Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bdf0546-1572-40f3-92c7-5a06ce6af441.roa
File: 3bdf0546-1572-40f3-92c7-5a06ce6af441.roa (raw, json)
Hash identifier: Jl27bCnQKr7uTQahjjvTo+n17WR4/pnjEfXj7B+fDMs=
Subject key identifier: C0:0C:70:1B:98:B8:42:EA:23:5E:6E:48:82:96:74:2E:88:9A:E8:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 700FDC6B43DD51543700FF952869F28DFDFB3FFD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bdf0546-1572-40f3-92c7-5a06ce6af441.roa
Signing time: Mon 22 Jun 2026 02:40:27 +0000
ROA not before: Mon 22 Jun 2026 02:40:27 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0f:dc:6b:43:dd:51:54:37:00:ff:95:28:69:f2:8d:fd:fb:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:27 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=2ce9b42bd54ae34375d4c3379c9e741022e7f6e131fb9c33bc9f75dbfb7a3603, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:98:df:39:25:90:77:6d:23:d2:2e:2b:82:
63:71:4b:cb:d8:f7:9b:1f:a3:f9:40:d4:fe:a9:d2:
19:d7:6d:1a:67:9d:40:76:fe:d7:f3:ec:a8:32:bf:
85:70:43:66:4f:03:35:93:4f:95:c5:29:47:09:85:
74:b0:07:e0:17:6a:d3:5e:dd:0a:44:64:84:23:91:
a1:88:21:2f:6a:64:f4:40:15:f2:fb:18:34:1e:28:
e9:e6:65:4d:cb:de:bb:00:f2:23:90:33:37:b0:a5:
fc:42:79:05:2c:e8:a9:11:dc:d8:ba:6c:53:07:b5:
1c:ea:50:39:17:ce:ca:e8:97:e6:56:85:9c:35:a7:
04:81:72:d4:7e:46:b3:d6:67:e2:31:2e:c0:8d:40:
32:94:6a:c4:0a:b2:51:e1:62:3f:e9:53:a0:c9:f0:
f0:ba:c0:ea:71:8d:17:ab:f5:c7:3f:70:e4:e8:13:
6c:52:48:8c:ec:75:ed:c0:44:3a:c7:20:7d:9e:3d:
0e:e4:8a:4b:5e:d5:17:8e:23:43:7b:c8:bc:97:31:
15:57:f9:cc:61:95:34:b1:db:28:fc:76:0e:c0:b4:
f5:7b:09:f5:4d:30:37:8e:07:8e:6b:34:9c:20:1e:
4f:b0:51:61:13:de:2a:04:6f:de:af:76:28:a6:97:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:70:1B:98:B8:42:EA:23:5E:6E:48:82:96:74:2E:88:9A:E8:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bdf0546-1572-40f3-92c7-5a06ce6af441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:9000::/40
Signature Algorithm: sha256WithRSAEncryption
76:21:32:25:e4:3d:7c:85:5e:49:28:f2:9f:53:84:d2:2a:6e:
17:f8:b3:1c:a7:96:0c:a9:b5:42:49:da:05:b0:47:c2:0a:be:
cd:e1:2c:61:55:80:0b:1f:d7:d5:bb:95:ef:41:af:b7:b3:ea:
bc:89:af:e7:2f:43:fb:4b:09:43:98:fc:96:6e:0d:ca:19:8f:
0b:e2:c1:30:c9:e0:ad:e1:b3:43:ea:79:ca:1d:e8:d5:f0:dd:
32:15:ab:58:83:e6:48:ad:3c:03:b5:a4:b8:9f:5e:4f:60:2e:
73:df:d9:41:40:ae:32:8f:46:71:ed:89:af:af:56:9b:76:f3:
e8:32:76:d3:dc:0a:eb:d6:db:5d:33:77:44:50:81:b9:b8:4c:
79:0d:e2:1c:05:80:88:c8:88:17:a9:6c:3e:23:3c:c0:23:00:
02:cd:dd:01:9a:c6:63:df:af:93:bf:af:59:09:21:b2:26:84:
8c:d7:d3:ff:b8:50:d7:e4:17:8d:47:c4:c8:07:76:eb:e4:ca:
1d:da:04:91:d3:27:f0:a0:33:28:57:1e:ae:36:3e:bf:23:e5:
c7:89:ed:43:17:3a:4b:7d:7e:01:45:9a:2e:c8:21:cd:8b:30:
d0:f1:9a:50:a9:5f:db:d7:f9:d6:0e:19:63:09:92:a5:0f:c4:
f1:88:50:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:50 2026 by rpki-client