Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa
File: 4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa (raw, json)
Hash identifier: FI+y7w1iCv0BZoZlSlXDCJvdlX83x3HtIv4qK8JPhFw=
Subject key identifier: 49:36:5B:18:71:B7:1C:20:07:C6:73:06:71:9E:6A:D6:C2:88:CE:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57E0D974042671007C6A3BBB122978D2065E12FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa
Signing time: Mon 22 Jun 2026 02:40:10 +0000
ROA not before: Mon 22 Jun 2026 02:40:10 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e0:d9:74:04:26:71:00:7c:6a:3b:bb:12:29:78:d2:06:5e:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:10 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=52934ab30a5c9221ab00bb3ed05efb979b834446c8b805710d69b4049a77c2ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:75:23:1f:b3:f9:8a:a2:e7:a3:dd:be:b5:
c1:fc:ad:dd:56:e7:a2:19:54:82:9e:5e:af:92:15:
fc:70:8d:20:8b:71:c9:5c:f5:0e:f0:b4:db:bf:aa:
fc:e6:a9:9d:9c:83:bd:d6:a9:87:fb:61:4b:ed:bb:
92:72:62:af:72:08:a0:3d:ff:29:50:77:8a:de:da:
bc:38:cb:b8:53:fa:04:a0:8d:98:be:b9:3b:fa:46:
fe:90:d6:26:31:7f:cb:04:51:94:e8:95:55:77:be:
18:b0:c9:05:23:df:00:d8:1a:4d:fd:88:1f:61:31:
d3:cd:d6:39:7b:ac:b5:26:60:f9:49:23:b8:9f:8f:
03:23:42:fe:d1:c3:df:9b:ad:47:61:70:31:31:c9:
34:58:81:a4:aa:e1:13:7a:44:8b:df:b1:9c:ff:d7:
62:70:d2:dc:d2:83:46:46:48:8a:9d:29:c4:5e:b0:
05:3f:5c:0a:3a:17:90:8e:b2:d7:b2:a1:ab:b0:c5:
77:08:11:6b:f1:ff:e9:62:e9:2a:75:0d:62:06:cf:
cb:64:e6:e5:79:a9:4e:7d:66:fe:4f:1f:9a:f3:6b:
95:59:44:61:19:f9:bc:60:81:a2:7c:07:f3:fb:4d:
7b:2c:9c:c4:51:6c:ab:0b:57:51:4e:6b:ac:0b:fc:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:5B:18:71:B7:1C:20:07:C6:73:06:71:9E:6A:D6:C2:88:CE:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c080::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0e:35:0a:1f:9b:37:41:2b:c3:d5:6d:7b:3e:69:16:a8:01:
53:a6:ea:61:47:a2:d6:3f:04:f5:cf:2d:2c:c8:fc:90:c7:22:
0b:24:eb:b0:ed:22:88:f2:be:af:65:bd:2a:a5:86:fd:83:52:
97:43:20:cb:b0:28:fe:93:7f:c0:cb:bc:b4:5c:db:d2:1d:ab:
97:81:3a:14:93:35:64:0d:86:07:dd:0a:4f:33:73:e8:2e:c5:
00:e5:6f:92:82:64:a4:ec:aa:41:f8:7d:b2:11:ca:c1:47:88:
d2:a0:34:61:1f:c5:f1:a6:3b:37:69:43:1b:e2:84:3e:3d:b7:
6d:33:40:1f:56:5c:97:9a:2a:24:a8:ca:b1:3f:d1:89:73:28:
dc:ba:0c:cb:30:ab:80:8d:81:2c:67:75:34:37:09:76:8c:19:
07:31:84:7d:6d:a8:fd:85:80:ff:3a:01:04:9b:24:25:3c:4d:
3d:f1:29:f0:2f:f8:ca:03:b8:b8:02:9c:9a:5b:c4:b4:52:17:
0e:af:0c:03:a3:a4:55:ed:b4:5d:6b:26:df:eb:f4:c7:21:be:
43:45:6a:d5:14:63:d5:73:f9:f4:a0:f6:9d:3c:ce:bb:98:c4:
99:00:58:f6:8a:df:16:ab:1e:ab:5f:1d:4c:b2:c5:09:3c:01:
e8:cc:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:54:50 2026 by rpki-client