Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa
File: 4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa (raw, json)
Hash identifier: FcXK4miWIcfzDDJngOtGdCbne0DKnwZdLYYParPSJUI=
Subject key identifier: 79:2A:67:BE:EB:64:7A:6C:F7:1F:A6:55:0C:D9:48:94:39:93:9C:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 017E8B337FDA439A14331F0F681062C884089065
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa
Signing time: Thu 30 Jul 2026 01:40:05 +0000
ROA not before: Thu 30 Jul 2026 01:40:05 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7e:8b:33:7f:da:43:9a:14:33:1f:0f:68:10:62:c8:84:08:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:05 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=eaad045034a71d887b90da40c4db7777cb92d44f8bd800abcd0ef6575425e2d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:01:f5:11:76:00:fe:41:b8:4b:87:cb:ae:
2d:41:9a:bd:5f:c1:bb:d1:7b:0b:c5:85:f3:68:a4:
24:5f:85:31:32:de:f9:a0:87:bc:a0:83:62:ae:ef:
be:21:0d:09:20:f4:66:e2:0d:51:5c:02:7a:7d:65:
fc:a5:7e:d5:e7:8e:83:65:c5:4a:87:82:d9:6c:f7:
65:cd:e1:05:17:0e:28:e8:ce:2a:6e:5b:92:a5:75:
cc:af:c6:2e:d7:63:8f:ff:44:32:16:02:e6:c0:b2:
ed:38:87:82:d1:06:ca:48:ca:9b:5f:86:f8:05:3d:
50:c1:5e:7c:55:63:68:21:9b:20:51:b0:23:bd:6a:
4d:a5:47:dc:c1:3a:e7:88:ad:ef:2b:f0:75:1a:90:
a3:b5:0b:5f:99:48:80:22:d6:85:3a:f0:38:7b:0e:
66:e2:8f:a3:df:85:9e:d6:95:4c:4d:d8:58:55:2b:
65:60:f3:c1:0c:92:6f:0c:f3:c7:e9:32:f1:af:e4:
fb:08:9a:9b:24:af:cf:25:b9:4e:6e:05:dd:09:2b:
65:70:19:6b:9b:3e:81:43:a2:8d:69:43:f9:57:62:
c3:78:b1:3e:3c:40:63:60:a5:71:e6:a7:fd:fc:01:
35:d5:02:6f:bd:54:b3:35:58:a1:8c:c0:a1:5a:8e:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:67:BE:EB:64:7A:6C:F7:1F:A6:55:0C:D9:48:94:39:93:9C:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5000::/40
Signature Algorithm: sha256WithRSAEncryption
1e:00:ac:07:8d:14:11:06:98:8c:29:35:f6:12:fe:e6:ec:c8:
4c:c3:83:d7:bf:69:1f:8b:67:be:4e:24:0e:2b:b1:0d:56:47:
ea:d7:82:ea:69:2a:98:cf:e7:e4:f4:d5:73:21:4b:39:2e:52:
ff:99:32:e3:91:2a:71:88:67:0d:33:4c:a7:25:fd:e1:2d:7b:
fe:e1:a0:63:27:b3:6c:bc:f5:6c:e0:6b:15:01:39:96:1a:29:
fd:41:08:e3:fd:2c:35:74:c9:f9:b2:f2:c3:fb:32:7a:c4:b8:
ea:71:8d:16:ff:e8:77:e0:98:15:b1:0d:fc:39:19:21:6d:c1:
2b:12:fa:8c:a1:a0:d5:2a:f4:56:d1:b4:91:0b:08:d5:76:08:
e9:7e:5c:1d:06:86:2a:7e:dd:95:8c:85:db:6c:0b:de:a0:6c:
88:32:96:70:22:b1:63:49:b3:e7:9d:9a:f9:08:97:5d:49:1c:
df:fb:7a:43:45:53:60:45:79:43:de:d2:04:bb:50:57:56:15:
69:65:52:83:e6:b6:4d:c6:0b:b4:a7:77:2c:44:af:2b:bb:ce:
0b:bb:71:eb:59:07:15:a1:80:27:14:1c:e8:a7:7f:c6:eb:ca:
b0:11:8d:a4:cb:69:46:e0:ad:c0:99:83:0d:f8:02:1c:2f:44:
f7:2c:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:13:14 2026 by rpki-client