Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1977ffde-7d26-418c-800c-ccacd18fe560.roa
File: 1977ffde-7d26-418c-800c-ccacd18fe560.roa (raw, json)
Hash identifier: M81tICZA3f4fNni+HOHkpGhjv7jaSNHe87fYHxttSIo=
Subject key identifier: 7A:09:F5:CC:FE:7D:34:41:DE:7C:3F:30:7B:BE:0D:43:5C:98:23:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26D58DF0BBE411D76C47DCBC5D12BD5983BB22E9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1977ffde-7d26-418c-800c-ccacd18fe560.roa
Signing time: Thu 23 Jul 2026 15:21:05 +0000
ROA not before: Thu 23 Jul 2026 15:21:05 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2a05:d040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d5:8d:f0:bb:e4:11:d7:6c:47:dc:bc:5d:12:bd:59:83:bb:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:21:05 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=be780b77ff1369cc4d1d7125f8c8dce1b89b2825cf41680401e0b12df58030bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:ee:a9:86:d9:b8:01:31:92:d3:d7:45:ef:
99:5d:d7:65:38:55:a2:c2:bb:86:e8:7e:94:44:71:
31:3c:f6:4e:74:97:07:e0:b1:6f:df:4b:26:6a:a3:
d8:8e:cf:a2:29:8f:1c:0b:96:6c:5a:2e:cc:5f:02:
62:4a:fa:65:da:ee:da:a2:d6:6a:1c:ae:22:e5:32:
3b:c1:f2:31:bc:58:18:41:00:26:7b:ec:1b:fa:90:
f4:6e:d5:28:d5:4b:b6:a1:91:3b:dc:1d:a7:1f:4b:
ef:3c:9e:bb:65:91:de:4f:e2:60:a7:84:b4:e9:15:
bb:25:c9:b7:3e:4d:25:19:47:b0:55:9c:a9:c2:76:
eb:9c:bd:90:22:be:77:06:91:9e:b4:62:9a:91:92:
44:7a:e8:10:da:c5:aa:17:c5:88:44:60:1d:d0:ab:
e5:41:84:e7:cc:47:bf:63:bd:7d:6b:5b:7e:e4:41:
84:f7:e2:72:d8:bb:c1:63:06:6a:aa:2c:87:cc:a8:
51:f1:34:28:f3:0c:33:03:e3:5e:80:07:43:13:ea:
f0:ca:27:0d:c8:1b:ad:d8:66:0e:98:ac:bf:b7:3a:
e7:47:a2:5e:4c:fa:da:c6:39:48:fc:82:46:f9:37:
5b:f4:51:9c:3f:b5:a5:a0:bc:be:82:2f:27:2a:6b:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:F5:CC:FE:7D:34:41:DE:7C:3F:30:7B:BE:0D:43:5C:98:23:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1977ffde-7d26-418c-800c-ccacd18fe560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040::/32
Signature Algorithm: sha256WithRSAEncryption
63:48:05:b1:95:8d:a0:76:ed:63:81:04:7b:9c:07:42:4d:77:
b3:9c:96:a5:6d:a2:db:ce:8f:50:a0:c7:d1:85:8c:d8:c1:6e:
eb:d2:4f:ce:4b:47:45:1b:8e:76:11:54:55:07:7e:8f:cc:2a:
36:72:67:17:ad:a8:24:b6:07:c2:62:b4:03:e1:ab:36:b2:3e:
16:98:6c:d1:fb:e3:b2:03:2d:56:5d:4b:92:e6:ce:e6:2e:69:
7b:4c:42:24:1a:36:68:29:75:43:ea:3f:05:25:19:e5:47:9b:
cb:30:61:54:ac:34:ce:ea:a4:5c:fb:cc:ae:ec:d5:a8:74:20:
b6:d8:b9:69:16:c1:07:23:99:33:33:14:4d:2a:ef:99:36:07:
e1:9b:25:eb:be:4f:c6:14:2e:7b:a4:08:23:a8:99:d8:79:af:
dc:83:4d:61:93:3e:71:9d:39:e6:32:ec:7f:61:b0:3c:27:46:
4c:2b:31:2e:f6:85:c6:b6:ab:5e:ec:19:09:11:cc:28:6b:b2:
75:53:2a:47:af:2d:15:a0:02:eb:11:36:f3:39:41:f1:e7:b6:
35:d3:b1:ac:0f:dc:c7:63:26:c2:a0:cd:5e:c0:4b:56:3c:57:
bb:bc:e7:64:3d:f8:a5:9e:5c:49:ca:aa:a0:26:dd:44:3b:5a:
cf:47:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:10:55 2026 by rpki-client