Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47336cf4-a08c-4ca2-ab04-56ed84ff8f7a.roa
File: 47336cf4-a08c-4ca2-ab04-56ed84ff8f7a.roa (raw, json)
Hash identifier: i1U9De1VRalVXm4RzgJS4kor2E2VxMTAJRBXoXfN9PI=
Subject key identifier: 1A:3F:34:04:60:09:1D:1B:D3:F4:52:10:A5:AE:84:D8:5E:4C:25:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 148FD635DF963CCDEBAFF32461162E91F8B21941
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47336cf4-a08c-4ca2-ab04-56ed84ff8f7a.roa
Signing time: Mon 22 Jun 2026 02:40:29 +0000
ROA not before: Mon 22 Jun 2026 02:40:29 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8f:d6:35:df:96:3c:cd:eb:af:f3:24:61:16:2e:91:f8:b2:19:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:29 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=c38015ddea079636c0a7db1a3704660fefdebd4374e90eff63031cd20e7d7142, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:8f:3a:6d:0d:4b:a4:fa:e9:8e:25:12:59:
72:62:4e:d0:dc:db:c8:b7:1d:f5:7d:66:a0:33:2c:
aa:cd:1d:76:a7:50:f5:4b:5a:82:cd:de:a1:f8:31:
2c:54:3e:41:54:2b:41:5d:f4:93:56:e2:ee:96:2b:
50:a9:c2:c6:3a:4b:31:98:ca:58:84:6d:ea:8b:95:
c7:66:75:29:84:9d:1e:f2:5f:42:8a:98:50:72:d1:
c9:b0:e7:2d:70:d3:38:41:8b:c8:d4:7a:2e:9a:bd:
82:3a:9f:f3:60:d1:30:36:0e:e2:d6:8b:88:4b:ca:
2a:9c:6e:c4:25:bb:6c:c7:24:44:66:34:08:e9:01:
6e:1e:94:38:7b:b9:27:66:26:e0:5c:49:b9:4b:85:
a8:83:e0:75:49:19:83:c5:1b:ee:5f:ea:ab:50:b2:
88:3b:72:61:d2:ff:12:02:77:69:ee:e5:3b:4c:3c:
02:b6:2b:b4:c0:55:c4:fd:f3:05:61:0e:06:84:d7:
b6:4d:54:48:88:90:85:b8:10:2c:8b:a8:82:b4:96:
7e:f1:23:de:96:f7:54:78:04:d8:b5:2c:0d:50:6a:
88:87:b1:13:d7:82:e5:0b:d8:b0:f1:06:78:88:8b:
32:01:64:c5:89:db:a2:a5:37:f9:a3:5d:6b:e5:fb:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:34:04:60:09:1D:1B:D3:F4:52:10:A5:AE:84:D8:5E:4C:25:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47336cf4-a08c-4ca2-ab04-56ed84ff8f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8080::/48
Signature Algorithm: sha256WithRSAEncryption
50:b2:6b:de:74:a5:6f:c1:39:09:a5:bc:42:b5:ed:9b:c8:3e:
e6:24:5e:29:b0:b0:ed:78:ad:62:f5:65:f3:9b:93:a7:7b:de:
b1:70:a5:ee:32:c5:6e:9a:38:6c:56:64:c6:a1:64:6f:67:1e:
99:fe:fa:92:97:6c:27:21:48:cf:45:29:fe:ef:a5:98:34:5f:
8b:03:39:55:6a:28:02:26:27:ed:99:ea:0f:93:5d:18:ec:d3:
80:d3:37:b7:9e:dc:91:a3:20:ae:7c:f6:4b:82:14:79:8e:08:
81:1a:98:1d:b8:bc:bc:7d:3b:5d:7a:22:16:86:10:e5:2d:82:
0c:34:76:4a:e9:2d:8b:1d:42:fc:cb:ac:fe:38:0b:d0:34:70:
04:74:8d:3b:9c:5e:40:ca:9d:e7:09:1e:43:40:fd:ee:86:8d:
86:d8:49:03:60:2a:3b:7e:a9:62:19:ba:7a:12:0b:04:f1:8a:
1b:e0:c1:2b:4b:fd:b4:07:a3:4d:58:30:56:8e:41:c8:ae:94:
11:85:77:ac:1f:7c:06:8c:dc:88:cc:9a:d0:dc:5a:9a:21:bf:
de:12:2c:3f:4b:c2:1f:85:0c:23:d0:c4:a2:f9:bb:7f:d4:c9:
ba:b4:d8:7a:e2:be:79:39:71:a2:d9:2a:a9:1d:15:36:7a:69:
ad:2e:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:04:48 2026 by rpki-client