Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa
File: 34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa (raw, json)
Hash identifier: 1dNDwymGkogkOMkmhZhU3xg/hWb5T6Y+6mCsM2xYPzw=
Subject key identifier: 50:D2:1C:68:0D:C6:13:22:72:18:4E:08:02:83:EA:1A:79:F2:C1:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 409364A1D9C91AE54845ECDB93741B57BEEB3E08
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa
Signing time: Tue 21 Jul 2026 01:20:04 +0000
ROA not before: Tue 21 Jul 2026 01:20:04 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:93:64:a1:d9:c9:1a:e5:48:45:ec:db:93:74:1b:57:be:eb:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:04 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=464d0f6507ef13fe4c431716d649bbc31eb59ec104354feee72625c42d33483a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:84:12:84:00:b9:b9:2f:8d:66:30:d3:d8:
4b:b8:f5:97:4a:09:2c:f1:8a:56:32:03:32:60:ed:
16:76:d1:bb:15:d7:37:22:7d:de:b7:41:8e:b6:0c:
dc:4b:12:ab:74:9f:84:5b:cb:0a:32:23:be:7e:50:
99:22:a6:66:e1:f4:32:c7:94:23:b6:1b:72:bd:45:
3e:59:65:5c:4c:2a:18:c3:6e:81:08:b9:09:d3:48:
4f:63:a4:73:03:29:99:2b:0b:0e:41:5b:cd:ee:90:
33:bc:3a:c7:bb:d7:ef:97:38:80:be:8a:c2:98:73:
33:6e:bf:67:f1:d0:cb:65:ee:23:06:5a:29:ac:0c:
74:4c:04:27:c1:6a:5f:5c:38:cb:43:d3:a4:d0:be:
14:9c:1d:8f:1d:15:f5:fd:33:d0:20:62:04:50:5e:
7f:68:86:d4:b0:4d:59:cd:ce:48:9d:7f:aa:b7:4f:
23:d9:8d:27:99:0d:03:c3:bb:b5:42:55:ef:c7:ae:
46:0a:02:79:48:16:eb:00:1b:ba:81:50:02:f1:15:
09:6d:e4:b0:2e:b5:0d:5b:9a:30:4c:eb:37:f0:04:
df:c0:db:13:0a:d7:ee:ef:b0:f2:29:aa:99:5f:0c:
52:b9:b3:32:ad:bd:38:93:8c:21:ff:c4:6d:a3:bf:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:1C:68:0D:C6:13:22:72:18:4E:08:02:83:EA:1A:79:F2:C1:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
78:6b:0b:9f:64:eb:db:54:b6:af:07:12:0b:97:ef:42:9a:a5:
1d:f4:36:26:1a:37:d4:7a:0e:7d:5c:60:37:4a:7f:88:6a:d1:
cd:dd:b0:aa:e5:36:b4:e3:b2:2a:9c:51:5e:96:ae:05:70:ac:
02:49:39:da:52:1e:ba:63:52:52:67:c6:e3:fd:2e:52:7e:dd:
d3:0d:86:1f:af:da:66:e4:3b:92:c8:f4:cf:66:fc:20:59:95:
14:2a:82:a8:c0:7c:a2:58:1e:17:ac:78:84:c1:01:b7:7c:d5:
3a:a9:a1:fa:18:c8:54:8b:9e:d4:a7:93:51:7c:93:fc:7a:b4:
55:c1:ac:d2:3d:2d:c0:48:29:4a:d6:16:67:a9:8a:b5:61:19:
81:00:fc:97:5f:5d:38:12:d2:d6:bb:3e:67:4c:25:0f:e5:1d:
ac:c0:5b:0f:ed:e4:5c:32:dc:ac:69:67:00:40:f4:b4:b5:4b:
95:f0:61:5d:85:8a:8c:7b:b0:86:b0:07:1f:8e:eb:82:53:60:
ce:80:0b:9c:db:8c:7a:5f:29:18:4d:f8:11:7e:98:23:20:9d:
de:66:1f:f5:54:f7:8c:20:bb:8c:a9:35:10:66:eb:ee:73:3b:
ce:79:1a:77:ce:8d:cf:9d:36:82:47:79:2d:10:ab:5e:63:49:
8a:6a:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:43:21 2026 by rpki-client