Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d1726e5-e9c4-4d05-af09-dd32f2219cc8.roa
File: 7d1726e5-e9c4-4d05-af09-dd32f2219cc8.roa (raw, json)
Hash identifier: 60u7VZFG5GyO2D1huRkxP54huyKMOJglUtuNfEA5Za8=
Subject key identifier: 07:CC:14:02:EF:FF:D0:27:D5:C3:27:17:4E:AE:76:A1:2C:0E:39:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 749412B950618E41BCDDE208CB6975654C4BAA53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d1726e5-e9c4-4d05-af09-dd32f2219cc8.roa
Signing time: Tue 21 Jul 2026 01:30:19 +0000
ROA not before: Tue 21 Jul 2026 01:30:19 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:94:12:b9:50:61:8e:41:bc:dd:e2:08:cb:69:75:65:4c:4b:aa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:30:19 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=17076d63c7b30463adbac0cba7d531d3d41b2e200c4c0383d5fb8cc1415249f9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:68:52:e1:4f:e3:14:ee:56:c4:80:14:12:
56:1e:30:e6:73:95:84:e7:c1:4b:4b:a0:ed:07:b1:
cb:2a:89:9c:cc:fd:dd:a0:7f:75:6f:98:43:cd:b7:
e8:4c:31:01:42:87:19:ac:95:ea:4f:ba:3f:39:db:
6f:a6:6d:93:68:a8:2e:73:f1:73:af:4e:27:7a:38:
87:b1:ca:ca:3e:7c:b2:40:4d:9a:12:15:72:29:f1:
a2:96:6a:cc:6b:d9:78:8b:52:94:8e:ca:94:4d:9a:
4d:31:ba:d7:d7:70:e8:5c:6e:9c:c9:6c:e7:39:9b:
b2:4f:ec:da:dd:4d:f1:74:22:63:d0:a3:27:f9:02:
e0:9c:d8:a3:8e:56:0d:c7:bd:b9:68:88:33:f4:a8:
de:14:3e:98:8b:57:a6:11:37:47:2e:aa:0b:05:ac:
7e:f2:87:18:48:a6:c2:aa:40:98:be:5f:00:07:46:
a2:5b:42:63:d9:46:40:22:a4:1f:c2:4a:bf:7e:f3:
51:6b:02:52:91:bc:ca:ae:99:09:88:ef:c5:c0:e9:
84:0c:96:2f:74:58:d5:ac:86:f1:b2:e1:90:94:1d:
9b:c2:b3:43:fc:64:87:1c:b6:67:fc:e4:a3:74:77:
d6:8f:09:5d:b4:13:0e:b4:28:7a:66:0a:39:47:f9:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CC:14:02:EF:FF:D0:27:D5:C3:27:17:4E:AE:76:A1:2C:0E:39:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d1726e5-e9c4-4d05-af09-dd32f2219cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:e080::/48
Signature Algorithm: sha256WithRSAEncryption
12:98:38:e3:03:df:6f:d2:14:48:7a:6b:43:54:88:b6:73:a7:
aa:00:c7:7d:2d:0d:c7:94:1a:ff:20:c8:28:16:b6:f6:2d:50:
b9:ce:72:4c:7a:bf:c3:34:ea:c3:e4:0f:d6:4f:3e:61:85:c0:
67:70:5d:07:5f:a2:b0:4f:26:16:83:52:7f:05:df:dc:3b:0a:
59:c5:c1:3c:77:5d:85:9b:ea:3b:73:6d:7e:84:7a:de:0f:79:
e9:ae:71:e0:84:3c:b6:2e:a4:91:02:a1:66:3a:81:23:a5:d9:
6b:fa:c4:70:a5:ba:09:e3:11:3a:c1:30:a0:d6:d8:df:db:f8:
aa:b3:f4:ac:6a:8b:7e:c5:c6:ba:51:ac:e6:15:d2:dd:28:8a:
a0:6d:3e:41:49:8d:85:e0:3c:3b:39:66:41:dc:ce:3f:05:3d:
44:4b:e5:68:4c:de:5d:56:22:64:9f:dc:aa:05:77:af:44:e6:
ef:6b:c3:b3:cf:8d:e4:14:7a:5c:b3:c5:c8:36:dd:b4:18:de:
79:05:74:a7:5e:78:24:2e:b6:12:52:86:17:5a:92:f2:94:db:
d9:56:b8:27:b9:55:56:09:1a:22:b3:de:5c:70:28:78:d2:ac:
10:03:2d:7e:26:53:ea:bb:d7:25:70:9e:f7:db:68:7c:da:9e:
09:d8:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:33:10 2026 by rpki-client