Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
File: 5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa (raw, json)
Hash identifier: TepgekUNExi4Hd1yjNB5jXl1MCWYjSZ8Z0/zIq/oQg4=
Subject key identifier: E7:F9:65:68:9B:72:59:29:FC:28:AF:CD:67:01:07:1C:C1:9C:A7:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DCB1051942EC6AD1BC80511779CCEF0D42FDD2B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
Signing time: Tue 21 Jul 2026 01:20:31 +0000
ROA not before: Tue 21 Jul 2026 01:20:31 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cb:10:51:94:2e:c6:ad:1b:c8:05:11:77:9c:ce:f0:d4:2f:dd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:31 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=62029f37a5c902d37d47bcc872eed5e8f84037fc1b93d85774ce5712dd5005af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:e6:91:ae:8d:e5:0d:bb:d1:c1:3e:e5:71:
5d:42:dd:6e:39:02:49:6b:b2:29:60:76:44:05:56:
b1:b9:be:a0:54:7a:39:18:a7:ea:e4:f3:ff:45:e3:
5f:e3:ea:c8:82:a4:f3:7c:0f:77:02:87:87:46:80:
43:bf:26:81:48:3c:35:0d:36:55:f7:92:ac:24:c7:
e6:0f:b4:b3:b6:12:97:01:34:10:40:3b:4b:fe:63:
8d:ef:84:56:72:50:7d:7b:b9:f2:3b:20:98:be:ea:
a1:0f:2e:3d:05:87:6a:d5:50:27:ac:1f:0f:44:00:
dd:5f:43:4b:0d:da:f7:36:f4:53:57:fd:62:1e:6e:
5e:e8:1e:cb:2d:94:c0:64:e1:6b:13:06:fc:ff:38:
f3:16:eb:59:9b:7c:ab:0b:e4:a8:fb:dd:70:a4:92:
89:aa:1a:35:6c:cf:41:5e:de:a7:2d:ea:dc:b8:34:
96:fa:66:70:27:1a:7c:99:9a:2a:98:bd:90:43:a8:
4f:0e:af:a6:2a:71:e4:0c:af:c7:2a:de:d5:04:5b:
64:45:a2:23:fb:11:6e:98:99:0e:7c:92:0b:1d:f6:
38:00:83:36:6a:67:ac:f0:53:e3:4c:b5:a3:72:9e:
c1:cf:3e:58:9a:d7:ac:58:74:ef:55:c2:7e:05:e2:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F9:65:68:9B:72:59:29:FC:28:AF:CD:67:01:07:1C:C1:9C:A7:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
03:b3:59:d6:0e:06:28:7e:f5:4c:75:69:2a:d1:7e:53:b5:38:
1f:b1:e3:ab:00:bc:a6:0d:b3:18:06:2a:46:d8:b9:28:69:7f:
6c:88:f8:15:69:b9:c1:a2:ee:29:af:87:79:f2:9b:3c:64:f1:
ce:32:0d:4a:a1:7a:ff:ad:07:fb:84:e3:87:49:f5:d4:41:26:
7c:b3:21:d3:f6:5a:d5:60:47:a0:62:15:8a:e2:f1:48:e6:35:
98:3c:bf:3b:99:53:d1:cb:cb:c5:d3:76:ca:61:29:cf:2d:ef:
12:aa:9e:15:52:47:1f:97:71:bc:21:69:23:c6:dd:2b:c5:2e:
11:be:aa:54:5c:e3:ce:1f:3e:93:62:45:59:31:34:be:10:70:
f8:4a:30:9f:b0:98:cb:20:65:cf:7d:e6:2a:35:89:ac:ba:63:
0e:7d:ca:2e:73:30:79:58:02:49:5c:83:32:16:43:29:b6:73:
23:14:53:58:dd:29:bf:37:d7:7a:33:28:af:dc:7a:cd:60:f9:
6e:e3:97:5b:ed:9c:5c:a9:72:74:df:92:ef:2b:a2:0e:ed:a0:
10:51:2a:03:d2:1c:f7:7e:70:6f:4d:0e:f0:ef:57:5c:5c:53:
64:f2:99:ed:1a:dc:c9:3d:f1:67:5a:03:52:7e:38:7a:03:89:
d6:ae:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:04:47 2026 by rpki-client