Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa
File: 2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa (raw, json)
Hash identifier: clCVsI41JI+TC0vDOR5CnslWqh0EePDio7EJx2jRIzc=
Subject key identifier: DF:A7:74:D1:FD:77:1E:53:A6:E2:2E:DC:6A:CE:91:2A:BE:75:5B:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44F2C24B5F5DB1284EB87156CC5F254FFCAF91AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa
Signing time: Fri 24 Jul 2026 00:00:06 +0000
ROA not before: Fri 24 Jul 2026 00:00:06 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:f000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f2:c2:4b:5f:5d:b1:28:4e:b8:71:56:cc:5f:25:4f:fc:af:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 24 00:00:06 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=5f752819860a9061a0f8cc48ae178887753a08da10b226f34749a4b8e62ee4b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:ea:8d:f4:e1:ce:4d:55:6d:8e:df:24:55:
2b:5e:4f:23:a0:a5:5f:49:88:9e:01:b6:97:c5:3c:
0c:c0:70:44:62:bd:2b:47:b7:84:58:f8:bc:29:e2:
dc:2b:97:c7:34:dd:69:66:a2:de:8a:fa:ee:b1:34:
57:35:1b:ce:a8:66:2d:28:98:dc:a0:65:ca:37:21:
c0:34:f2:77:a3:43:18:8d:2e:57:da:cf:ed:c8:33:
a5:d2:0a:fc:66:c0:bd:a2:70:2f:fc:2e:ec:f6:e8:
4f:c4:ac:88:68:01:67:12:e6:fb:d2:d0:f4:e7:7c:
f1:30:d7:5f:42:22:52:87:d2:a8:2f:7d:04:7f:2b:
2c:1b:32:ee:f0:f3:f3:31:19:f1:c3:96:cc:61:69:
f0:fe:c6:90:8d:2d:1e:89:42:ed:40:23:14:de:ad:
42:d3:af:51:e8:db:90:17:b0:3e:60:1a:54:41:10:
5b:7c:0c:6a:fa:12:43:ac:3c:39:ce:0f:5f:45:91:
33:03:ad:46:f4:47:f6:cb:e4:c3:2b:17:c3:63:c0:
92:ce:c1:0b:9d:a4:97:17:b4:27:64:89:40:95:e2:
7e:dc:eb:7d:74:9b:f0:37:dc:75:d5:80:65:c1:8f:
9d:3f:d2:3c:32:2a:c2:3f:bc:87:77:12:18:a7:0c:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:74:D1:FD:77:1E:53:A6:E2:2E:DC:6A:CE:91:2A:BE:75:5B:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:f000::/40
Signature Algorithm: sha256WithRSAEncryption
76:dc:d2:ae:c9:0e:ef:2c:17:0c:3f:30:05:69:2c:14:4f:a3:
93:28:db:bc:e1:6e:0a:04:b4:59:06:2d:7c:58:49:24:72:db:
66:6f:0a:91:a5:0c:5c:e8:cb:93:fd:51:31:4b:07:e4:55:02:
18:e1:88:32:28:67:db:0c:b5:49:19:4b:3c:d3:5c:14:8f:fb:
30:3f:8e:51:4c:cb:b2:dc:b0:c8:11:41:d0:cc:6d:3e:9f:0b:
ad:8e:84:6a:e2:96:b4:97:26:32:57:3f:2c:8a:66:c7:6d:b5:
25:42:b2:87:6e:c6:55:10:d1:e6:08:9b:fc:32:c2:00:12:97:
07:d7:ad:b2:11:da:18:e9:8e:ac:4a:b0:fe:99:3a:16:09:c6:
37:4b:37:40:5b:bc:27:e4:86:be:41:eb:4a:d7:55:d4:32:56:
62:0b:78:5c:44:ee:9a:0e:36:32:b3:03:52:50:87:dd:f4:4c:
fe:24:03:ff:7d:72:70:fd:e2:ab:f7:16:b4:00:26:47:02:d2:
b6:71:7d:11:4b:d2:91:76:26:64:b2:32:e0:08:a3:70:5f:98:
f9:26:4b:68:9c:79:fb:f8:25:42:e7:9b:ab:5e:97:46:a3:c5:
61:06:db:32:b1:b1:ed:1d:34:90:9f:5c:5b:83:63:61:d9:3f:
eb:94:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:43:39 2026 by rpki-client