Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa
File: dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa (raw, json)
Hash identifier: jR9DyerhGpOGwiHCfJ3jDShYQvq2JT9NRmvB2zAAn0I=
Subject key identifier: 4C:F2:B3:2E:F2:A6:C0:A2:C0:37:50:01:84:98:84:6E:68:A6:FD:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7ABBEC567622969A6FCFAEBBF1A3C30C8F6F328D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa
Signing time: Thu 16 Jul 2026 00:30:16 +0000
ROA not before: Thu 16 Jul 2026 00:30:16 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:bb:ec:56:76:22:96:9a:6f:cf:ae:bb:f1:a3:c3:0c:8f:6f:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:30:16 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=83304d8d76bb3498bbb229cb706b6c041d0502858b7ead80090f539ff7c20709, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:14:bb:76:c6:11:0f:34:da:3a:b5:2a:59:
a9:51:23:80:57:de:a0:4b:cd:2c:10:69:78:b6:f3:
2c:87:83:bb:4f:56:6f:e9:86:f4:fb:bd:6c:5c:2e:
54:fd:ca:01:48:d2:3e:f6:8e:12:de:f8:e0:20:92:
c0:19:80:4b:73:e7:20:43:eb:64:e4:ea:ae:40:f6:
78:e0:35:60:d2:c6:4e:06:7a:bf:63:4d:2c:ec:72:
5a:bf:ed:51:89:19:c0:23:dd:6a:00:62:42:65:ea:
1f:54:ba:ae:e2:41:41:4a:24:e6:6b:d3:4c:b1:d7:
e7:d6:65:8e:cf:b7:25:a2:64:15:95:e5:ed:bb:2d:
d3:1e:a6:57:76:ef:71:f7:e6:d4:00:57:f9:2a:a0:
cc:5f:a4:56:76:70:7a:e9:69:26:6a:04:d8:54:2d:
cc:f6:a7:c1:7b:23:f0:14:f3:fa:dd:bf:f2:45:90:
33:29:e4:38:2b:03:c4:6f:25:4c:b9:0c:e4:9f:00:
f5:a3:b2:47:2e:00:37:c9:d8:01:32:5c:19:78:76:
c1:99:dc:fd:23:d7:2c:84:54:de:c3:77:7b:e5:c4:
ba:53:5f:b3:50:86:7d:da:2b:74:d9:3a:1b:5b:6a:
45:9b:5e:68:b6:de:5c:a6:e3:9e:c0:5a:2c:1b:c8:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:B3:2E:F2:A6:C0:A2:C0:37:50:01:84:98:84:6E:68:A6:FD:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6080::/46
Signature Algorithm: sha256WithRSAEncryption
30:33:9d:98:ef:5d:d8:f1:db:7e:cc:88:70:a3:37:9b:86:b6:
a4:93:f4:cb:fd:f2:e3:3b:d3:cb:b7:4e:f0:6d:e1:18:85:d7:
29:4e:73:33:d3:36:b4:ab:f7:83:4b:b1:3b:89:7d:11:a4:80:
65:58:be:dc:d7:d8:66:8d:fb:c8:67:58:ae:59:45:c9:06:7e:
91:83:9c:56:c4:82:cb:33:bb:35:93:34:be:74:43:f5:16:8e:
57:35:e4:16:d6:0d:38:23:2a:8c:ea:80:44:df:77:a0:92:be:
41:39:22:79:5e:63:7e:a8:67:94:45:b3:6c:a8:14:f0:cc:fa:
88:c8:b5:a8:c6:df:00:e5:ad:81:13:de:30:e3:55:09:2a:24:
e9:bc:67:78:90:df:07:17:b1:fa:3f:18:34:60:c9:59:38:66:
70:c0:18:8c:06:a8:4d:c4:99:c6:5b:c8:4e:a4:96:13:c0:fc:
24:0d:d1:a4:45:77:cc:38:1c:60:71:3a:40:85:42:4d:a9:e5:
1b:23:27:32:b8:31:c6:53:d9:25:20:f6:45:73:ed:60:1d:63:
e5:d5:2c:e0:b4:1e:f7:9a:20:8c:11:8a:7d:b2:f6:67:e4:6f:
21:6f:0b:54:5e:1e:62:1c:d6:12:f1:9e:47:a4:70:25:49:f3:
33:99:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:18 2026 by rpki-client