Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
File: 5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa (raw, json)
Hash identifier: Th1QvRMiYqAaL2TbLjU5wPwF+HP1QxPqawTfZi5x0UM=
Subject key identifier: D8:1A:4C:F7:BC:88:19:19:88:7A:18:E4:5A:15:66:71:2E:43:8C:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0ECA5DCA89AFF164FA77651665A02F3AC308E864
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
Signing time: Thu 16 Jul 2026 00:40:32 +0000
ROA not before: Thu 16 Jul 2026 00:40:32 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ca:5d:ca:89:af:f1:64:fa:77:65:16:65:a0:2f:3a:c3:08:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:40:32 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=c07709d97daf0c50535380af14848a3f87d86d39145e26d6cd890323ce83ebbf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:2d:d8:95:ab:ab:bb:61:d4:76:76:a3:57:
79:dd:a5:66:0c:72:f1:13:70:9c:d4:46:bc:1f:6a:
d7:d0:0c:93:e9:4c:90:79:08:b7:b1:59:3d:83:84:
11:31:54:b2:df:5d:cf:96:9e:7b:6c:18:29:cb:b8:
87:e0:1a:b0:26:c9:b1:47:b7:d1:06:94:b3:14:c9:
c0:57:12:3f:c7:2c:66:e2:72:bf:35:e7:0d:76:b7:
d6:f2:1f:26:82:d8:32:54:0b:17:bc:eb:03:04:51:
0c:9c:25:db:2e:f8:ea:81:15:04:86:05:c7:78:5c:
7e:6a:a4:00:94:23:11:34:ad:b2:d3:ed:94:eb:c2:
b4:2b:26:20:9a:be:64:23:46:bc:9e:5b:93:af:f4:
51:7a:ff:cc:fd:6f:3a:ee:91:f3:bd:9d:29:8c:3d:
d6:47:45:15:e9:fa:25:a9:56:1a:2b:51:b2:6d:ea:
77:23:58:39:43:02:ed:3c:f3:0d:25:8e:9c:22:f7:
d2:f0:da:1c:45:4c:ae:c0:7a:8d:9a:87:65:48:83:
62:1a:cd:21:bb:bd:59:55:c9:cf:8e:dc:c7:b4:00:
06:46:61:33:f8:f5:2f:84:1c:82:a6:89:98:3b:a3:
90:ea:a9:4e:d9:19:c9:9b:df:f1:94:dd:a8:47:77:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:4C:F7:BC:88:19:19:88:7A:18:E4:5A:15:66:71:2E:43:8C:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:98:ae:22:69:8b:44:3c:c0:4d:09:f2:98:7f:a5:6b:81:bf:
5c:a3:24:dd:0c:59:04:6d:33:8f:c2:e0:05:c8:96:07:9e:56:
e1:33:ac:cc:34:89:ff:8e:51:63:06:c6:1e:88:c8:cd:e3:b4:
9f:14:1d:e6:69:18:77:ba:23:98:97:06:39:44:e4:c0:83:3c:
cb:e5:be:33:2d:a7:ad:ee:ef:77:cd:de:e9:e1:36:94:60:b9:
3d:2f:26:ab:a2:23:d2:09:83:74:47:83:fb:36:f4:fa:6e:a6:
57:96:2c:44:a0:d8:a5:7d:ef:47:38:dc:6d:b0:26:e1:b5:02:
11:5a:a8:84:62:d3:60:5c:24:d0:ff:d4:87:9b:77:29:31:80:
db:bb:49:bf:d7:0b:ab:fb:f7:22:36:e8:1b:ee:f0:ee:17:03:
ce:6a:78:e1:0b:02:62:0d:a4:9a:b9:7a:0d:cb:97:40:cd:c8:
4c:e2:8f:c7:ca:70:2d:ce:7e:be:cf:79:5f:9b:08:9c:99:51:
18:ed:f6:7e:f7:90:5e:97:a8:08:ff:cf:ab:9c:20:c3:18:c5:
4d:e2:99:06:a0:62:b5:7d:70:dc:5e:fa:a6:07:56:c3:7b:ee:
90:c2:cb:e7:ad:bc:1b:24:16:f8:6b:e3:31:20:37:62:a2:c2:
b9:a2:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:34:41 2026 by rpki-client