Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/02484022-c79f-4464-827b-2127faff0b06.roa
File: 02484022-c79f-4464-827b-2127faff0b06.roa (raw, json)
Hash identifier: xwqbFJuCwWrNVXzUa88LKLlIpUTk96fseJJZ0uWhjyo=
Subject key identifier: 75:18:87:27:C8:A9:09:E2:9A:20:B4:30:96:E4:8E:F8:6D:A4:AD:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05F7E767BE6087EB1CC5051E0D1224873EA13C49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/02484022-c79f-4464-827b-2127faff0b06.roa
Signing time: Thu 30 Jul 2026 01:40:36 +0000
ROA not before: Thu 30 Jul 2026 01:40:36 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f7:e7:67:be:60:87:eb:1c:c5:05:1e:0d:12:24:87:3e:a1:3c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:36 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=4f05356276af672d97024d08aa85ee24b4b379d360af19b2931077a01bb10d5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:c6:44:b1:29:51:11:9c:b5:1a:db:4c:04:
53:9b:d3:71:6e:14:6d:ff:b4:65:50:c3:00:71:c8:
94:1f:f5:97:b4:31:5e:d7:46:d8:9d:15:37:c0:bb:
f4:ec:d3:bd:87:b0:c5:ba:8c:c4:dd:0c:5c:1e:9f:
6b:8b:4c:e4:4d:b3:bd:98:ba:85:78:cc:66:ca:9b:
7c:0e:aa:db:a0:2a:5e:14:eb:bb:4f:f8:74:ab:1f:
9f:8f:02:f4:40:24:a7:cd:f0:96:6f:30:18:5c:8c:
f8:0a:58:da:74:6f:55:4c:c2:eb:a7:45:f1:3b:48:
dc:e1:bb:8e:ef:52:7a:29:e2:dd:d0:8d:a6:85:6d:
c7:86:59:65:74:29:84:6e:80:e4:fd:1e:80:ca:04:
d0:37:ed:fb:b2:0b:f5:fe:eb:47:2f:a3:36:be:06:
1b:dd:b2:a1:89:5d:f9:1c:f3:e9:44:13:b6:1b:55:
92:73:2b:14:3f:6b:7b:91:be:9b:df:e1:f4:26:39:
4c:7d:56:67:ab:a2:83:5d:7e:1d:7c:b5:52:32:21:
a1:9d:ac:5b:e5:d2:6d:76:10:f6:4c:ba:c0:60:a8:
9f:e5:9d:e5:bc:38:3e:1c:90:1b:c3:65:75:6a:e0:
e0:af:47:15:bd:48:ce:21:74:e2:5f:b0:71:6e:7f:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:87:27:C8:A9:09:E2:9A:20:B4:30:96:E4:8E:F8:6D:A4:AD:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/02484022-c79f-4464-827b-2127faff0b06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030::/32
Signature Algorithm: sha256WithRSAEncryption
90:49:55:bf:75:ac:10:cb:c4:2e:49:1e:de:0b:0e:c4:52:ec:
de:cc:f0:7b:77:03:d4:f2:df:4c:c6:c7:98:3f:4a:33:98:d9:
c4:97:3e:16:37:72:cb:9f:9f:6b:68:dd:34:33:6e:c5:ab:c2:
3b:81:1e:2c:77:2f:13:fa:ca:34:61:62:76:ef:80:4f:50:e9:
4e:2b:20:3a:27:63:64:04:07:03:55:5b:08:bf:cc:75:64:dc:
d3:de:58:f5:1d:31:35:b3:15:b7:25:de:f3:a9:1e:44:a9:41:
fb:b6:48:7f:ff:04:29:5c:29:e2:4e:d2:bf:9c:61:76:ce:2c:
15:26:57:a1:c1:63:0f:0f:f7:94:34:f0:71:30:7a:00:b2:5f:
fa:57:b6:02:ad:89:03:54:b3:1b:39:b4:6a:9d:a9:06:b3:46:
0b:6f:47:4b:38:d8:73:da:bd:a3:16:a0:77:7d:5f:da:bb:87:
ba:a9:06:f4:ca:1d:77:d1:dc:d8:c1:95:21:f2:0d:19:db:1b:
62:14:ab:2b:56:1d:95:fa:36:84:5c:b7:92:28:a8:df:26:33:
7c:57:3b:6c:f6:92:fe:5b:45:fb:e9:91:0d:4e:8c:80:1a:c5:
ce:f1:d6:ac:bd:64:c5:f4:a8:d5:25:29:60:a0:f4:21:00:62:
fa:8c:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:31 2026 by rpki-client