Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
File: c9cee224-c41f-451e-ba80-f0bceb6623bc.roa (raw, json)
Hash identifier: PWuYZxfFb3lvTjIuhdYa9+HLXWWO4a7zQZTsNnT/hwc=
Subject key identifier: 23:D3:69:8F:6F:C8:D9:5A:7D:50:27:E1:9F:4B:56:0B:E5:C1:48:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41528FDA57922C18B032B72BF7D4641488E7266E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
Signing time: Thu 23 Jul 2026 15:20:52 +0000
ROA not before: Thu 23 Jul 2026 15:20:52 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:52:8f:da:57:92:2c:18:b0:32:b7:2b:f7:d4:64:14:88:e7:26:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:52 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=d8251e7af1569e982e833be198e9e84480aa4894acb61a19a7f285295e8fc361, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:95:b1:e6:91:b2:41:19:a6:54:88:fa:99:
ee:75:bd:24:df:0e:9b:7f:de:19:24:ea:b9:ab:fc:
6c:d8:55:5c:b3:ac:f9:f1:f8:49:65:c0:2c:1c:a8:
0c:a8:53:49:6e:14:91:48:89:b0:23:43:23:92:44:
ed:f0:9f:a5:a7:7b:c9:cb:8d:c9:66:71:5e:00:ae:
de:a4:57:b3:6c:5d:a3:ff:ee:04:a2:80:47:cc:1e:
e9:6a:ce:54:0d:07:34:25:17:db:34:2b:d3:25:02:
fc:32:3d:68:b2:c1:dd:94:b4:5d:25:cc:48:86:77:
42:45:0f:16:c8:29:e9:db:ec:1e:68:37:7d:d3:68:
ef:d6:fd:65:56:5e:ed:dd:a3:6e:c4:9a:b9:de:22:
b8:7b:6c:a1:0a:75:66:01:fd:80:d8:e9:39:26:42:
29:31:f4:c6:4c:bf:b5:22:77:9b:5f:46:db:b1:39:
ca:ad:2d:40:bb:60:66:49:47:d4:12:1a:1c:53:d3:
d3:23:0e:2d:28:2b:18:d1:16:71:05:6f:16:8b:3c:
92:95:13:94:44:75:0e:38:c4:47:2b:c2:7f:7c:6c:
66:da:4e:35:30:eb:bc:4c:e3:01:8f:3f:18:e1:bc:
af:eb:b2:15:3c:9e:94:75:8a:8e:16:e6:b4:12:35:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:69:8F:6F:C8:D9:5A:7D:50:27:E1:9F:4B:56:0B:E5:C1:48:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4080::/46
Signature Algorithm: sha256WithRSAEncryption
86:22:6c:a0:0e:b8:81:20:cc:6b:0a:34:58:e3:92:38:1c:93:
45:53:ad:88:51:52:42:72:13:62:4c:b9:c1:04:60:4d:71:7e:
55:7f:07:f2:98:22:db:c3:bf:69:0c:b6:39:51:93:8e:6a:f0:
ce:20:d5:45:59:e0:34:67:ed:b3:24:30:ac:b3:71:1d:2c:52:
fd:34:d9:83:6e:8f:28:be:e1:0f:02:6a:3a:79:a8:60:c2:f5:
3d:ca:76:49:ec:3f:9e:e3:ab:3e:56:4b:2b:75:b4:0a:87:90:
ad:1c:cf:34:6b:33:65:9b:4f:c4:35:bd:91:3f:d6:66:52:c4:
f0:0d:05:07:f1:a7:44:86:c5:04:16:7a:2f:03:74:a3:3c:31:
40:e2:c5:e3:88:24:e7:79:6d:81:b3:52:60:af:83:86:24:2e:
a5:aa:80:e2:d5:a4:43:58:b4:85:47:6a:b0:d5:6c:33:b7:5d:
ec:4b:7d:97:09:91:08:f4:f8:a6:77:d7:1d:f6:45:a4:87:4b:
81:c6:9f:a6:50:12:7f:fb:d3:f3:04:c3:01:c3:ac:b4:d7:52:
ce:5b:91:2e:e4:db:25:51:db:21:0a:72:10:38:7b:39:83:cb:
89:2f:3f:f4:65:dc:00:83:43:e9:d5:2c:12:6f:cf:71:e4:3d:
0a:2a:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:50 2026 by rpki-client