Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
File: da60d3f0-c039-4ca6-acc9-9f7139145100.roa (raw, json)
Hash identifier: Agf+dnGsgBIjEwziAbwfj7oQkjXMvLJBP/TRQLPsDoY=
Subject key identifier: 6C:6E:DE:53:0A:00:E2:8E:89:14:06:F6:76:F2:4D:BE:7E:06:94:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6059A6E55AC05FE88D31ED450081444E0021D0E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
Signing time: Thu 16 Jul 2026 00:40:28 +0000
ROA not before: Thu 16 Jul 2026 00:40:28 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:59:a6:e5:5a:c0:5f:e8:8d:31:ed:45:00:81:44:4e:00:21:d0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:40:28 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=50e1574a3a4369f7358e570ed14ca59dc8c9e6b7ca02a4632f44723b7d900a2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:94:1b:de:cc:c1:14:7b:22:68:58:83:e8:
5e:b5:0a:be:57:ae:16:a9:47:56:5e:ac:4a:7c:2e:
71:d8:92:c4:9c:62:07:16:20:23:14:6a:d5:43:a2:
92:e1:bf:9c:33:2a:78:1b:6d:1a:e0:ed:b2:85:e9:
3c:06:2d:0e:1e:14:3a:22:74:46:ec:59:bf:99:10:
44:c8:fb:8c:59:0f:7f:89:56:01:88:01:f7:47:08:
1a:99:5f:f5:2c:49:39:78:10:d6:be:c6:95:b0:67:
de:8d:28:5e:fd:71:eb:1a:8f:ce:03:f1:77:7b:d8:
33:33:a7:ac:92:6c:5e:3f:ad:cd:64:f2:54:81:96:
70:33:11:d7:41:51:57:14:9f:33:40:2c:64:33:24:
fe:42:b1:99:f8:75:2f:d1:c0:b6:e6:78:ce:ec:8f:
fa:67:dd:b0:2c:a0:b5:4e:70:c3:59:ed:c8:39:b8:
7f:71:65:31:82:ee:79:25:e9:76:e1:f8:69:cb:9f:
60:52:ee:2e:e4:eb:cb:ea:e3:0a:d2:c5:ba:2b:73:
25:94:1f:8c:02:3b:43:24:5d:96:c1:38:68:68:d7:
31:ec:a5:03:6f:b0:80:b4:47:af:a9:e8:0d:9b:e2:
8f:16:75:0d:6d:1b:69:d6:7a:44:75:1e:53:2d:b0:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6E:DE:53:0A:00:E2:8E:89:14:06:F6:76:F2:4D:BE:7E:06:94:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8080::/46
Signature Algorithm: sha256WithRSAEncryption
ba:49:aa:48:4e:ed:9e:fd:1d:51:5e:88:d0:a5:22:ba:b7:9f:
dc:b3:79:f1:02:c7:cb:cf:dd:06:3c:f1:7b:9f:e5:cc:31:df:
4e:30:d7:33:06:e2:e4:4f:ea:13:24:ec:18:75:fb:37:fb:fc:
3b:c2:35:df:a0:19:dd:a9:01:15:98:68:70:71:33:38:c6:d5:
71:dc:ef:6e:b0:c5:fd:06:bc:8a:c6:67:e5:6b:23:dd:b7:bc:
ce:8c:c5:e8:49:f3:cb:49:20:28:75:f5:bd:3b:fe:d4:70:4f:
00:e1:ea:54:24:bd:9a:be:09:1d:cb:4b:41:43:47:fe:5b:46:
58:7e:33:b6:8c:64:0b:88:af:bf:e1:7c:52:c8:02:0d:09:fe:
cb:e8:3b:20:16:52:e2:0f:b0:84:0b:e6:ed:e1:6a:30:aa:fe:
72:bb:75:5d:0a:c6:ca:4b:c3:42:cb:8d:42:fa:47:8b:3c:62:
12:73:28:17:9e:16:1a:ba:5a:12:50:77:35:0c:5a:06:03:99:
f6:49:fc:17:4a:02:6d:2f:db:12:86:8c:9c:4d:fb:a2:21:d3:
a9:6b:e1:35:7f:9a:fa:52:d6:eb:10:f5:b3:87:db:c9:ad:20:
0a:26:9b:43:30:2c:51:9f:96:3f:69:2f:5c:3f:17:0c:df:78:
30:4b:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:25 2026 by rpki-client