Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b2e0088-d64a-4b72-ab4f-8299ca986086.roa
File: 6b2e0088-d64a-4b72-ab4f-8299ca986086.roa (raw, json)
Hash identifier: Ogpu7JGyAbDQyixS4zCIUEmYiYZGkZPFddJqpo6w92E=
Subject key identifier: 61:A7:BC:72:2B:0C:0C:73:B0:A0:B6:92:0B:2D:66:CE:4F:41:B3:89
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 366D61635C152B368B4E67774FF41A3F021F7E41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b2e0088-d64a-4b72-ab4f-8299ca986086.roa
Signing time: Mon 22 Jun 2026 02:30:11 +0000
ROA not before: Mon 22 Jun 2026 02:30:11 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6d:61:63:5c:15:2b:36:8b:4e:67:77:4f:f4:1a:3f:02:1f:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:30:11 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=982ad7e91c227025d36fd6479d29e75c11824aedc46dcfff360fc75af7ff1086, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:8c:81:76:ec:35:54:03:4d:1a:e6:f9:6b:
40:30:fa:32:fc:b2:75:28:4f:6c:6a:33:7a:52:06:
d4:91:49:2f:06:16:ac:78:17:b8:73:f3:e1:40:3b:
3d:f0:83:cd:8b:5b:52:cb:81:ef:c5:d0:04:3c:6d:
48:dc:1c:fd:cd:0c:a6:45:59:b2:1e:d0:dd:a2:03:
51:2d:c4:68:c6:f6:e1:a7:f2:85:65:b4:a8:81:7c:
7e:85:ce:87:18:0f:69:6c:9c:9a:43:21:ed:ff:af:
e4:78:0d:84:0a:b0:5a:60:93:a3:40:03:63:9b:c9:
bf:72:ac:52:f9:ed:25:f2:70:7c:d0:dc:ab:fc:1f:
50:b1:81:67:8e:e1:1e:c0:b8:88:3f:af:06:2a:26:
e3:cd:4a:dc:34:ea:5f:3f:1b:88:29:c7:d5:3d:cb:
fd:88:63:6e:57:56:e3:06:86:cb:37:6c:78:f7:e9:
cc:80:50:2b:30:5c:49:b8:48:54:d3:07:70:48:1f:
28:8e:3e:53:70:fa:b7:16:e3:8e:75:1e:97:92:2b:
8e:df:c8:c6:39:09:cb:e3:c1:f3:d0:b1:03:98:77:
c1:75:5c:b2:94:57:85:d5:47:59:34:fb:96:6d:09:
13:6b:98:d8:a5:75:b7:a6:ca:76:38:84:18:ab:4c:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:BC:72:2B:0C:0C:73:B0:A0:B6:92:0B:2D:66:CE:4F:41:B3:89
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b2e0088-d64a-4b72-ab4f-8299ca986086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:a000::/40
Signature Algorithm: sha256WithRSAEncryption
85:1a:18:39:20:d1:bd:6c:68:27:0c:98:d2:ac:c3:18:52:e0:
50:1d:71:01:9e:d6:b6:8a:76:c7:9e:df:b2:d4:d6:81:af:45:
cc:7d:b3:31:94:2a:3e:c4:a8:f4:39:63:b4:5b:b0:3b:a7:25:
a9:6e:8a:ba:69:59:4d:7b:1a:1a:94:64:f1:30:e2:38:9f:22:
95:64:0a:d3:62:5e:3a:cc:2e:b3:1d:88:20:be:97:2b:d0:1d:
74:8f:b7:e9:e9:fa:e7:58:14:eb:c2:4f:a0:fd:06:6a:4c:6b:
0b:90:14:a9:f6:8a:03:57:ad:99:e1:cf:db:92:6a:a8:c1:6f:
35:94:47:76:4c:03:93:e4:2a:21:01:3a:b1:20:dd:3f:45:17:
f4:88:79:66:09:2d:32:e3:91:e5:b8:17:02:27:77:e7:eb:72:
ac:b1:09:f1:cd:cb:07:50:c9:cc:62:91:90:08:c0:28:c6:e5:
aa:9a:9f:0b:95:95:c7:f2:0e:01:ba:ec:e6:fc:7d:1d:65:91:
7c:b3:0a:2b:f2:a7:44:10:d9:4f:c9:4e:22:66:ed:25:9b:9f:
03:5e:b8:f9:2c:7e:a5:c6:b2:e9:e2:77:f7:85:ad:67:83:7f:
46:58:b7:0d:43:d4:f6:b0:0d:70:5b:4b:4b:02:54:0c:cb:2c:
88:73:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:35:04 2026 by rpki-client