Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
File: 3c844715-62ed-456f-9c5c-b7ee56a1e984.roa (raw, json)
Hash identifier: nzfTDlZZN0TSOharNI03RasN3yhpWOJpoPFPvjh2x9g=
Subject key identifier: A6:A2:E2:19:27:98:54:07:9C:13:EC:A8:39:72:60:27:EB:09:15:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E27C4BED6C960CFA4CF4F01C03D223BFF1E40B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
Signing time: Tue 21 Jul 2026 01:20:03 +0000
ROA not before: Tue 21 Jul 2026 01:20:03 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:27:c4:be:d6:c9:60:cf:a4:cf:4f:01:c0:3d:22:3b:ff:1e:40:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:03 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=ec87c6738615adf58a63081d9b99f10ebff07a1dd166e89bb84476a829f45601, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:26:ed:2e:08:49:ec:ec:1e:12:66:1c:7e:
89:e1:d4:e1:d4:2c:a3:dc:9f:7f:b1:01:85:2e:6a:
df:e8:e1:ac:8b:5e:0b:84:9a:74:16:14:6a:5d:83:
54:5c:40:c6:79:0e:14:1c:34:6b:38:c3:9c:66:e1:
75:c7:1d:29:90:8f:41:2f:c3:c1:d9:e7:ae:1a:57:
2d:b4:e6:88:a3:ae:1b:d6:36:76:4a:92:96:69:b3:
3e:21:70:05:dd:79:ca:f0:73:df:16:81:76:e5:ba:
4a:44:79:7b:0a:eb:65:70:a0:ee:b4:3d:b7:e8:88:
20:64:64:5a:6e:ee:58:c8:ea:df:98:cf:ec:53:9c:
41:5f:cb:10:d7:b2:cf:47:94:57:98:08:db:a2:e2:
b1:79:3b:4b:72:2c:4f:99:dd:9c:d3:9b:1b:1b:95:
f8:62:a3:7f:89:2c:86:c1:ed:14:8f:bf:9e:79:18:
be:34:fe:d5:47:a7:b3:b4:b8:65:c5:2a:12:d9:b7:
ae:1a:31:96:56:ac:ba:10:08:eb:5f:2a:1b:d2:86:
bd:a1:67:f3:68:d7:29:78:cf:6f:0d:4b:6c:f5:42:
41:0b:c1:1d:0a:8c:8a:45:35:e1:df:22:9e:0d:f7:
f6:13:7a:8a:97:6b:85:a9:54:7f:0d:50:1e:e7:56:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:E2:19:27:98:54:07:9C:13:EC:A8:39:72:60:27:EB:09:15:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:5000::/40
Signature Algorithm: sha256WithRSAEncryption
40:0b:60:57:a9:97:19:6e:6e:ca:e1:d6:9a:c9:a4:05:e4:fc:
c2:6f:6c:70:06:ef:01:cb:d6:62:76:9b:ce:a3:13:86:a0:ee:
ca:0e:23:96:b8:41:dd:fe:ce:9a:71:ef:a2:ba:e3:bf:c8:fb:
91:fe:7d:9d:df:53:67:c0:b9:96:d4:cb:c6:c3:d7:ef:fb:a6:
9c:b1:01:0f:d0:f9:47:19:f8:28:82:c8:72:37:e2:a0:09:a0:
ff:d7:ab:79:de:9d:92:18:cf:f5:c5:3d:7b:78:25:ab:3f:3e:
98:86:74:32:91:ee:56:cb:de:4c:3d:ec:0b:cb:2f:a9:f7:5e:
fd:eb:99:ff:2c:22:fc:1e:3f:f2:51:47:0c:a2:3e:9a:32:59:
e0:6a:80:ce:fc:72:41:ab:fb:2a:0d:e6:fd:48:6f:a4:be:03:
9c:02:7b:b5:44:d3:aa:37:98:f8:38:31:88:52:af:ac:c6:b4:
2e:33:62:e6:18:d0:44:a2:28:2b:a1:4f:ab:5f:37:55:74:84:
f2:56:7e:8e:bf:94:b0:c1:82:bd:bb:6e:c5:77:c7:ab:ec:f4:
17:6d:96:54:7d:d2:5b:e9:ba:b0:fd:80:31:83:57:d9:0d:c2:
a3:09:16:29:21:04:69:00:9f:8e:56:66:6a:9a:b6:2a:70:51:
e4:6f:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:16 2026 by rpki-client