Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
File: 492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa (raw, json)
Hash identifier: Xt8G0y7emYbttdPSs3wmxjJ2zoU8y31J/TjLLoqgMRg=
Subject key identifier: B2:F4:BF:29:BA:51:C0:70:F4:0A:93:64:71:F7:CC:89:BD:EA:B7:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 390C9D412CB35FDAE36F9B363C977D0EE2608909
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
Signing time: Tue 21 Jul 2026 01:20:36 +0000
ROA not before: Tue 21 Jul 2026 01:20:36 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0c:9d:41:2c:b3:5f:da:e3:6f:9b:36:3c:97:7d:0e:e2:60:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:36 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=0cee5076ae8ff95b598971b5ffbf35fc7bcc29e85ca0307b9bc5cc9a586f8445, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:61:98:5d:7c:24:3f:ea:03:23:2e:ca:12:
16:39:b3:70:55:5d:ae:b8:d0:1d:8f:f1:2c:ec:8e:
e9:68:15:66:03:57:35:b5:37:e9:1f:80:53:64:b8:
76:b1:59:f8:39:e3:2b:38:35:d3:53:52:1d:da:5a:
b0:88:c0:6f:db:81:78:d1:55:42:e5:b8:3e:cf:bd:
d7:00:68:f3:c6:96:f3:4a:39:07:5d:69:62:6a:20:
e8:5e:c3:09:f6:10:70:2d:7b:1f:6b:b1:b0:cb:9c:
38:41:c6:11:71:f3:b9:09:cf:c2:e8:25:5d:d9:89:
2a:77:28:2d:27:16:bd:33:5f:95:59:a4:98:6f:63:
4f:95:5d:a9:02:ad:60:bb:a9:ee:ea:64:9f:00:9c:
98:56:00:40:09:e0:71:d5:a2:53:28:ab:5d:ae:42:
45:68:c8:39:31:e4:2c:fc:0f:55:e8:af:46:a2:a1:
84:34:2c:d3:76:09:e0:e1:24:4e:a9:b8:4b:7c:cf:
d4:f3:7d:ca:20:46:a6:46:27:d5:89:8f:43:7b:6d:
41:bd:6d:1f:82:07:2b:0e:45:92:a5:3a:26:75:a3:
ac:da:3c:30:dd:8d:25:67:1e:61:6b:65:ed:93:20:
46:a6:58:9d:fc:e5:e9:d4:ef:47:70:e0:9e:23:f4:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:BF:29:BA:51:C0:70:F4:0A:93:64:71:F7:CC:89:BD:EA:B7:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:2080::/48
Signature Algorithm: sha256WithRSAEncryption
5d:76:be:38:ce:ac:e5:c9:b2:5b:fe:34:5b:c8:74:b8:1b:57:
05:d7:16:65:c6:c0:09:df:60:ba:4c:a1:bf:ea:f1:c9:e6:ad:
13:90:41:b9:c9:b3:7b:a5:8a:01:68:6d:56:78:5b:78:04:d8:
37:0a:9e:0d:4d:91:d3:c4:f9:11:a5:a0:00:62:19:06:0c:c0:
1e:60:8a:cb:d3:d0:d0:a0:bb:e2:e4:c8:31:e6:e2:b8:8f:23:
54:d4:07:63:aa:70:46:f3:fc:fa:22:fe:11:fb:79:fc:3d:83:
f9:03:47:c3:d7:86:e7:27:9f:9e:f5:f3:d9:df:70:48:2a:82:
16:c0:e3:b6:8e:7b:d9:4c:8f:c4:fb:55:4d:d1:55:4f:fd:15:
7d:c3:42:e3:5f:cd:67:18:7c:45:9a:88:e6:e0:1a:f3:6b:56:
0b:0f:91:22:5d:62:1e:47:03:11:de:3b:45:ca:b6:16:35:66:
4a:4f:1a:da:e8:a0:0d:d1:48:25:f8:ca:3e:e2:bd:6c:df:4b:
84:49:fe:e3:64:26:a8:e8:46:ec:29:af:6e:54:de:bb:44:9f:
fa:6a:1f:6e:70:27:ec:73:96:0a:39:06:83:b6:7a:5e:eb:7d:
19:38:31:f1:8c:91:34:4d:01:36:1d:ed:22:3a:1e:b0:20:4e:
2f:0c:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:59:04 2026 by rpki-client