Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa
File: 2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa (raw, json)
Hash identifier: BcIYCqZ1tAvmC+fNPkwSm6uz3SsPDDz9LOlWiWW6wc0=
Subject key identifier: 47:70:DB:F0:27:D4:52:45:F8:E6:2E:70:00:CA:FC:32:DE:9E:A5:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42B9340D53E74F5F759AE5A676C0A8625E61BF43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa
Signing time: Tue 21 Jul 2026 01:30:07 +0000
ROA not before: Tue 21 Jul 2026 01:30:07 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b9:34:0d:53:e7:4f:5f:75:9a:e5:a6:76:c0:a8:62:5e:61:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:30:07 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=fca24ce4523d5a1ea0b5719777da36bf0d45cf35ea79bd81a0c00fb9bb84019b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:14:67:73:cd:1e:47:5e:b9:df:79:fd:7b:
ea:4d:6f:5f:2f:c5:8e:6a:0e:aa:80:ef:d6:23:05:
5b:01:bc:23:fe:5f:78:26:c8:60:c7:0d:6f:86:e3:
dc:cf:63:5a:e6:b3:76:a2:34:ba:f1:3f:f0:4d:26:
f1:93:24:e0:6c:0d:fc:b8:50:03:41:78:4c:ae:d0:
48:4c:da:09:59:17:2f:b3:05:67:07:eb:c1:22:52:
19:1b:55:23:0f:29:5c:f5:a7:88:49:b0:24:f9:5c:
1f:a8:49:f3:bd:30:e4:cd:07:d6:d4:d1:cf:ea:80:
d2:82:c7:c2:7e:28:ed:28:f8:f8:0c:40:27:b2:a2:
35:09:94:8d:a2:5f:07:34:e3:ad:60:e0:3f:e1:47:
7c:8b:ae:3d:01:48:5c:9c:85:ec:f4:22:1a:be:8e:
67:8c:ad:8f:36:62:52:1c:e0:e7:d6:6c:aa:f6:8a:
ad:aa:b8:70:39:b8:9b:65:8b:24:71:0b:a4:bd:55:
9b:41:0c:a5:da:3d:ef:eb:59:ff:8f:62:1d:22:b8:
e2:76:af:0b:68:0b:2b:16:3d:1c:fd:c7:a0:b2:0c:
fd:c5:8e:37:8b:93:40:34:69:7f:a7:75:f6:87:63:
c1:4c:ba:7d:1d:c9:29:ab:5d:1a:e2:41:62:0a:d1:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:DB:F0:27:D4:52:45:F8:E6:2E:70:00:CA:FC:32:DE:9E:A5:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8080::/48
Signature Algorithm: sha256WithRSAEncryption
66:5b:de:13:99:6d:bd:bb:5a:b3:6d:73:69:1f:c3:c1:8f:a6:
3e:42:cd:2e:e3:a0:ba:2a:17:10:13:51:4d:1c:25:5c:99:07:
1f:9d:83:98:68:38:bd:af:14:26:53:a5:47:0f:5c:b7:92:4c:
d9:2e:2a:f1:ee:85:47:02:ec:bb:6e:4f:a0:3d:f4:a8:77:f0:
30:3c:72:ca:d6:45:ac:03:ef:07:93:9b:fc:26:18:b1:7b:d2:
01:9b:47:0f:f6:84:b4:80:68:73:ff:7a:69:fe:a4:5b:51:a7:
71:32:8a:5a:ae:48:19:d2:4f:d0:80:fe:4d:15:71:38:13:30:
e8:6a:c2:5a:23:0b:be:fe:6f:98:7e:14:85:4a:e2:44:4b:c8:
ff:ac:fe:c6:36:12:df:d1:32:e4:af:23:f6:ab:05:f0:cd:d6:
a0:a7:53:a5:02:ce:4c:93:b1:24:b0:e6:1d:01:48:f2:5c:86:
3a:49:d4:19:0f:bb:e5:5d:d9:86:90:f4:8a:ba:7a:76:9b:49:
4a:e7:c2:87:51:2c:97:08:8c:ee:b8:c6:cc:86:5a:f7:f4:11:
8e:c7:83:8b:14:b0:08:2e:8e:86:77:c0:0b:64:82:b3:0e:84:
3d:79:be:89:9f:a3:58:86:60:7e:b4:ed:24:2d:9c:c5:de:79:
5c:54:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:33:28 2026 by rpki-client