Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa
File: d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa (raw, json)
Hash identifier: 26KSoQkxuO/JKXrukCNdB26NIdNTaOa0FSRLSN7/A+s=
Subject key identifier: 4A:ED:92:13:F6:25:14:FA:1F:EE:71:1D:39:97:0F:CC:0E:B6:4A:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46B780F336437D92B008DDBD98C28BED2EC62981
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa
Signing time: Mon 22 Jun 2026 02:30:09 +0000
ROA not before: Mon 22 Jun 2026 02:30:09 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b7:80:f3:36:43:7d:92:b0:08:dd:bd:98:c2:8b:ed:2e:c6:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:30:09 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=7774de2941e8a8a2ebd904e302579572bd606780ac2a664de8fdc36bf4ecd091, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:cf:bc:d9:6d:a3:6b:b7:04:8c:f0:9d:62:
82:ed:01:66:22:74:a9:24:94:16:fe:82:56:41:27:
73:c1:00:85:50:27:53:47:f6:65:64:d7:92:ca:7d:
a6:d0:a6:49:74:6b:6b:b5:62:02:a5:15:43:6d:a5:
cd:1d:36:6b:d8:ed:32:1c:54:5d:e8:80:e9:3e:dc:
16:26:e0:e7:c4:20:58:38:47:56:bd:6a:47:bf:ca:
1b:23:19:cc:fa:27:87:8f:e2:c4:6e:53:4c:da:c8:
b6:2d:d4:65:60:29:a9:f0:23:8a:39:38:a4:b5:66:
76:38:0e:6e:1f:b9:83:78:29:3e:08:9c:88:7a:10:
86:f9:47:d3:b7:c5:01:cd:af:df:16:a5:64:14:df:
8e:bf:db:dc:be:56:d3:af:18:6d:cd:21:ab:24:dd:
92:6b:4e:41:6e:fb:a2:31:c8:93:dd:84:51:26:db:
5f:df:ed:ee:08:a2:1a:ac:46:b4:0b:46:c8:9e:ba:
2f:4f:99:4a:09:1f:e9:fe:0e:c5:7b:5f:76:c1:8e:
8d:28:d5:06:4f:f9:c4:c5:43:35:24:5c:5c:b9:1a:
d9:bd:ff:8c:92:f8:ad:5b:cd:96:0e:a3:55:aa:2c:
61:8d:66:13:3f:db:69:d1:b1:b1:ff:dc:95:a6:4b:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:ED:92:13:F6:25:14:FA:1F:EE:71:1D:39:97:0F:CC:0E:B6:4A:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:22:ba:8d:88:42:90:7b:aa:4f:11:60:a3:ea:7a:b7:8c:46:
98:d8:a0:bd:c8:1d:bb:81:1e:8a:be:3e:8d:5b:c6:84:6a:d9:
f3:b4:dd:07:d6:eb:3a:8a:d6:b2:f9:a0:8d:f5:91:42:b0:e9:
9b:84:66:d2:27:6f:ca:38:db:d7:92:3a:ef:6f:be:2b:1e:19:
bc:3d:35:d4:d5:b0:ba:76:c0:ce:7a:28:37:b5:b2:4a:e0:b4:
d4:c6:52:7d:ed:c5:94:27:42:a8:89:84:37:ae:63:ec:94:0a:
ed:57:de:71:0b:b6:6c:26:d2:a3:06:85:43:9c:55:71:fa:bd:
39:e3:dd:a6:88:b8:22:5b:3e:b4:e5:a5:1a:33:e6:a7:4b:98:
dd:85:c9:d8:80:71:5c:8e:9c:da:40:97:5b:f9:07:dc:d7:19:
66:3f:23:14:ce:3e:54:ce:91:38:02:5b:ff:bc:ad:0e:ec:4b:
74:ce:72:52:2f:78:83:af:f1:db:77:f4:a1:ef:3c:0f:9f:f6:
b0:0f:51:de:0d:e2:ff:6c:9e:22:bf:8c:58:b7:8d:99:23:f2:
f4:a7:44:0e:c9:33:da:c2:48:fe:89:9f:7f:d4:e5:0d:0a:b3:
fe:13:71:55:7d:72:b2:c1:63:eb:cf:d9:0f:06:35:dd:55:51:
65:a7:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:35:04 2026 by rpki-client