Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
File: acaa599d-041d-4181-81eb-d1fa213089e1.roa (raw, json)
Hash identifier: KwMx2kv8E0SB57ZygLqmTnBqXcZ8RXQ+oTRf3bR5YmI=
Subject key identifier: 83:F4:30:37:1C:5E:9A:94:8B:32:93:CE:17:E1:BB:B4:6F:5F:12:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B84826B35B6DA02040BC37EA9C0BF9DC232C4BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
Signing time: Thu 23 Jul 2026 15:20:51 +0000
ROA not before: Thu 23 Jul 2026 15:20:51 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:84:82:6b:35:b6:da:02:04:0b:c3:7e:a9:c0:bf:9d:c2:32:c4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:51 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=f13192edab9311f66213453bd3622c40c4f13c31bc468aae53b2a314f1aae0a9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:ba:a4:bc:f9:f6:64:a6:69:50:4f:d8:6d:
96:f2:76:25:d5:a8:dd:82:af:81:7d:25:59:80:e0:
0d:43:ef:b6:08:3a:eb:61:ff:a6:2b:91:d1:a0:90:
f1:6a:55:c2:e7:d0:23:55:0b:8b:ec:9d:ce:a4:80:
7e:c4:47:6c:b2:7d:58:55:ce:1b:d1:09:8f:32:75:
f5:fa:c1:3f:0c:47:a6:f9:03:9f:eb:e4:91:a7:b8:
e2:26:7f:03:8e:45:1c:37:24:a6:d7:2c:0d:a5:c0:
a5:34:39:54:ae:4e:e0:26:dc:ae:a8:4a:b0:ee:44:
76:f5:32:e0:c0:2e:96:e4:c4:bc:5e:a5:f7:8a:7c:
45:cc:d6:a1:68:25:41:19:1f:88:0d:6c:85:cd:cf:
ee:f3:03:40:5e:27:14:bf:0c:d3:7e:de:f6:80:cc:
16:9b:63:35:39:ca:dd:7b:b1:fd:78:e2:8d:12:80:
37:95:a2:0f:25:b6:8b:b3:47:a4:f0:c0:9c:64:f5:
4a:97:ff:8d:ab:fe:f0:92:07:84:e6:81:f2:f3:bc:
74:99:2e:df:e4:2c:46:b4:eb:3e:f1:10:63:3c:59:
55:5e:70:d3:dc:db:57:78:3b:03:1d:5b:3e:8f:a0:
a6:0d:cd:40:57:cf:25:f0:6c:41:b0:72:cb:3c:22:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:30:37:1C:5E:9A:94:8B:32:93:CE:17:E1:BB:B4:6F:5F:12:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2080::/46
Signature Algorithm: sha256WithRSAEncryption
7a:94:57:f2:9a:a7:64:ab:5a:50:28:72:ac:69:ff:78:94:b4:
cf:dc:d9:ae:33:7d:37:93:63:5e:94:4d:23:ea:d7:c2:3b:c9:
75:2a:9b:d8:7f:df:2f:6f:59:08:2f:7a:e9:a8:3a:d6:42:42:
6b:5f:41:d6:3a:68:a3:d5:00:9a:a8:36:85:7f:25:a8:63:d3:
1d:3f:53:99:30:44:73:30:93:58:26:4f:4d:e1:5d:72:ed:e8:
53:24:f4:70:57:28:8f:cb:c1:f5:80:10:6a:20:b0:f0:76:b0:
19:31:ce:1a:38:d9:6e:8b:00:98:ea:78:fc:25:ab:65:4b:b4:
9d:f8:8b:e1:da:50:c7:e4:6a:d5:a4:d6:cb:2e:94:3c:a2:ae:
c4:be:a8:f2:60:00:d7:a5:1a:58:8d:42:b1:e8:1b:89:a9:b9:
bd:56:ea:68:80:43:2d:38:1e:6a:d0:cd:84:aa:6b:0b:78:a0:
44:e1:32:e0:e7:f4:da:ad:fb:0b:55:39:ba:94:82:b2:7b:f7:
9d:e6:08:46:04:62:66:12:a7:3d:89:66:20:4d:91:db:c6:17:
3d:75:96:88:5f:64:7b:04:2e:6b:53:97:e7:b2:d3:ca:b0:e1:
d1:16:a6:1b:3a:1b:71:12:7a:36:de:ca:64:f9:7a:68:5c:bb:
d1:b4:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:07:44 2026 by rpki-client