Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
File: 7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa (raw, json)
Hash identifier: ogTOTEgpZiqcN3xr2VCIrGKoLdhQfseo51PX/8EvPBA=
Subject key identifier: 5E:21:55:0F:90:4A:84:95:E4:1D:72:3B:E3:94:67:2C:D1:9E:F1:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F509B365F12A49030C0A8190A679903786B6F77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
Signing time: Mon 22 Jun 2026 02:30:17 +0000
ROA not before: Mon 22 Jun 2026 02:30:17 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:50:9b:36:5f:12:a4:90:30:c0:a8:19:0a:67:99:03:78:6b:6f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:30:17 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=62f35f96e2dc5e7b778d1cad3172f45e09030d61514c361ee953755788601f74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:0a:fb:5b:8f:43:de:a5:8e:08:b1:d2:9a:
2f:f3:68:50:58:08:2a:09:40:be:c9:9f:86:22:1c:
29:bd:a8:dc:ee:38:6a:46:5c:d2:d9:dd:7c:09:b3:
8d:73:55:b3:a6:ac:5c:00:fa:7e:da:14:37:a2:e6:
25:17:03:30:85:a2:ff:7e:b8:57:5f:bf:f3:61:82:
29:98:10:3c:53:c4:89:2b:eb:5e:87:3e:34:4c:43:
af:a0:ab:2b:d0:fc:e2:e9:69:a4:e3:ec:03:cb:15:
ba:e7:3f:70:bf:75:3b:d3:e9:8e:59:60:5c:21:71:
6e:b4:ad:62:9f:38:81:31:60:44:40:59:52:42:6e:
a2:7e:8b:39:98:a6:dd:f0:58:da:ae:72:fe:97:6f:
04:b1:24:8a:46:73:38:5f:71:68:f9:21:62:f7:c9:
41:8d:8d:0f:8a:bd:64:c2:57:c3:38:52:c3:0f:99:
59:09:99:72:ce:ed:45:d0:39:39:db:4c:87:cb:74:
4e:6d:37:3b:20:f9:7f:9d:07:ce:35:ea:42:b7:88:
39:29:ee:30:70:65:b4:30:38:f5:6f:2a:a1:ba:ef:
6a:41:3f:b8:28:33:35:8f:70:07:69:a3:e1:77:96:
39:76:37:02:ed:d7:7f:0a:84:ee:37:83:53:38:be:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:55:0F:90:4A:84:95:E4:1D:72:3B:E3:94:67:2C:D1:9E:F1:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4020::/48
Signature Algorithm: sha256WithRSAEncryption
11:a8:7e:4a:88:78:8b:15:31:1e:8d:e1:21:9c:31:26:2d:a0:
3d:02:93:aa:f7:09:a2:a5:b8:fe:89:11:79:c0:e4:68:07:c9:
1a:e8:f8:fb:28:ad:45:99:27:b5:4f:87:78:2c:e2:dc:df:06:
af:60:d3:ec:93:c1:8e:cd:dc:2c:f5:7d:c8:07:eb:84:7c:e9:
ad:90:f6:5c:32:f3:44:d0:2f:81:e9:6b:81:1b:4a:40:76:d6:
cf:ec:f1:d7:5d:08:21:72:e0:de:68:48:91:a8:35:d1:c1:22:
d7:db:15:34:44:1b:84:e9:f8:11:53:53:2f:09:fe:a0:c6:da:
b5:4d:02:30:b6:c9:65:ef:03:05:f7:7c:b3:43:24:ac:bf:d7:
bd:c2:fb:83:77:f4:7e:c3:60:d7:c6:fa:a8:3b:f4:1f:f7:a9:
35:0e:9d:c3:18:a4:46:f4:5d:c1:8f:33:1e:9e:f5:7c:25:f8:
c3:af:c5:48:79:7f:9c:75:16:5c:4a:ec:25:22:a3:59:ac:fb:
02:0e:31:cc:cc:e6:3b:8f:64:64:9c:5e:e0:35:f4:3f:87:5d:
de:5e:2e:bc:5e:46:39:63:92:c4:45:84:94:bb:46:9f:61:38:
03:54:93:98:b4:ba:7a:11:03:59:cd:e0:22:7f:87:ea:1e:0e:
9e:60:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:25:24 2026 by rpki-client