Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
File: 11758a9b-0e07-4929-92b2-ff867af4fa4f.roa (raw, json)
Hash identifier: Ak/4rrf6O48hGRepVqcZ/+H+KgZ8VsBL2U9H6VhqCSE=
Subject key identifier: 6C:61:AE:81:95:D9:AB:43:AB:84:74:3B:2C:2B:BA:0B:1A:12:22:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E9876918AC7D2B958DE72F5C7B0B2DF7421EB03
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
Signing time: Thu 30 Jul 2026 01:30:12 +0000
ROA not before: Thu 30 Jul 2026 01:30:12 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:98:76:91:8a:c7:d2:b9:58:de:72:f5:c7:b0:b2:df:74:21:eb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:30:12 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=b73936a39dc689408521583e522329d13b14a5a3d75294dc6bc01981f2d491a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:e8:53:d2:8d:16:f6:bc:48:2d:f3:08:54:
f4:78:8d:78:0a:02:43:af:6f:54:87:6e:69:db:0b:
f2:85:47:bd:0a:8e:12:78:f0:0f:76:69:2b:ff:64:
d7:87:c3:df:a3:d1:b8:1c:7d:f1:57:bd:5f:37:00:
14:c7:c1:c8:db:64:26:15:f7:85:f5:1f:d0:ae:72:
2e:95:76:64:7f:41:8b:44:10:19:05:55:6a:aa:b0:
b4:1a:73:91:a9:6c:95:b4:2a:ed:40:b8:e7:37:a7:
ac:b1:06:19:24:4c:ca:18:e7:26:8b:54:9d:ca:77:
30:c2:2b:76:1b:df:31:6a:7a:96:17:7a:f7:b3:bd:
f0:cd:28:43:dd:a3:c3:3c:17:a8:a4:31:7d:1a:63:
c1:9e:9e:b4:82:f2:c5:39:66:e8:8d:4d:37:a1:c3:
a0:92:0b:c8:db:74:bf:f1:6a:cf:05:56:f1:e8:ef:
3f:89:2c:4f:6a:a3:e7:91:d4:ac:c3:71:3f:35:12:
ce:5e:0c:ac:2b:ed:3c:09:94:8d:72:48:11:d1:72:
1c:cd:88:52:31:2a:09:b8:86:65:10:f6:3b:54:de:
c6:6b:ec:4f:13:43:9a:d5:68:e6:ff:23:13:3d:15:
20:15:81:b6:83:b7:e7:a5:ca:d6:3d:f8:cc:78:3e:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:AE:81:95:D9:AB:43:AB:84:74:3B:2C:2B:BA:0B:1A:12:22:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
49:8c:f1:c4:f1:4d:b8:34:53:b5:6b:8a:29:8b:61:2c:98:d8:
fe:03:f2:24:31:0e:ab:6c:cf:f3:44:c8:03:59:2e:c0:d6:51:
db:77:c5:d0:29:4b:79:42:3e:22:63:8e:47:1d:40:47:b2:36:
fd:8a:37:29:97:15:b9:de:36:21:5b:55:34:5a:e6:84:75:fd:
67:44:0d:fd:53:c6:c1:5a:5f:a6:cb:7b:2f:d9:0b:b0:d1:32:
3e:a0:9a:60:43:99:38:01:23:da:2c:8f:88:c8:44:b0:f1:bc:
79:2e:b2:ec:b8:c6:e9:19:50:e5:3d:dc:00:1e:f6:76:30:6d:
e1:24:68:96:78:d1:41:64:b1:4a:fe:7f:5c:43:ad:9c:af:20:
bf:f1:7f:14:54:d8:d4:72:56:0e:ec:4a:26:fe:6b:45:97:87:
e8:78:70:74:9f:89:3a:9a:40:e1:13:67:bf:ec:99:93:b1:85:
9a:bd:04:42:41:4b:2f:b5:21:52:b4:ea:a3:f4:6a:d7:37:c4:
27:f7:0d:ef:fb:68:fd:05:85:17:4a:3c:3b:5f:d2:64:a7:3b:
08:03:30:3e:b7:ad:5f:cd:da:93:64:ff:99:e6:d2:93:f4:e0:
41:5e:16:15:21:40:a2:0a:71:ec:f2:17:3c:5a:e2:8e:17:1b:
0a:b5:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:09 2026 by rpki-client