Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/783286e7-6fdb-479f-ace8-44d2a9cf2865.roa
File: 783286e7-6fdb-479f-ace8-44d2a9cf2865.roa (raw, json)
Hash identifier: z8bc3a5jwdjw4peu0c3XzwFJ6r9SEkVHkuaCbvlJ/co=
Subject key identifier: 8D:86:0D:9D:EA:F9:C5:88:9A:21:5D:AA:7D:87:B3:2D:7E:AC:6A:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23250DCC49ECAEA54E1AED901D617231306E6A74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/783286e7-6fdb-479f-ace8-44d2a9cf2865.roa
Signing time: Thu 25 Jun 2026 00:00:03 +0000
ROA not before: Thu 25 Jun 2026 00:00:03 +0000
ROA not after: Wed 23 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:25:0d:cc:49:ec:ae:a5:4e:1a:ed:90:1d:61:72:31:30:6e:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 25 00:00:03 2026 GMT
Not After : Sep 23 23:59:59 2026 GMT
Subject: serialNumber=f79b30f426995d4b3d7713dd22772be81f14d8c602df1728a511dce12f1ef67a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:cf:80:f5:e1:7d:4f:4d:dc:37:1d:7d:fd:
eb:91:37:74:c3:c5:ad:61:1a:e2:d0:0a:a5:b7:4b:
13:3e:65:58:67:40:2e:f2:41:0d:09:99:5d:ba:85:
c8:ef:5c:7b:dd:4c:4e:d5:69:ec:54:01:b2:08:8a:
41:9e:64:3c:ac:4d:05:34:e3:92:bf:0c:50:59:d3:
0c:9c:d1:57:3d:9a:7f:51:65:85:48:72:9d:54:4d:
ff:fa:4b:bb:f6:f4:52:c4:dc:60:f6:a4:2d:4f:0f:
8c:b1:49:6a:6b:f9:69:4e:50:f0:5d:7f:ed:1b:4b:
60:27:c2:9c:c8:77:18:39:fa:e5:0f:05:a0:40:72:
c1:cf:6d:6b:b3:b3:14:51:ff:7a:7c:1e:4a:b9:ad:
71:23:ab:77:fd:11:4f:97:9c:00:53:f9:8e:85:96:
70:4d:f4:77:0f:c2:ff:ec:4a:6b:72:57:30:8c:c4:
e7:da:89:11:f0:15:13:f0:7c:c2:d9:f0:c6:5b:96:
cb:95:0f:e6:7a:87:ec:9c:f6:21:75:15:04:58:c0:
e3:8f:b4:b1:9e:16:fc:14:4d:79:c0:e7:c7:13:8d:
eb:3f:01:3d:ec:55:0b:ae:96:26:a5:56:c0:01:0d:
b0:b3:b6:be:3a:6a:69:ea:1d:49:40:55:81:42:da:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:0D:9D:EA:F9:C5:88:9A:21:5D:AA:7D:87:B3:2D:7E:AC:6A:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/783286e7-6fdb-479f-ace8-44d2a9cf2865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/35
Signature Algorithm: sha256WithRSAEncryption
29:dd:97:9b:16:e3:90:21:1a:ae:c2:aa:a5:8b:df:e7:86:4f:
f2:2c:7d:76:d8:ff:e0:27:41:ad:95:56:f3:b9:a3:75:53:c1:
9b:32:20:62:c8:5f:8e:94:5c:81:16:92:cd:52:77:b1:73:63:
dc:85:23:5f:6e:03:9f:1e:a8:db:82:cc:ca:f4:b5:82:84:9c:
b2:6e:1d:05:c4:b4:1a:49:12:cd:cd:c7:0d:f6:1b:eb:f6:20:
b4:da:3e:6d:a9:4f:62:39:c0:a5:4e:d0:ec:8e:8d:cf:ea:2e:
3e:be:71:d6:54:6a:b7:7b:e4:05:79:61:45:62:25:2e:6d:84:
33:17:e3:46:00:91:a5:9c:06:c8:36:1b:c7:a8:51:20:7c:d8:
68:1c:9d:64:a4:e8:94:a4:28:36:9b:af:27:11:a3:ee:34:3f:
e5:79:a5:b3:e1:8c:ca:6f:22:71:71:34:69:c7:4c:d7:97:af:
b7:c2:45:ce:6f:c7:09:a6:43:50:8c:bb:cd:4f:f5:e3:b6:ac:
04:f4:c9:8b:15:45:95:e2:da:53:1a:ca:58:be:68:6a:50:57:
8a:24:c1:8e:6f:f3:8a:3d:21:d0:23:be:69:2e:38:98:e5:17:
e4:13:44:ff:72:a5:b1:37:f8:9c:b3:18:c4:cd:5d:b1:b3:3b:
f4:17:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:19 2026 by rpki-client