Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa
File: c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa (raw, json)
Hash identifier: 8piUjJzijZlzHliZWgsvmlakwtzD1wBAk+ta2nyD5Xs=
Subject key identifier: 80:C7:51:1B:FC:9D:54:CA:86:D4:68:99:62:18:45:C5:D4:39:F2:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A8D9E51C2F218EF71BDF1F68459576E77F0D5A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa
Signing time: Tue 21 Jul 2026 01:20:05 +0000
ROA not before: Tue 21 Jul 2026 01:20:05 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8d:9e:51:c2:f2:18:ef:71:bd:f1:f6:84:59:57:6e:77:f0:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:05 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=fb8f029ec5f4e129eee643cbe8b82912a4742e3d7f6ad5813b62ed6a403ac348, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:0f:a6:a3:43:ac:7a:2c:08:9a:53:8a:bc:
1a:d3:c3:ae:38:5c:b2:c4:22:a0:96:56:36:38:c3:
c4:59:be:bd:cb:27:9c:6c:a4:6d:e9:76:5c:81:23:
80:2c:f4:40:68:19:7e:4b:ef:8f:d0:2c:b0:3f:c9:
d4:82:fc:2f:90:8a:92:25:de:c9:a5:3d:2b:6e:b3:
d1:e3:d6:c9:bc:f1:7b:2d:3c:f2:4d:10:94:40:e5:
3f:ba:1d:50:81:e6:0c:43:50:63:65:58:ca:fa:f6:
a5:55:69:67:91:b9:96:43:f8:59:a0:3c:18:ea:91:
67:2a:ce:df:9e:3d:49:c3:bd:f2:cd:2a:07:74:6a:
a2:1d:65:08:a2:a1:e6:0f:ba:a9:56:e1:b1:49:1d:
0e:80:b4:08:ba:7d:bc:82:86:97:60:02:ab:b0:0f:
54:1d:67:78:db:97:0a:00:20:ca:dd:ce:f2:f9:ab:
94:9b:a2:c4:f9:87:95:0f:95:a7:9f:55:92:ee:06:
e2:f7:09:08:ab:a9:69:26:dc:2a:d8:64:a3:59:e2:
f0:82:4b:d2:89:6d:aa:33:b2:f1:ba:fc:96:b8:9f:
29:b0:33:78:bb:07:a5:d3:22:a4:22:1f:c5:dd:50:
90:d9:b0:45:0e:3d:1e:58:e2:99:4d:23:0c:49:f4:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:51:1B:FC:9D:54:CA:86:D4:68:99:62:18:45:C5:D4:39:F2:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:6080::/48
Signature Algorithm: sha256WithRSAEncryption
42:38:25:ca:a2:c0:35:f0:56:8a:e1:eb:01:84:f8:d8:73:0b:
d4:1c:15:be:ed:74:65:59:56:b2:58:0e:ae:23:62:b6:97:84:
75:fb:5a:27:9e:5c:e5:8b:42:d0:65:d9:a8:c1:ca:ef:dd:d2:
e0:c4:3d:c0:5a:b9:c5:a2:26:54:a2:60:4e:53:81:c4:28:5e:
a4:8b:d7:ea:16:67:cc:18:a2:be:97:a6:74:bd:57:21:c4:3e:
52:f8:94:8d:50:af:1a:f3:83:6f:98:94:b8:28:e3:0f:66:49:
77:a0:08:57:1d:bd:ad:89:6d:01:60:b9:9a:75:0d:88:40:df:
15:70:04:a9:2b:79:14:2d:a0:4b:55:23:b7:17:1f:e5:40:68:
b9:9f:e1:12:5d:16:eb:45:a5:46:39:27:ac:ef:a1:15:0d:be:
5a:06:df:04:16:53:a0:8e:d7:a8:9e:7c:e8:b8:43:d1:a5:82:
2c:9d:83:33:f5:85:3d:8a:7e:23:4c:b2:66:f6:db:4f:af:18:
4d:8c:75:90:ee:b4:e5:9b:e9:d4:3c:0a:2a:38:9e:8d:db:ce:
d1:32:44:14:ec:c1:ae:43:62:be:00:b1:88:e1:83:8b:bf:ea:
42:3d:ec:47:fd:77:b8:f1:fd:48:bb:78:71:98:ac:17:36:7b:
6d:76:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:01:51 2026 by rpki-client