Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ed813be-ccca-4959-8fb1-925830da32a8.roa
File: 4ed813be-ccca-4959-8fb1-925830da32a8.roa (raw, json)
Hash identifier: f06dCAMocWCKTSjTwGj+amHs+ghPJFnFTyeH9CLwA6I=
Subject key identifier: 63:6D:0A:4E:1A:0D:9B:51:6C:72:BA:64:9B:5B:A7:62:A3:A8:EA:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BA32A4C11B4131042A447D9420754033DF93875
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ed813be-ccca-4959-8fb1-925830da32a8.roa
Signing time: Mon 22 Jun 2026 02:40:06 +0000
ROA not before: Mon 22 Jun 2026 02:40:06 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a3:2a:4c:11:b4:13:10:42:a4:47:d9:42:07:54:03:3d:f9:38:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:06 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=9b3443ddba8750e83b646bf18d1663299e9bf43912d2d9c9a11c3b425a0d847f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:76:6a:51:8a:88:d4:b6:f9:99:77:e3:fe:
31:ad:b6:b2:57:71:b4:33:61:94:9f:70:20:1e:28:
67:6a:be:a1:f1:32:b5:d7:83:2b:ee:88:fe:70:8b:
37:3b:e9:fd:85:01:e2:2b:8c:a7:60:56:2d:62:fe:
f4:46:d6:95:d9:9f:8d:68:8d:e8:b3:b8:20:07:df:
f5:03:52:76:12:dd:eb:44:dd:f6:30:0b:8e:0e:76:
80:2e:4f:12:dc:0e:86:d1:d3:45:c5:df:b7:a3:b0:
a6:f2:6c:23:dd:a3:bc:56:81:84:6c:08:eb:c7:c9:
54:42:bf:40:9b:5f:85:d0:52:c6:fc:5d:f1:28:7f:
da:cc:f0:02:c3:2f:b9:b2:39:9b:5b:f6:d2:87:bd:
e4:54:cb:a9:2b:8f:1b:b2:70:a9:ab:71:64:86:b2:
0c:ef:11:4d:6c:fc:0c:be:8c:bd:00:87:ac:ec:f2:
9f:a8:ef:f4:8f:93:df:c5:88:9d:1c:f8:f4:c7:38:
ba:bd:ff:d9:36:bb:8a:a1:9f:d7:1a:c6:77:2d:d8:
81:96:54:d7:66:e1:43:9d:68:76:1e:c6:0c:93:68:
36:ec:2f:5b:54:bc:d2:b3:99:de:ca:35:be:65:6f:
30:27:a7:18:94:60:4e:e2:9d:e8:8e:c3:85:2b:c8:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:0A:4E:1A:0D:9B:51:6C:72:BA:64:9B:5B:A7:62:A3:A8:EA:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ed813be-ccca-4959-8fb1-925830da32a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:a080::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b8:ac:3d:ab:4c:dd:2b:69:08:63:ed:5c:65:7b:ae:26:ca:
02:63:a2:d9:d2:46:ea:2f:4d:56:39:81:57:ca:9e:d5:78:c3:
d9:95:e6:be:56:b6:16:32:4b:8f:00:3a:50:b4:33:55:84:e0:
5a:84:d8:e1:f9:25:01:1e:a2:10:38:23:4c:db:d4:f7:e5:21:
98:26:bf:7d:bb:c2:94:3e:7d:c8:2c:a2:c7:3b:0a:26:31:6d:
b2:6c:bb:4c:59:c8:55:3b:0f:8f:13:cc:9c:07:af:7e:73:19:
f2:fd:8c:21:94:2e:98:62:44:4e:d1:cd:c0:17:29:6c:f1:fd:
ad:4d:d8:b7:ba:a0:49:1e:58:4b:f0:63:88:06:98:69:50:27:
80:56:f8:c1:56:71:8d:01:4d:d3:08:05:b0:e3:e8:ad:28:2a:
90:e4:b0:97:6e:dc:1e:8f:4e:a3:dd:c5:97:0f:02:63:53:4b:
4d:14:b1:92:d0:70:0c:af:42:9c:b2:b9:a4:78:3f:5a:5f:44:
1d:47:16:7e:58:d6:cc:b4:52:68:38:69:3e:84:7f:8b:ce:af:
fa:51:49:03:7d:27:0f:a6:cf:19:82:58:42:ee:8e:c4:f7:0a:
a1:94:bd:55:48:ba:83:20:ee:7c:db:34:96:23:14:3b:a1:6e:
5d:8f:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:22:42 2026 by rpki-client