Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ab6f074-8ca2-44ae-91b9-05fcd2ef1c5e.roa
File: 3ab6f074-8ca2-44ae-91b9-05fcd2ef1c5e.roa (raw, json)
Hash identifier: 7ryUam6l0bivXsftmrAro220hsgLd7GcK3OTN050S0A=
Subject key identifier: 8F:B4:9D:6E:D4:22:D2:EB:E4:AA:BF:45:52:04:73:5B:B4:FF:24:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E3564D787DB21D90F0A6BFB589AA67DF7AC4E66
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ab6f074-8ca2-44ae-91b9-05fcd2ef1c5e.roa
Signing time: Mon 22 Jun 2026 02:40:24 +0000
ROA not before: Mon 22 Jun 2026 02:40:24 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:35:64:d7:87:db:21:d9:0f:0a:6b:fb:58:9a:a6:7d:f7:ac:4e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:24 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=188cadde64258a41348a9e03e1231bd6856b6687d75c4d42357e9af4d85f638e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:86:ad:14:15:2d:c5:bd:77:c1:21:19:da:
42:a1:75:30:3d:f4:29:91:e3:39:36:06:d5:ff:f2:
02:7b:99:35:84:20:5a:c5:27:22:82:0f:a5:da:7d:
24:a6:4d:6b:a7:88:30:d9:e2:77:cd:b8:46:03:ac:
56:39:88:62:65:e2:2d:7e:5e:a6:fd:6c:e1:22:f2:
d8:c2:f8:8d:09:29:75:17:9a:9c:c0:57:f6:f5:fe:
74:59:e1:da:07:98:d1:99:98:2b:90:d4:b1:e8:8c:
46:89:f3:1c:7d:29:98:76:64:61:ef:36:c9:55:ae:
ad:dc:29:63:32:03:0a:54:ef:2a:52:be:03:71:c8:
07:87:42:34:12:2a:0a:aa:8c:0f:25:2a:6a:83:68:
3f:53:6a:38:93:c0:ee:f6:20:c3:4a:ab:84:1d:ff:
8d:45:a3:b1:bc:12:32:4b:8a:89:23:d6:33:c8:d0:
a8:4f:c9:b3:50:50:c3:ca:25:01:37:0e:3e:62:41:
b4:55:7e:24:ec:7a:db:6f:dc:0f:02:1d:e2:7e:62:
81:fd:2f:af:07:6e:d3:ce:9f:92:36:20:38:f3:7d:
b1:4b:80:4b:ad:16:a3:b6:b7:ed:0d:fa:d8:f7:6e:
bf:21:a8:19:af:89:c1:3a:d4:85:98:a8:9f:cc:dd:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:9D:6E:D4:22:D2:EB:E4:AA:BF:45:52:04:73:5B:B4:FF:24:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ab6f074-8ca2-44ae-91b9-05fcd2ef1c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:72:bd:f3:ea:32:7f:9c:65:52:ed:79:f5:5a:22:8f:46:66:
17:16:f9:44:f3:65:88:24:3c:be:94:4e:ff:5b:f0:43:b6:1f:
04:80:fe:9b:ec:56:7a:8b:02:75:9e:5f:61:7e:81:49:98:f2:
9e:0b:f9:7c:bd:80:ff:7c:a7:83:db:4e:b3:77:47:26:eb:e0:
06:71:05:5b:5d:71:25:14:46:a3:1b:1a:c4:1d:27:a7:b6:b7:
b6:76:a8:99:64:14:08:bd:42:63:27:98:15:3d:05:7e:78:61:
d9:81:4a:89:8b:aa:88:28:54:7d:ab:09:51:3b:a3:55:c7:a7:
26:fb:3f:23:bc:de:04:f0:a9:4a:df:35:91:76:85:27:2c:e6:
d6:71:48:81:e2:1c:20:13:a6:5e:2c:6e:f8:4c:7e:0a:c8:fe:
ea:1b:ec:15:a6:9e:34:a7:f8:c2:07:f9:79:49:69:56:fc:f2:
d0:11:80:42:be:bf:5c:04:44:a1:b0:f6:48:dd:04:47:2f:7d:
f7:6d:4f:c9:fd:6c:5f:88:4a:5d:84:2c:11:14:8a:b6:41:29:
db:24:7f:db:dc:52:d6:89:74:bb:c3:8b:1d:36:08:cc:66:dc:
22:51:34:31:7e:b6:e8:b2:59:d6:18:e2:69:e4:d1:c4:da:ba:
f9:7f:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:33:02 2026 by rpki-client