Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
File: 6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa (raw, json)
Hash identifier: Iom4uVWbOud2V2cgu8Ua2Qv7rKJZbgCBxFmdogGQJGY=
Subject key identifier: D1:17:EB:47:77:B6:3F:C2:23:D2:0E:46:BF:44:19:EF:28:64:DD:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A5D848881961FA7035A7F8ED53068BBAAABD7AC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
Signing time: Thu 16 Jul 2026 00:30:15 +0000
ROA not before: Thu 16 Jul 2026 00:30:15 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5d:84:88:81:96:1f:a7:03:5a:7f:8e:d5:30:68:bb:aa:ab:d7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:30:15 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=d3f7b46ed8a34f7a9e84ee728b45e602433a95a6d5036872b83cb80e38071d3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:62:dc:e2:67:1a:26:33:3e:42:44:89:1f:
9a:ab:89:8f:f7:cf:f2:ef:77:01:d4:08:db:a4:b0:
a9:34:5e:99:cc:c6:bb:84:22:7e:a9:e2:a0:36:ed:
4f:2e:7c:7f:b4:a4:b1:18:98:75:fe:67:27:39:d1:
ff:b0:43:18:05:59:0b:30:13:f5:95:37:4a:41:16:
c5:2a:1b:94:cf:26:be:f0:4a:77:77:87:a1:de:e5:
9e:35:b9:9f:be:9f:58:6b:6c:85:a3:2d:c6:aa:b0:
d0:4a:5f:75:94:6b:ac:75:62:bf:a5:5d:99:c3:02:
5a:12:ed:4c:f7:c2:d2:cd:71:f4:a1:bb:f8:82:0e:
c3:8b:d6:ef:df:65:1b:91:67:a0:61:47:e1:d5:5b:
1b:46:ce:fb:28:d2:cd:3e:6f:41:58:c6:36:16:a5:
c9:fd:b7:42:21:3f:86:a2:40:e8:41:ac:84:38:06:
73:83:17:67:01:a4:46:1a:f5:ad:75:c6:ec:90:49:
58:fd:a9:c7:e8:8a:c9:3f:21:6f:e1:28:33:7a:90:
86:e3:03:f8:2d:4e:98:5a:e4:96:87:65:96:59:d3:
1d:77:76:8e:dd:28:6d:75:0c:6e:d9:68:a7:06:be:
c3:db:f0:08:bf:6f:5a:62:0b:82:03:23:65:67:cb:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:EB:47:77:B6:3F:C2:23:D2:0E:46:BF:44:19:EF:28:64:DD:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
1a:c3:08:58:85:61:83:44:66:6b:df:db:9a:c5:a0:43:cb:bc:
db:19:ef:34:8d:e2:7c:3d:98:a6:f3:3b:54:e6:ca:0b:88:40:
1c:44:5f:c3:ca:1b:a1:ee:b4:6d:14:56:d7:e7:c4:e2:d4:26:
e4:41:87:c9:62:c2:07:b8:58:1d:38:e7:bd:db:2d:5e:85:0f:
47:14:0e:61:d1:be:08:33:99:ac:f0:99:a0:47:c2:65:74:c7:
8a:bf:2c:ac:23:d4:8b:75:cb:48:9d:63:33:83:18:4d:8f:c0:
84:71:0a:9b:05:79:5e:8a:ae:22:8d:b1:6d:6d:09:d0:11:cd:
3d:45:c6:7f:9e:da:c8:a1:2c:07:74:7b:0b:7e:1c:bf:c2:7e:
72:3b:93:69:0c:e9:a6:f0:7f:e5:d6:02:c4:26:6d:7f:3d:f4:
3d:bb:59:5e:ea:92:dd:d0:ed:0e:5b:71:e0:c1:11:fc:4f:81:
45:9e:4f:84:1d:a0:2f:08:67:00:e6:76:00:71:67:d7:8e:c1:
18:14:2f:2a:93:00:40:b2:0a:85:f2:35:24:0c:0f:60:18:b4:
20:e8:e7:29:7a:1e:48:70:17:b6:87:fe:b0:2a:1b:3b:49:3e:
1b:4c:72:78:09:78:3a:b9:17:ab:4d:72:12:59:03:a3:0e:e5:
25:97:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:16 2026 by rpki-client