Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
File: 76af8472-01ad-4042-b385-078d559d94d0.roa (raw, json)
Hash identifier: ji7hkZ/T42r5vbtNkPXIJNbl3WJsq6Cwjeh6rpcavM4=
Subject key identifier: 33:E6:DD:66:7C:24:AB:05:C3:F9:C3:4E:AC:4A:C4:9C:60:46:61:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3851CBFAA05817E39D56D49E047CEA8D4DAA1033
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
Signing time: Thu 16 Jul 2026 00:30:12 +0000
ROA not before: Thu 16 Jul 2026 00:30:12 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:51:cb:fa:a0:58:17:e3:9d:56:d4:9e:04:7c:ea:8d:4d:aa:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:30:12 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=713f43373ed9d28c8843fbbead0b1bb385a446ef6a64c975631137eac5301a07, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:af:37:0e:52:8c:4b:88:d9:47:42:96:3f:
56:f8:7d:9f:fa:02:70:75:d7:63:d6:5b:7f:3e:01:
ff:7c:86:31:a3:0e:79:23:9e:97:ee:c6:3c:12:d2:
cf:eb:71:a0:fe:ae:e0:37:ef:e0:90:6b:41:33:e6:
07:de:6e:69:f0:16:3b:b3:a8:c2:0c:4f:fd:59:cc:
cf:dd:8c:67:2a:10:66:5b:29:3a:65:a6:1f:51:83:
42:18:6c:11:5e:ca:8d:b4:71:52:22:3c:8a:99:4b:
c1:d1:0a:76:06:33:bb:df:92:df:9a:a7:16:83:b2:
63:50:a3:2a:9e:61:61:cc:20:5f:7b:36:19:88:9e:
79:95:01:e2:72:45:a1:b9:c9:70:22:a6:29:49:b1:
2e:78:df:de:bc:72:2d:45:9c:28:6a:10:89:19:cc:
8c:96:ea:bd:01:07:16:1e:3e:e6:df:4e:fc:6d:63:
0b:79:b2:d5:60:54:cb:51:50:b1:05:f3:91:5a:c4:
27:4a:59:59:32:c4:26:bf:d0:1e:90:fd:f0:bf:be:
34:17:7c:f7:5a:7f:b7:e2:85:9a:ba:34:c4:22:e6:
a4:fb:22:6d:b2:9a:a5:80:8a:a1:1e:fc:9d:5d:1e:
12:70:27:46:02:50:06:f9:53:e2:c7:9d:55:0b:92:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:DD:66:7C:24:AB:05:C3:F9:C3:4E:AC:4A:C4:9C:60:46:61:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
af:22:20:66:ff:83:fb:9c:74:ff:02:cd:67:b0:9d:7b:21:f6:
e0:fb:6b:64:32:e8:b1:76:d6:ce:6d:ec:e7:ab:5f:19:4b:92:
40:8f:9f:4e:34:16:62:b4:50:40:b5:ec:96:b3:12:d1:c5:da:
c4:34:b1:e1:01:19:cc:a0:45:29:c9:a1:8a:21:24:5a:79:05:
28:62:30:02:67:1e:14:10:8c:fd:6a:3c:7a:6f:7f:18:5b:c2:
49:d0:86:16:21:04:4c:0d:dc:59:92:52:c5:16:3d:f7:28:fa:
f7:87:22:fa:02:e5:77:d5:a0:ba:4e:70:74:28:ca:57:65:51:
cb:0e:88:28:13:bc:1c:3e:32:5f:5d:77:32:39:af:09:fa:9c:
25:93:a3:38:1f:14:f6:09:56:00:58:d6:c0:65:53:9d:bf:01:
a0:68:87:ee:b7:c8:c7:54:5b:0a:ff:e4:d4:8a:3d:b0:cc:d0:
fe:8e:c7:8d:16:2d:1a:f7:72:ea:68:a1:d1:b5:b0:39:80:02:
45:ea:72:c7:f1:ff:f0:e7:fd:ce:00:12:cf:f2:93:94:e3:a4:
98:5e:fc:fe:a1:04:7c:a7:9c:c3:fb:06:c0:97:72:91:dc:13:
0d:07:27:2b:b1:29:54:ad:bb:6e:f9:27:68:c8:4e:1d:a1:45:
84:a9:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:46 2026 by rpki-client