Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
File: 56c31249-f32b-4fc4-a69f-07420913a101.roa (raw, json)
Hash identifier: KBPkQUQ5IMB4GeUtSqfpHKqqFaWcHi7+v09bY1TCkC8=
Subject key identifier: 3A:55:32:FE:18:E1:35:03:44:A7:34:84:28:51:16:75:65:01:13:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01D80B94F0B7E845CD5B3D7AD20D19B1AE6BB107
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
Signing time: Thu 23 Jul 2026 15:21:11 +0000
ROA not before: Thu 23 Jul 2026 15:21:11 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d8:0b:94:f0:b7:e8:45:cd:5b:3d:7a:d2:0d:19:b1:ae:6b:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:21:11 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=55c206cbc12b9487f670a720f7f6a84554f2cee49c4e1c20679cc860d2cdb43f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:e9:9f:0d:6e:f0:9d:a7:e3:e0:90:30:17:
1e:c8:05:9b:3c:a1:bd:df:5d:2d:eb:bd:62:84:f4:
3c:f6:ce:76:07:81:cd:00:84:85:d4:da:fa:ee:9b:
a6:da:ab:c4:0a:9b:ae:96:ac:47:ea:c0:97:70:f7:
3c:b9:e8:1e:e6:4b:96:cd:46:3d:a8:b5:1a:13:7d:
f7:7d:e0:49:db:8a:1f:d5:48:b3:1c:44:e5:50:34:
3d:cb:97:6f:08:1e:56:c5:f7:8d:52:e8:66:37:06:
68:e2:07:a2:78:b2:a7:a7:16:bf:35:0a:de:86:4e:
ff:fe:dc:30:5d:9a:8f:49:f4:44:09:e8:fb:d9:f7:
3f:c8:6b:03:fb:95:3a:e7:c7:63:dc:96:08:6d:3d:
21:ca:f5:61:77:f6:cc:42:51:f2:ca:19:be:02:cf:
e0:e1:17:20:a5:a9:99:cc:7c:68:bf:ce:88:53:d1:
39:f4:61:2a:c2:de:ca:ac:9b:be:f8:1f:79:4d:5a:
1c:85:69:40:e1:d5:ea:dd:d4:7b:88:45:77:1c:b9:
e9:52:a0:d4:cb:cd:03:a7:2d:da:d9:5f:a0:9f:11:
5f:36:ba:73:16:25:1f:0d:76:64:95:2b:3d:17:67:
13:aa:6e:33:7d:bc:18:ac:68:26:5d:53:2a:29:fb:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:32:FE:18:E1:35:03:44:A7:34:84:28:51:16:75:65:01:13:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4000::/40
Signature Algorithm: sha256WithRSAEncryption
43:7b:78:d2:21:f1:63:da:a8:9f:70:f6:1f:2c:bc:d1:cd:5d:
5b:27:9a:c0:7e:51:d5:ab:d3:a3:ba:6b:41:85:12:17:e7:b4:
24:b1:22:1e:a1:42:09:fa:43:46:1d:e5:ac:c1:87:7e:e9:ad:
5f:42:8f:78:77:3e:98:e8:3f:09:77:a6:50:6b:89:de:87:d1:
4a:8e:9a:c6:0a:ca:aa:68:ea:92:c0:97:f4:72:5b:80:ca:ae:
d2:a4:21:c7:6a:60:1d:d5:c1:1d:01:b8:d5:46:d3:0c:2d:9a:
8f:60:ba:88:70:5d:8e:36:cd:00:c4:ad:7c:9d:22:32:a1:c6:
6c:14:55:f0:a3:0e:40:75:37:0d:99:88:6c:6f:c3:47:9d:7c:
46:a4:e6:e0:f7:1e:0e:d5:c9:b6:91:7c:ea:ae:49:48:85:af:
28:d6:6e:76:56:17:c7:90:c0:92:b5:ab:56:3e:97:2e:f7:1d:
22:8f:6b:eb:99:54:49:a4:ce:78:b1:04:0b:7e:28:19:2e:0e:
cb:71:15:8a:93:d0:77:f2:7e:cf:5b:2f:e8:1f:5d:39:a4:2c:
0b:ab:34:87:57:ca:99:d1:ed:a4:4d:41:1d:95:88:8b:d6:39:
fa:e7:b1:5a:1b:73:c0:d9:a7:d7:91:9b:54:33:b7:61:d9:97:
c9:6d:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:40:55 2026 by rpki-client