Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/595250c3-e9f2-4e23-9779-87c47497f520.roa
File: 595250c3-e9f2-4e23-9779-87c47497f520.roa (raw, json)
Hash identifier: IMIKcgAYuL8h5w9AGx94ur1miCk15MCHEdhrSROcHcM=
Subject key identifier: 54:3C:89:0C:AC:49:44:8D:E0:C4:3B:D9:F0:A8:67:8D:11:70:4F:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21E19A374A05AF1599F5596539319715F734ABF4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/595250c3-e9f2-4e23-9779-87c47497f520.roa
Signing time: Fri 07 Aug 2026 04:50:22 +0000
ROA not before: Fri 07 Aug 2026 04:50:22 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e1:9a:37:4a:05:af:15:99:f5:59:65:39:31:97:15:f7:34:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:22 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=608a39467f3a54ec60dce9f0bbb55bcf14527fead46b813acfc642631a198156, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:92:f8:58:10:0f:1c:ec:42:89:ba:1e:35:
7b:d6:af:27:69:03:90:a3:ba:a7:99:a4:2c:08:13:
6b:4d:7d:90:25:11:b4:af:07:cd:2d:ee:c8:cb:2f:
7a:c9:2e:76:8f:82:63:ea:7b:38:81:04:07:26:ff:
53:83:11:e3:f6:5d:53:00:7f:24:e4:b0:0b:bd:10:
f1:a6:0a:61:50:d4:10:1c:28:af:67:25:2d:6c:36:
38:38:3a:f0:a7:80:c5:db:0d:38:df:c6:b3:3f:15:
77:ae:e0:35:ac:b4:52:e1:06:c1:16:e3:d8:70:c6:
14:43:8f:5a:23:fe:d4:81:9b:f4:01:20:83:e0:10:
4f:76:73:cc:c1:3a:90:df:ae:99:e7:17:d4:58:99:
d0:21:28:22:49:57:2e:8e:63:51:29:34:3e:4e:9c:
a8:87:9d:9e:69:20:9e:64:92:a3:a2:2f:23:6f:3f:
54:8b:b5:9f:01:24:8a:34:a3:c8:36:3b:55:04:8b:
52:fa:2a:8f:8e:02:e2:be:5e:83:00:c2:62:62:22:
be:71:1b:c0:c3:f2:3b:fb:9c:bb:8f:1e:a7:18:ef:
c0:92:2d:2f:21:90:fe:a2:0a:e1:e2:31:6f:39:f4:
b8:7f:ae:dc:15:20:ba:84:23:2d:2c:0d:3e:6a:0b:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3C:89:0C:AC:49:44:8D:E0:C4:3B:D9:F0:A8:67:8D:11:70:4F:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/595250c3-e9f2-4e23-9779-87c47497f520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:5000::/40
Signature Algorithm: sha256WithRSAEncryption
57:57:45:35:84:71:7b:7e:60:1e:61:b6:f1:82:a9:47:3f:10:
1d:94:48:79:2d:b9:b9:98:b4:2c:04:c7:9a:5e:19:4a:2a:c0:
9c:e0:72:d5:6b:06:ce:31:92:1b:8f:e3:d7:39:66:92:54:08:
12:21:59:af:d7:53:8d:a2:80:1b:85:77:64:35:a1:7a:fa:e5:
6e:b0:a8:01:1e:01:ec:18:ab:00:49:f3:e0:d1:3d:c0:27:f3:
49:c1:57:77:d5:e9:a3:b5:4a:51:15:7f:29:5e:61:5f:0b:9f:
d9:ba:9b:29:6d:1e:02:c0:b9:0c:16:a1:a3:50:85:f0:83:67:
a0:62:c3:0c:d5:35:25:56:4f:2e:a2:b3:3f:1c:50:c7:7f:8b:
fd:6e:00:3e:23:32:1a:38:6b:63:aa:9f:9a:33:cf:3a:59:82:
5a:af:09:da:d7:34:10:ab:ea:86:1e:48:da:f7:fe:c7:b4:24:
4a:40:d8:c5:7e:26:a2:20:5f:a3:8e:4f:7b:4f:aa:23:0e:26:
79:3b:31:23:9b:d0:e0:8f:07:e2:6f:77:fe:79:d0:ac:3a:1e:
4b:1b:35:12:b2:c4:9b:25:a7:24:b6:04:b5:25:c9:3c:30:76:
83:bc:38:53:46:6d:6e:3a:a2:5f:d5:b7:79:1f:eb:4a:7b:f0:
7c:81:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:09:09 2026 by rpki-client