Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa
File: da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa (raw, json)
Hash identifier: 0fEFm5zGtsABZsdWYdzHgp3mVJrUudKI90CvbhJy/bc=
Subject key identifier: 38:35:08:54:10:3D:9C:A9:D0:B8:D4:AC:6A:2E:37:58:24:5B:21:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 122BB86897AC4D406759A4703A69202A6D698702
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa
Signing time: Mon 22 Jun 2026 02:40:25 +0000
ROA not before: Mon 22 Jun 2026 02:40:25 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2b:b8:68:97:ac:4d:40:67:59:a4:70:3a:69:20:2a:6d:69:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:25 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=0cc8c2424b206d4674d11e1de505bc14e6e1eea8a2a050e6975af907544207ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:57:68:0c:69:e8:93:b6:90:68:94:34:41:
9b:b8:87:f6:f9:eb:88:84:da:c6:96:15:51:cf:8d:
42:27:db:88:09:58:f2:31:a3:12:50:25:d9:f1:8d:
20:41:16:d6:10:e3:0a:59:76:b5:d9:fb:ae:48:38:
96:68:ea:db:1b:6f:8e:4c:2d:15:cb:1f:f8:07:1c:
f3:84:7e:b8:c2:f9:83:a5:ca:bb:a3:d1:1f:0c:b7:
7c:4a:5d:0b:34:74:d1:9a:fa:db:58:02:0a:15:6f:
1f:e1:2f:c8:80:71:49:94:a8:f2:3b:e4:8b:ef:ea:
6b:1c:f6:60:c0:8b:13:22:f2:e3:d8:b3:de:1b:8e:
62:a2:0d:7c:fa:03:0f:51:e7:5b:e1:80:e2:8b:0c:
52:1f:d8:06:d3:b0:ed:5e:91:cd:0d:3d:58:52:d3:
e2:2f:5c:39:e6:90:a4:85:83:ec:f9:c0:cb:8f:ae:
ec:90:90:71:ac:f0:38:09:5d:e5:eb:81:d5:3d:5a:
6b:b6:0a:e5:22:2d:79:b8:72:42:b4:ac:54:08:23:
32:96:1f:a5:69:e6:5e:2c:60:c7:59:b4:ab:44:5a:
3a:ce:e6:da:4d:5b:36:89:3b:a6:ca:be:a0:6c:7c:
38:99:d2:e8:25:dd:e9:76:77:04:44:2b:c9:88:16:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:35:08:54:10:3D:9C:A9:D0:B8:D4:AC:6A:2E:37:58:24:5B:21:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:6040::/48
Signature Algorithm: sha256WithRSAEncryption
5f:fa:fc:84:d8:b8:e7:64:3d:7c:37:cf:29:f1:c3:2e:6b:56:
45:a4:2a:f0:d2:7d:56:ce:42:40:23:d3:83:b9:14:0d:1d:5f:
2f:af:e6:b6:fa:1e:6a:f6:44:45:2c:fa:9d:64:a3:68:24:67:
17:5c:c1:4f:c6:de:3b:d8:ed:d7:0e:11:3f:ef:e4:2e:e6:f2:
42:7e:c0:dd:61:e3:94:b2:9d:5b:7f:c6:08:a5:79:e1:e2:0c:
43:59:2d:82:8a:57:ee:bd:52:86:b5:67:8e:bb:38:9d:32:96:
0a:d3:b3:d6:4e:bc:83:fd:0a:02:1f:ec:1f:d0:2f:10:7c:bc:
79:e4:d1:d9:a8:2c:8c:30:33:b6:c2:82:a4:50:47:38:bb:69:
a6:35:e6:a9:dd:bc:27:fb:07:cd:c8:14:5f:65:31:f1:bc:cd:
da:fe:7f:ac:37:ca:7b:94:6a:01:a5:1e:ca:a2:54:db:66:4d:
de:8c:5b:9f:4b:27:f6:64:98:8d:07:ea:97:53:53:02:89:af:
d8:4c:e3:7f:37:91:90:9b:1f:76:94:2f:02:5d:fe:42:0a:0a:
18:39:ac:a1:f0:cb:95:df:cb:c7:48:68:16:6c:ed:26:7e:e6:
54:5f:6b:85:1a:e1:24:f0:39:a4:08:db:af:c3:23:a3:25:c2:
47:67:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:33:03 2026 by rpki-client