Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
File: 275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa (raw, json)
Hash identifier: yI23t/ur+3RLgVR+1e7SBNgc0h8zmQJYU4nZjp2oABo=
Subject key identifier: BA:71:D7:28:1D:89:B1:D1:CD:2C:D3:70:DD:40:4D:B2:0B:62:8B:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B7488E5EEADC5D9E9CEAD71A15716E06F7D9C81
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
Signing time: Tue 21 Jul 2026 01:30:07 +0000
ROA not before: Tue 21 Jul 2026 01:30:07 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:74:88:e5:ee:ad:c5:d9:e9:ce:ad:71:a1:57:16:e0:6f:7d:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:30:07 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=52a77c422d3cf95dc29bd1cb16a9046a5a62aaec2293694bc1cc230711231fa9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:5c:62:28:ef:ca:bb:d1:b0:77:c4:86:15:
56:09:6e:80:92:fd:41:cd:e9:4d:27:a2:08:5e:42:
4c:e5:0b:81:46:ab:f9:5b:e7:0a:b4:3f:32:e6:97:
57:22:ba:3f:d0:f5:21:80:e0:66:db:f1:66:24:5d:
2a:0a:a2:bb:31:0c:14:8d:12:b7:32:0d:07:22:ae:
06:30:e8:9f:5c:c8:9a:f1:39:10:8f:74:05:17:db:
00:5d:8d:70:93:db:90:07:b6:75:db:16:f9:57:2f:
6a:cd:87:80:0c:67:3f:f5:95:4f:f4:e2:f0:00:98:
cd:d8:90:94:60:b5:41:06:ee:87:3b:2d:42:19:b2:
03:5f:58:73:95:4a:b1:39:36:38:6c:dc:90:26:1d:
84:3a:0b:e0:fe:f4:25:f4:70:67:01:76:99:b5:95:
fe:bd:6b:98:46:cf:49:ac:6f:ac:54:03:93:fd:e0:
33:79:c6:3c:82:6a:18:ca:1a:0c:d8:8d:f3:11:b2:
5c:4e:e8:d0:91:02:5f:1c:67:45:b5:27:5b:bb:6d:
f0:c5:91:0d:7a:51:50:7e:bd:19:cf:55:c9:93:6d:
38:f7:54:b9:be:ec:e5:24:f3:8a:9e:df:31:99:80:
10:96:a7:2d:81:05:c1:49:43:a0:7e:ed:8f:f4:6c:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:D7:28:1D:89:B1:D1:CD:2C:D3:70:DD:40:4D:B2:0B:62:8B:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4040::/48
Signature Algorithm: sha256WithRSAEncryption
61:12:3d:46:8a:56:4d:19:42:09:47:2a:2f:40:58:22:f7:68:
ea:f0:5e:3b:87:a1:26:44:4d:3c:6a:ca:79:4d:d3:19:fc:87:
7e:c2:de:be:5b:39:33:18:f1:4a:9d:51:fa:c4:5f:c6:20:80:
5f:a8:7d:65:48:3d:8e:9d:62:b8:19:c2:7a:a4:08:89:f8:e8:
63:04:ec:f5:c7:c9:19:85:77:ff:6c:3c:a2:82:8d:de:6e:c2:
2c:00:d7:27:7b:30:9c:a3:b4:5b:06:81:e3:22:d7:4f:61:d6:
d7:b2:9b:8d:81:4b:a5:dc:ee:89:0c:18:4f:87:23:fc:55:bf:
eb:85:25:28:11:9d:48:41:f8:b9:ad:cc:24:42:fd:88:c1:4c:
5e:0a:87:ce:fc:cf:2f:60:27:c7:e1:44:68:9a:cc:66:66:ef:
e5:1d:a8:45:19:63:c7:a5:86:92:ed:de:44:07:db:c2:0b:16:
a0:91:18:db:7b:87:78:54:f0:23:5f:2f:c2:ba:92:00:8b:77:
88:4f:07:73:a3:96:5e:44:18:7b:4c:94:87:09:44:65:8e:5d:
24:3f:be:46:e1:f2:b5:4f:12:7f:6d:9f:5f:04:33:41:70:82:
96:a2:df:e7:89:27:da:28:0c:2f:4a:63:5c:d8:45:24:92:37:
ef:ab:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:54:44 2026 by rpki-client