:05:9f:b3:09:e8:8e:b2:6a:ce:37:ef:fe:33:da:
69:d1:25:d6:03:6f:97:a5:30:df:54:c0:06:dc:9f:3f:8e:e3:
05:eb:7f:8f:78:34:dd:df:24:48:e7:97:8e:93:34:71:c8:a8:
e6:ea:4e:4a:65:11:ea:6a:04:33:89:a3:c6:7b:d9:83:fe:e5:
62:3f:fc:13:d3:2e:d4:c5:d5:63:bf:e7:6a:08:89:3a:df:dd:
af:89:ac:1e:f9:02:f2:e1:ab:be:b9:ed:2b:41:b8:f4:d8:f3:
78:f9:4e:a9:03:eb:14:aa:17:9e:da:0b:84:62:1a:38:82:ce:
19:65:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:15:02 2026 by rpki-client