Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
File: 002c315b-3412-464e-b865-645f657f136d.roa (raw, json)
Hash identifier: bbb9h2sySrCTR5WThIFCRjRf2srwp6V7gEueuofCqJ0=
Subject key identifier: B3:4A:82:70:EB:BD:50:F7:84:C7:31:30:9C:FB:53:72:F5:7C:C7:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4768E9C5CD8E9CB02F396CEB342BFA7EE7677705
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
Signing time: Thu 30 Jul 2026 01:30:17 +0000
ROA not before: Thu 30 Jul 2026 01:30:17 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:68:e9:c5:cd:8e:9c:b0:2f:39:6c:eb:34:2b:fa:7e:e7:67:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:30:17 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=017f5f8a70cd9d96d2d2e1572fdc375f863a1d519c5fd51d28a7b9b1e4447ca5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:42:bc:72:6c:05:dd:2c:6e:c4:f3:5a:fa:
94:df:21:ef:ec:15:55:fd:ee:44:88:26:76:fb:f0:
10:37:d2:f3:ba:c2:b5:47:b6:f1:bb:f1:4d:b8:3d:
ce:70:b6:32:53:a3:23:f9:27:33:91:7d:7e:81:81:
d4:20:71:f8:f4:35:f9:86:8e:3a:07:c6:b6:96:4a:
9b:19:f9:7a:6c:f7:05:3b:7e:cb:8d:66:b0:42:86:
77:2e:7f:96:63:a5:ae:38:78:cc:03:84:eb:b4:49:
c3:d5:a8:a7:2c:0a:a6:57:7e:88:13:2b:d8:88:6b:
59:ad:72:bd:dd:6f:07:fa:9c:cd:fe:a1:87:06:c3:
1b:77:c5:d9:80:0b:91:c1:12:52:b8:9d:24:91:a4:
86:44:ec:9c:59:1c:ba:86:05:e6:ee:71:44:48:bb:
53:1e:a6:20:d1:da:39:91:7c:c6:1f:2f:e4:4d:d4:
cb:af:e1:8e:c3:7c:f9:ec:52:95:48:b4:49:ac:e9:
7a:e3:b1:b0:a7:fd:a6:4d:29:b9:e4:4a:14:d5:b9:
fa:14:2f:f6:73:ac:53:83:5f:e7:5d:7c:43:d2:dc:
6e:cc:d3:08:10:bb:c4:ec:41:f1:a8:b5:5a:2f:2f:
de:87:c1:68:f6:db:8a:ec:28:9b:3d:71:67:1c:d5:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:82:70:EB:BD:50:F7:84:C7:31:30:9C:FB:53:72:F5:7C:C7:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079::/32
Signature Algorithm: sha256WithRSAEncryption
9c:f0:d1:f6:0f:c7:95:31:bd:6a:ab:7b:5b:a6:05:2c:27:23:
a5:4b:41:ca:02:59:f7:55:72:13:3b:c5:e8:16:e1:13:8d:e4:
62:3f:cb:91:dc:7f:8b:27:33:31:fd:ba:09:28:fb:3d:74:fa:
e1:39:13:aa:0e:8c:8d:72:69:0a:6b:bc:ea:4d:54:e6:04:7c:
6f:fa:ed:57:76:a6:bb:1f:0c:c9:93:ae:12:81:e2:2f:af:e0:
94:e8:18:3a:c0:96:3d:8b:e5:84:9e:9a:8a:ec:50:79:23:8d:
0d:59:8b:7f:71:92:5f:57:07:45:cf:26:53:9a:24:6b:b4:0a:
9b:01:65:ea:19:8d:f5:4c:a5:95:89:87:73:ab:48:e6:6a:2f:
e8:af:fa:03:f3:2b:e8:0e:49:e4:23:20:73:be:2a:c4:60:14:
95:2e:78:ab:52:45:ed:c5:54:26:51:32:4e:77:cc:76:3e:31:
f2:a1:48:fe:a1:c4:68:06:72:a4:d0:67:ae:8b:b7:cd:e6:85:
02:56:4d:b4:1e:09:11:08:3c:95:4c:42:5c:8a:f1:bc:b9:dd:
51:c3:06:77:69:9a:d4:5c:9f:24:d4:88:93:db:d2:f3:1c:58:
39:49:07:b9:99:8f:7a:91:7a:33:f4:b7:22:de:3a:a7:9f:fc:
93:b4:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:11 2026 by rpki-client