Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
File: 56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa (raw, json)
Hash identifier: 9yAJa5OxL4dhoTBhYeVO3IA+Kt6+Sl3gfWFsok1iPXw=
Subject key identifier: 19:42:71:7A:F0:D3:58:DD:DA:2F:6B:C4:66:80:A9:4F:BA:AD:8F:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50AF27E902FF361879D7153B913260201BB173B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
Signing time: Tue 21 Jul 2026 01:20:10 +0000
ROA not before: Tue 21 Jul 2026 01:20:10 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:af:27:e9:02:ff:36:18:79:d7:15:3b:91:32:60:20:1b:b1:73:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:10 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=51ff28fd26196c64656ceac8e0a99f2a3f576b3b0bae844f7d708c4a22c3d3d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:bb:56:dc:da:a8:46:fa:cc:e9:f5:43:00:
1d:d2:9e:8a:1d:f3:8b:fc:bb:a9:26:fd:f1:e7:d8:
2d:ee:0f:22:25:62:1f:2d:78:8f:63:b5:87:c7:fd:
e2:d8:a1:8f:69:5f:35:ef:10:7d:30:d4:97:f2:1d:
71:f2:1a:5d:01:13:8a:2c:14:e3:5f:58:10:1d:1a:
95:04:9d:1e:c7:bb:9b:9f:e7:35:d0:d2:72:33:a9:
5a:3a:f2:fd:6c:cf:3f:b4:3e:64:7b:7b:b7:c0:ca:
ff:dd:35:15:6c:09:bf:e0:24:5b:c9:77:b9:8a:75:
25:ac:df:1a:7f:16:7c:e8:74:25:c1:a2:b2:18:a2:
a1:6c:ee:54:b7:d5:14:85:0e:27:02:f9:1c:b4:70:
29:97:64:b4:dd:ed:76:cf:3f:aa:9e:1e:54:14:a7:
65:cc:64:76:f5:59:7c:53:5b:07:0d:8a:28:23:35:
c1:f2:f0:39:06:f2:aa:1d:d9:3f:b6:3e:43:4a:e3:
ad:17:2a:d6:25:c3:d1:30:f5:8b:99:21:92:a9:e7:
70:6d:a3:2f:99:0d:c4:f3:73:c2:f4:1f:2e:93:73:
c1:20:a7:0c:71:eb:ae:26:73:17:7e:34:4b:0e:21:
b6:29:d3:1b:d2:34:82:08:45:16:e3:af:b0:e1:91:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:71:7A:F0:D3:58:DD:DA:2F:6B:C4:66:80:A9:4F:BA:AD:8F:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
52:f5:08:2d:2f:4d:bf:b5:62:f4:3b:63:44:0b:69:81:8a:c2:
45:10:f0:96:d4:52:1c:34:bc:b7:7b:2b:eb:20:85:29:ff:d9:
9a:35:6f:12:06:29:35:4b:5f:6b:1b:72:af:48:5e:77:c3:69:
c9:87:cc:20:92:77:10:70:8a:c8:c4:e6:72:7e:c4:3b:bf:63:
af:a6:25:19:61:61:8f:03:64:82:2a:72:25:95:30:ab:20:d7:
05:1a:36:04:83:1b:85:81:61:6f:51:b3:51:73:1d:f3:71:42:
1c:7f:09:be:56:61:33:78:b2:9b:9c:fe:dc:8e:ce:0a:45:fb:
5d:34:f0:6e:68:b5:6b:c5:96:6f:9c:9c:a9:a6:49:b6:5e:92:
88:fb:a6:c0:b7:a6:fe:6f:9d:59:4c:b2:95:a0:5f:f8:3b:b6:
d4:e8:7e:b3:a5:99:78:50:b1:51:02:a4:bc:92:7d:16:cd:16:
ed:36:25:52:ab:36:04:bc:a4:a7:1d:4b:f7:bc:43:0f:5e:b7:
f8:87:90:60:a6:49:ba:6a:2b:c0:07:c4:45:e6:cb:b2:fc:60:
35:f5:33:c8:c1:e2:51:f3:9c:4a:c5:6f:24:a8:87:38:ba:71:
b9:3a:53:d4:6b:88:5c:0b:61:7b:08:6a:aa:43:82:47:cc:8f:
5b:85:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:04:46 2026 by rpki-client