Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b52e4d6-5239-4357-8822-9a46eaf58876.roa
File: 0b52e4d6-5239-4357-8822-9a46eaf58876.roa (raw, json)
Hash identifier: Nq8GiYm7gWCHgVzkaQkasf0HmDcAZlVDlQzlxEfMEoY=
Subject key identifier: B9:67:40:4B:25:C6:42:EF:08:47:94:4B:0E:16:72:1F:B9:C9:56:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E1DF8F91D83C4D7118848CE6FCBCAE7CAA7C7E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b52e4d6-5239-4357-8822-9a46eaf58876.roa
Signing time: Tue 28 Jul 2026 18:19:17 +0000
ROA not before: Tue 28 Jul 2026 18:19:17 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1d:f8:f9:1d:83:c4:d7:11:88:48:ce:6f:cb:ca:e7:ca:a7:c7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 18:19:17 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=1476f8247f5344aff3ea05aeffdd5076cd5fadd18c8dbe232ecb9e0ccefc4372, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:41:3a:51:ae:da:95:8b:b7:e5:69:ca:9c:
97:9c:7a:bd:47:de:8f:8f:8c:32:79:01:3f:d4:91:
74:d4:32:dc:c2:02:8d:3c:71:a1:13:00:85:10:ad:
a0:bd:e1:14:73:5f:d5:2d:27:40:94:ab:a7:e4:38:
0d:7d:f6:20:6a:6f:54:39:a3:83:1c:86:07:0e:89:
9e:03:12:04:4d:97:e1:c0:94:1a:39:a0:da:4d:e1:
87:a0:ae:1e:a3:d7:bb:36:99:dc:ce:84:a5:40:67:
4a:e4:59:b8:80:35:c4:3d:d0:c2:7f:a8:8c:b5:06:
f6:d1:54:95:bb:81:86:d2:88:95:d4:ce:b4:4a:41:
91:a3:23:95:85:5d:34:44:16:93:e5:25:0a:1f:5a:
ff:ce:a3:3b:d7:fc:24:96:fe:54:46:d0:9a:c7:11:
e5:ec:c8:70:90:d9:4d:96:d1:89:35:f8:26:1d:9a:
4f:0c:07:51:b8:e2:fb:43:85:1e:6c:af:98:74:05:
89:39:72:47:ee:05:c8:e2:40:b5:e6:f5:84:d5:e0:
ad:1e:2e:a4:48:8d:b8:48:60:e1:6c:6e:3a:64:9f:
13:fb:1c:a5:6c:62:90:b9:ac:8d:4a:7b:ae:d6:4b:
f2:e0:62:40:8f:24:62:da:34:68:05:27:f7:8c:6a:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:40:4B:25:C6:42:EF:08:47:94:4B:0E:16:72:1F:B9:C9:56:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b52e4d6-5239-4357-8822-9a46eaf58876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:6000::/40
Signature Algorithm: sha256WithRSAEncryption
88:05:4b:36:e6:db:2f:ba:26:47:25:72:82:12:ed:ce:9c:72:
30:51:66:06:26:da:94:df:7d:fe:b7:db:e8:24:c0:63:9d:aa:
a5:7f:25:14:2a:8e:91:71:1b:d6:8b:a4:d2:e8:c0:a9:57:c3:
70:7f:71:2d:59:f3:d1:8f:1b:f4:c1:ba:c0:3b:38:ad:2d:a0:
84:3a:64:df:4d:17:5d:8e:f0:a3:33:46:60:b3:fa:12:57:2a:
31:c0:1f:de:81:0c:97:df:46:3c:ed:18:e2:ac:78:51:1a:be:
b8:fc:c7:33:e6:0f:4e:f3:2b:e8:b0:04:46:d3:23:13:84:41:
ca:90:73:a7:e7:ae:5f:87:1b:9c:d7:3d:ba:9c:94:4f:12:42:
5b:db:28:4f:c6:63:e0:64:5e:5f:50:63:d5:cb:61:d2:ed:7b:
78:79:4d:4c:ee:6f:82:6e:54:73:57:a0:ab:41:78:4b:84:df:
11:3b:7b:3a:e6:49:b7:33:10:33:1a:da:e3:9e:91:8e:36:2d:
55:8a:3c:7e:fe:1e:14:81:d3:b9:4d:bc:de:7c:d4:22:72:a9:
42:ce:0f:87:df:13:2a:99:e2:a3:db:91:7f:6b:6e:b0:d6:de:
46:2d:df:2b:60:62:62:49:2d:2b:2a:60:56:47:fc:c4:eb:c2:
33:cb:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:31 2026 by rpki-client