Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de8b1a9f-0a06-4e9e-a49e-a5abeb7a4707.roa
File: de8b1a9f-0a06-4e9e-a49e-a5abeb7a4707.roa (raw, json)
Hash identifier: 0GmVrI3NozDIAzWBoJ6J6KTTdvpNJRLqJtZrvFlWDuU=
Subject key identifier: 83:18:BA:FF:71:82:97:32:09:9F:2C:CE:B9:AA:77:3C:1A:4A:2C:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4FAAFBC84B82F13278689CCFBCFEC863BFA5E4D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de8b1a9f-0a06-4e9e-a49e-a5abeb7a4707.roa
Signing time: Thu 23 Jul 2026 15:21:08 +0000
ROA not before: Thu 23 Jul 2026 15:21:08 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:aa:fb:c8:4b:82:f1:32:78:68:9c:cf:bc:fe:c8:63:bf:a5:e4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:21:08 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=45ce18360bc1060586ff4b4e0bbdee62b2318492e02898be0be85211ae18546d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:c3:db:33:ac:d7:cc:64:83:8c:c5:95:bc:
1e:05:81:54:d9:0f:83:c2:0f:47:69:44:13:71:13:
74:7d:53:bd:4a:ab:91:00:90:ac:95:09:58:e3:d0:
fd:a1:a2:28:2a:ba:2c:72:13:d0:c6:29:93:19:7c:
e5:c2:b6:92:8f:96:20:92:bc:82:b2:a0:23:ad:3c:
d1:48:65:d2:72:19:72:2f:d5:7d:03:19:a2:b3:db:
a2:52:60:b4:e9:00:84:4a:0d:ee:1c:78:ff:3c:ba:
85:7a:b9:e2:15:02:c4:2f:ab:fe:88:5e:7e:66:70:
21:1b:68:0a:f4:b3:20:05:d7:f5:80:43:11:c0:b4:
38:04:b7:fd:81:88:f0:f3:98:73:f1:8f:e3:d0:38:
0d:82:20:73:04:72:d0:3b:c0:46:84:d7:46:c5:7d:
81:95:3b:71:af:74:f1:12:9f:74:0c:46:86:7b:66:
f2:7d:f5:a0:38:6f:da:68:3b:7c:9e:99:bc:14:8a:
3e:23:78:71:ba:7f:9a:82:20:9e:82:24:2c:1f:59:
c7:fc:4a:41:4d:7a:41:ab:01:69:b5:03:fe:0f:57:
c6:f8:a0:44:ce:7a:57:e1:f7:92:e3:e1:bc:99:4c:
6f:ab:08:4a:49:1c:73:64:f0:ac:ad:b1:a9:6e:16:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:BA:FF:71:82:97:32:09:9F:2C:CE:B9:AA:77:3C:1A:4A:2C:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de8b1a9f-0a06-4e9e-a49e-a5abeb7a4707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e080::/46
Signature Algorithm: sha256WithRSAEncryption
7c:eb:3a:78:da:9e:19:ae:ce:9f:60:d9:80:c1:90:70:63:e9:
39:33:1b:ad:2b:b3:84:85:72:0b:e0:41:e4:eb:51:b8:f9:e1:
c6:1d:46:88:8b:55:d3:a3:36:7f:ff:b3:ac:ae:79:b4:73:f6:
10:4e:6b:c0:6d:a2:0f:66:3b:b3:2f:69:94:84:3b:0b:70:0f:
3c:2e:2f:fd:2b:f4:56:61:49:39:2c:a1:a2:45:43:36:2e:c9:
6a:29:f6:30:93:80:5b:91:cf:69:36:29:f2:fc:c6:f7:7d:04:
d6:5a:3c:f2:f3:31:c4:16:46:61:eb:50:b9:c2:8b:6d:ad:a5:
46:d1:f1:27:b4:8a:e4:2a:94:58:bd:16:79:e3:5a:d8:09:53:
92:66:b9:f7:10:33:55:b8:0f:e1:cb:67:d5:ca:47:2e:35:69:
e6:90:47:1a:b1:5a:2e:fd:d8:1b:bd:77:90:c8:3a:15:ca:9a:
5b:d7:ea:5c:2a:c5:9a:85:66:8b:72:95:9b:2e:45:10:cf:94:
90:d0:e5:99:94:5d:54:ca:48:91:53:a0:0c:6b:9b:29:5e:4d:
9e:b3:e7:98:b7:fd:30:f7:51:a6:b3:b3:f4:92:64:61:39:1c:
16:ed:f0:55:91:4b:5a:4e:44:2f:fa:6b:64:33:79:06:3a:bb:
f1:b1:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:43:20 2026 by rpki-client