Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
File: 53f71feb-77ff-438f-8d1f-e553194144d2.roa (raw, json)
Hash identifier: PlFD7u0C8x2K0Wr/08Cz0Gbl2yGTvND8ICDoClm90Wc=
Subject key identifier: B3:F6:C0:03:9A:97:B6:29:4B:2B:07:94:7E:5C:12:65:A9:06:49:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20D6DFDC65FCB45A15591C9687AF7D8AE7EBE801
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
Signing time: Thu 23 Jul 2026 15:20:15 +0000
ROA not before: Thu 23 Jul 2026 15:20:15 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d6:df:dc:65:fc:b4:5a:15:59:1c:96:87:af:7d:8a:e7:eb:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:15 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=de090ec6c806932124adc20c0e24f1b8195ff6f8648a493653c301a92e159acd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:7e:5c:00:8b:53:b2:36:c3:d7:74:39:72:
0f:b8:d0:e5:b6:60:70:08:87:37:9f:41:45:1c:63:
eb:c0:33:69:0c:09:bd:f6:c3:d8:34:cd:a6:ea:5a:
0b:4b:b4:a9:d7:06:96:ba:e8:92:71:4b:c0:5f:db:
0a:98:87:61:35:69:9e:03:1b:18:e6:4e:ec:00:15:
c1:c2:a1:dc:6d:9b:c2:63:b1:17:e4:5a:94:2b:10:
10:bf:01:7c:19:30:e6:8a:19:ff:d3:15:29:f7:ee:
73:eb:c7:33:7f:b2:a7:75:dc:68:98:ed:09:23:f2:
b6:91:1e:c8:90:17:69:da:9c:d8:37:e6:c1:1a:16:
31:7a:68:e3:8c:f0:ac:4a:ce:ea:3c:cf:5f:28:90:
6d:3b:67:87:c7:43:f3:32:bf:43:c5:13:23:ea:ca:
4c:cd:41:ee:4e:76:b7:59:13:1c:ea:78:f5:f9:19:
ff:d3:2e:90:7b:f7:47:7e:69:db:d8:9c:ba:b2:7c:
8f:54:d7:45:69:08:64:c5:f6:f4:60:5f:04:68:c5:
28:e4:3e:5e:2d:e8:e5:53:2c:06:f1:4d:89:10:3d:
fd:ee:65:cb:ce:ce:95:29:b1:a1:9e:74:0a:38:1d:
b6:73:fb:1e:b6:32:7d:e0:8a:2b:c2:3e:17:86:d9:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:C0:03:9A:97:B6:29:4B:2B:07:94:7E:5C:12:65:A9:06:49:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4020::/48
Signature Algorithm: sha256WithRSAEncryption
24:42:e6:de:14:b2:be:f2:34:a7:97:0f:31:9e:f8:3b:aa:a0:
a7:4c:f3:3b:d4:12:16:ed:16:22:b2:68:86:fe:eb:d1:66:36:
38:5f:b1:c3:73:20:fa:cd:1d:34:44:70:45:60:9c:ea:f0:46:
05:e4:60:17:ea:d6:b9:9a:b5:fe:df:88:e3:db:51:27:38:e8:
aa:bf:e5:ea:19:ce:07:51:9f:78:dc:bb:1d:14:04:cd:67:b6:
10:c1:4c:bc:aa:1c:14:cc:f5:8b:1f:91:34:08:6f:38:9a:e7:
65:0c:a0:0b:47:d0:7f:78:19:39:cb:a6:14:51:ae:05:a1:c6:
b9:dc:04:2b:5e:0b:7d:fd:1d:4f:b4:b6:0e:a0:6b:35:d4:ad:
cb:c5:7e:02:b7:ec:58:03:d0:86:e1:e2:2a:82:b5:38:7d:9a:
70:55:61:95:04:34:b4:5c:c9:e2:b0:49:63:a2:5f:46:9b:b5:
81:d0:08:c4:5f:e0:6f:80:9f:c7:44:02:ba:63:ab:55:15:d1:
fa:17:d4:9e:2d:a3:d7:78:37:eb:30:dd:a1:a3:35:e1:59:77:
60:97:4a:be:5d:d1:ad:d8:6d:59:ec:b2:77:23:d8:aa:1b:df:
04:31:df:58:ff:7a:dd:61:96:bf:85:28:93:ac:19:f4:d6:00:
01:b1:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:01:44 2026 by rpki-client