Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa
File: 9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa (raw, json)
Hash identifier: xBi3i1qo88FfMtzudLHOa/I9v/d0ihyP+XLNt2W2Q5k=
Subject key identifier: 28:B4:C9:E0:E4:18:3C:5D:3A:AF:88:C1:7C:11:72:87:16:2C:78:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DFB5004643EC01455118C2AB4F4C25A2CFA9F90
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa
Signing time: Mon 22 Jun 2026 02:40:43 +0000
ROA not before: Mon 22 Jun 2026 02:40:43 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:fb:50:04:64:3e:c0:14:55:11:8c:2a:b4:f4:c2:5a:2c:fa:9f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:43 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=0dddd823d9046b1b7136a571905038aeb018bb0b2436db94daede9f60b1b4644, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:3d:89:3c:05:8f:4f:c4:80:d3:3e:bb:94:
3a:89:49:fb:98:85:d7:65:91:84:43:84:b0:ff:c1:
61:41:a5:50:d1:3b:bd:28:f0:12:57:d9:63:c5:be:
d8:bb:5b:cb:98:04:93:7c:5e:2d:71:d1:7f:ce:d9:
0f:04:d4:49:83:79:f1:b3:ee:c7:ff:b6:b2:38:ba:
25:46:4e:79:be:53:0a:e5:16:bd:ae:1e:e0:51:8b:
d5:64:90:44:22:bd:54:e6:dd:4e:26:d9:0d:4f:50:
6e:16:ed:9d:4f:61:e5:3c:1b:ac:0b:6e:89:e0:b2:
74:11:3d:2c:a5:f4:36:64:a4:11:9b:fc:f7:f3:9f:
9d:a1:d2:f4:d3:30:96:6e:5d:91:7b:5c:af:25:7d:
ca:77:73:a9:ee:b5:96:5b:49:c8:cf:43:27:c0:3a:
0b:da:4d:b1:41:73:82:8d:59:50:c1:1b:7e:4c:fb:
7e:3e:80:4e:f5:71:d8:2d:17:f9:54:0e:ac:c5:e4:
28:fa:d2:31:3d:fe:f3:62:e5:85:05:67:c3:98:91:
ac:a3:03:ae:17:73:cc:72:d8:07:2e:a9:0a:19:95:
92:1b:f5:f2:22:32:3e:9f:ae:55:6b:d9:71:0b:68:
30:bb:fe:3d:9d:78:41:e9:d6:04:00:4a:0d:09:a2:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:C9:E0:E4:18:3C:5D:3A:AF:88:C1:7C:11:72:87:16:2C:78:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
07:b2:bb:5e:57:38:e2:7f:1c:f3:63:ee:f9:c9:87:7d:f2:95:
cb:f7:81:89:b6:22:3f:43:64:03:9c:c6:a1:77:7a:ae:5d:da:
e9:30:62:f0:fe:2f:a4:77:b3:91:2f:e8:db:23:de:9d:59:b5:
ae:3f:f7:00:8b:46:3b:ce:c0:c6:7f:cf:8a:07:d7:fa:ec:ff:
c6:b0:72:3b:f9:7f:16:2f:55:ff:58:b4:54:15:e4:65:74:fd:
73:2e:2c:bb:ea:18:46:b4:a7:fc:1d:e7:35:71:1c:8b:f5:ba:
f1:d6:df:e7:c1:45:96:db:db:04:06:6b:de:b3:2d:9d:30:ae:
26:e9:67:ea:de:7b:d4:56:f1:d9:74:31:36:9e:74:b3:7d:e4:
13:9e:49:a9:4f:e2:c4:21:0a:da:b1:2f:7d:ea:00:1d:b9:57:
04:22:3c:ce:cc:31:38:f1:84:1d:6d:41:aa:3d:6d:92:28:ee:
51:34:f0:d2:d6:ce:fa:e1:59:8e:41:14:63:53:72:1f:93:a6:
07:bb:a8:97:a4:89:ac:c4:9e:cf:a8:37:da:84:99:ad:88:d1:
8f:64:4e:64:8d:4c:9f:e2:c6:e7:43:19:da:0d:74:b0:6f:4c:
10:d4:58:dc:ea:0e:8f:1f:04:33:6d:33:41:7a:52:af:c2:49:
14:fc:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:22:33 2026 by rpki-client