Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
File: b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa (raw, json)
Hash identifier: wO5zMHZC5f04Mn55coRFrbPAN8086BqRYCiib68W+98=
Subject key identifier: 23:2A:02:93:9C:B1:0F:E6:64:6D:22:94:D7:25:63:C4:98:77:DE:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2424F4035189DBA9983E55256E4A790CEE155FFB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
Signing time: Tue 21 Jul 2026 01:20:36 +0000
ROA not before: Tue 21 Jul 2026 01:20:36 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:24:f4:03:51:89:db:a9:98:3e:55:25:6e:4a:79:0c:ee:15:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:36 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=5d8652127ceaecdf75075728e53e8932121cc12b1954fb15a04164847f535752, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:ab:cd:dc:14:a6:fa:20:13:47:44:ad:a7:
e8:3b:3c:67:7d:e1:a4:8e:90:1c:91:39:bf:08:02:
0a:63:db:14:c3:91:ec:02:fb:f5:ca:a2:0f:1b:83:
39:22:87:ab:80:c7:1a:83:39:47:95:f1:bc:e4:fc:
26:8e:27:dd:e3:a0:19:b6:69:1d:5f:9d:07:99:c4:
59:3a:11:b1:37:ca:e4:eb:0b:b6:a5:64:4f:61:b9:
31:14:cb:75:2a:bb:00:37:c4:51:fc:ab:29:5a:13:
e5:e9:89:30:89:85:ac:3d:d8:03:43:a7:2e:2c:bf:
50:be:dd:a8:87:00:ac:64:9e:dc:62:9e:48:69:28:
8e:cf:25:77:cd:d6:95:3a:58:01:34:a6:aa:98:40:
f3:ab:3d:a4:a3:39:5f:c7:21:6c:9f:53:9b:b2:f5:
63:f0:b9:49:3f:b0:ff:1a:7b:5b:29:56:62:de:5d:
aa:e6:46:77:6a:00:13:2b:d0:50:9d:50:e8:1a:a1:
4a:e9:16:97:91:74:01:2a:e3:d7:22:d6:40:de:e6:
fc:6d:a4:68:6a:27:66:db:c3:fe:f2:ef:21:03:e4:
e1:ad:97:6c:ba:58:02:6d:19:a9:f2:f1:9f:e8:7f:
7f:af:e9:07:63:31:d9:35:46:bd:3e:5b:4c:ff:67:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:02:93:9C:B1:0F:E6:64:6D:22:94:D7:25:63:C4:98:77:DE:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
1a:03:c6:51:71:88:f8:16:30:15:8b:27:df:5e:62:81:c2:f0:
5a:82:c0:f4:cc:81:57:96:b3:33:bc:dc:86:72:5f:8d:1f:af:
75:cf:fa:cc:bd:7e:98:8f:47:fc:35:a3:ef:b3:9b:18:eb:b1:
5a:f7:51:a7:9c:23:ee:76:cd:ca:6f:dd:28:29:88:ce:88:51:
1a:ed:f6:86:b4:ec:07:cd:24:f5:61:b2:86:f8:dc:03:dc:0b:
fb:82:d6:52:2b:f8:c9:7d:d2:07:0a:11:ea:11:6f:69:39:31:
40:91:c3:d0:4d:03:2c:6e:94:e9:45:90:5c:e5:e9:10:aa:28:
a8:65:3c:28:ea:4d:e0:44:f0:7e:f5:13:14:ae:e0:99:a5:74:
8f:fb:23:fa:8b:0d:df:e0:4e:ce:13:a7:48:51:d3:18:a3:7d:
59:27:71:f1:eb:b0:49:1e:54:b1:27:5c:a5:59:c0:f0:26:25:
56:32:d2:ca:bc:a6:63:47:58:3c:52:b4:a9:fd:20:3e:00:75:
42:65:86:93:37:a1:f4:63:b5:f9:24:6e:1f:9a:09:06:aa:14:
e5:3a:07:68:ae:23:c5:dd:1e:d3:03:e9:b3:4c:c8:88:85:b6:
5c:32:b5:09:26:84:be:7c:98:a2:87:f9:6a:16:3d:ec:98:14:
45:a3:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:42:45 2026 by rpki-client