Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4d03f6d9-094a-4f2a-aa7c-73e66047c2a1.roa
File: 4d03f6d9-094a-4f2a-aa7c-73e66047c2a1.roa (raw, json)
Hash identifier: eBn1UjxL3e1RO+a3AWHp8wYKWd9IavB0WdKwLMt9HgU=
Subject key identifier: B7:9A:50:C2:FC:3A:D8:4B:E6:9C:11:D8:A9:DC:C6:41:71:1D:F6:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06230D36511D25B5BF7924D6235ED6A1E35D3BB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4d03f6d9-094a-4f2a-aa7c-73e66047c2a1.roa
Signing time: Thu 23 Jul 2026 15:20:10 +0000
ROA not before: Thu 23 Jul 2026 15:20:10 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:10c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:23:0d:36:51:1d:25:b5:bf:79:24:d6:23:5e:d6:a1:e3:5d:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:10 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=fb178a9f14829cc0da90dee34168535bdd31bb81e73b76b75b9e8b530727dac2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:32:d4:19:56:25:c1:15:b0:4a:f4:2e:7c:
61:68:dc:e8:8f:86:35:49:0c:75:06:47:ce:e4:7a:
74:29:64:71:d2:ea:29:e3:fe:c0:80:fb:1e:c4:b3:
a2:4b:88:95:02:83:03:58:1e:c4:88:27:c7:24:f9:
05:30:c0:e1:a8:c8:76:fa:c6:b4:dd:8f:c0:fa:9b:
47:f4:b4:63:c3:aa:1a:24:73:e3:46:cd:8b:19:58:
93:84:dc:30:f3:48:fb:79:9c:fd:b6:d4:3e:b3:99:
21:4d:b0:9c:87:2a:a8:48:8a:df:5d:ab:cc:d7:4d:
3b:0a:57:cb:9d:e2:4f:4a:d2:ed:df:6f:94:74:f0:
f1:a9:1c:f5:81:04:47:28:f5:12:a1:4f:af:6f:57:
83:e3:6a:5c:15:da:1a:90:93:69:fd:c9:b7:f8:79:
d5:29:63:89:14:5d:0d:08:53:25:86:ce:af:28:6b:
df:ad:00:4a:d5:ea:01:21:be:99:77:00:9c:3b:db:
52:b5:0a:7b:78:ca:33:50:f0:d8:33:9b:24:72:8c:
cb:67:db:c8:00:d0:e3:b5:02:6b:e2:6a:4b:f1:88:
df:06:dc:c2:a3:99:c7:1e:f6:25:66:c4:e5:fb:db:
75:41:9d:16:29:0c:90:6e:e6:ad:51:05:58:21:5e:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:50:C2:FC:3A:D8:4B:E6:9C:11:D8:A9:DC:C6:41:71:1D:F6:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4d03f6d9-094a-4f2a-aa7c-73e66047c2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
ae:c7:22:ef:ed:32:01:9c:a7:cf:cd:44:dd:2b:dd:78:6b:a6:
b3:5f:f8:f4:ea:28:fb:71:7b:29:bf:0a:4c:cd:99:b4:10:e9:
40:36:64:8a:8b:36:41:a4:c7:98:9f:60:1b:11:2b:36:0d:a7:
17:60:f3:dd:55:f8:dd:6d:1b:c8:df:2f:34:fb:20:02:7f:23:
7c:c4:33:0e:1e:f6:99:8f:0d:6b:83:e4:1a:5e:9e:57:b5:6c:
5c:69:61:51:7c:ac:41:bf:ed:a8:0a:46:10:f2:f9:da:89:66:
b7:cd:cd:67:11:6d:69:93:a6:43:57:02:c4:78:fa:ab:7e:aa:
96:cc:12:d2:99:a6:a7:4e:4a:c3:ba:97:0e:80:77:1b:ca:83:
8b:47:c3:73:a3:ff:1d:00:3c:33:8c:a1:b4:5a:d3:6b:ea:66:
cf:30:3c:54:e7:4c:93:b4:75:71:41:f9:d4:6c:18:11:d7:72:
80:30:0e:7b:10:43:a7:1d:14:eb:37:79:38:38:30:a2:4b:1f:
8b:2a:f4:01:93:cc:6d:8f:18:ab:0b:2c:cf:cb:4e:81:a7:54:
58:10:e7:e0:bc:51:9c:24:14:82:63:0e:ab:e3:6e:77:9b:17:
93:4a:99:fe:c6:44:b8:c7:f5:af:b9:47:94:a8:5c:c1:c5:1d:
cd:4d:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:34:38 2026 by rpki-client