Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
File: 4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa (raw, json)
Hash identifier: pZqTsFO2dgupvDPxEzry18mpLSg5a5ULirtUYb+GHnU=
Subject key identifier: 0D:CA:0D:EE:5E:6E:8C:D3:52:53:08:2C:97:29:31:5C:D9:DE:D3:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64EB6521E5FF69DB8474C0A5B0DA54C2CA9616B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
Signing time: Thu 16 Jul 2026 00:30:12 +0000
ROA not before: Thu 16 Jul 2026 00:30:12 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:eb:65:21:e5:ff:69:db:84:74:c0:a5:b0:da:54:c2:ca:96:16:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:30:12 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=6a71557fc65f6e7e076ac26b07397c4066dd48a222aba36e078a0d7210458cf0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:9a:8d:6d:9e:d2:3b:01:db:f1:45:5b:49:
35:ae:79:50:1e:22:d5:5d:ba:2d:32:72:e3:26:0a:
a7:38:93:6b:98:39:2e:74:8e:a2:41:1a:49:51:47:
a1:01:3f:51:d4:0d:80:74:bc:c0:af:f1:16:73:41:
24:e7:99:d2:5e:5b:8c:50:2d:35:47:60:e9:e4:5a:
bf:b4:e4:08:03:8d:66:dd:41:40:42:57:09:11:ac:
18:44:be:fd:a3:eb:fd:3a:ef:9c:96:98:60:01:4e:
4d:91:94:a3:74:a9:60:0d:2a:fa:d8:59:fc:11:c1:
f5:c4:9c:ef:9e:a0:06:98:91:71:4f:70:8f:c0:91:
c3:31:33:27:ea:b2:ca:4d:4e:95:e7:00:d7:60:e1:
1b:4a:84:16:97:f0:1e:51:f9:fb:2f:5b:6a:d4:80:
c4:3b:df:e0:33:ef:b3:7b:d0:6c:75:bf:23:c9:c5:
53:8b:17:cd:c2:04:e6:0d:dc:e5:bd:38:5a:4a:1e:
5f:6b:46:0d:0a:7f:f8:da:9a:ca:f7:0f:e5:b8:9b:
25:88:a3:79:37:59:3e:e1:ce:b4:25:0c:79:cd:be:
6a:b5:20:f6:94:9d:68:19:a8:46:ec:b7:86:9c:cd:
1c:45:d1:8e:18:33:d1:ee:ad:7d:80:ef:84:cb:62:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:0D:EE:5E:6E:8C:D3:52:53:08:2C:97:29:31:5C:D9:DE:D3:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
82:bc:9b:73:84:3f:37:62:81:8b:c8:04:b8:d3:fc:65:bc:50:
40:8b:66:97:2c:b5:fe:bc:c1:c3:1d:42:61:d5:fd:da:f3:20:
40:58:7b:53:90:d8:16:fb:e0:f7:2d:4e:ef:08:43:42:58:bf:
ed:3b:11:3d:63:c8:63:32:ba:de:ec:f4:f8:67:bc:41:e5:1a:
8a:41:25:15:0f:0f:82:18:c2:96:51:ae:c8:59:fc:85:69:85:
4d:ea:0b:0b:22:50:ad:b1:fc:c7:49:f1:be:e3:25:d4:02:f2:
03:b3:45:5c:6e:94:4b:2c:32:e7:f0:0f:a9:18:aa:3a:dc:33:
b7:4e:62:3c:a3:49:98:fb:b4:53:39:04:82:06:ef:10:5e:74:
72:ec:dc:d8:4c:a6:de:64:03:38:0b:4c:3e:53:4e:60:1a:99:
08:eb:e2:14:3f:44:18:ca:91:7e:1b:f5:d0:1f:d6:4f:e1:e0:
bb:c5:de:8b:fb:25:ed:00:c6:d3:43:10:93:80:6b:0a:22:a4:
fe:08:6e:e7:7c:df:95:0f:de:f8:b8:80:a1:40:c0:d5:68:fc:
cb:1e:58:29:a7:33:ac:6b:8f:05:9d:d3:1c:b2:5c:b6:99:dd:
21:e3:66:42:ec:b1:d2:75:92:d5:38:6c:d5:85:48:ce:e1:bd:
f0:c6:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:48 2026 by rpki-client