Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/597c9aa1-9211-466b-8119-7bc3a30795e6.roa
File: 597c9aa1-9211-466b-8119-7bc3a30795e6.roa (raw, json)
Hash identifier: 5IA1VLTCOzbixBtfvdDdVXe90zyk3z7QzMzBnK+++vk=
Subject key identifier: 4C:15:9F:31:DE:FE:B5:9E:D1:CC:34:94:68:03:FD:E6:1A:4A:D3:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B6C78636048B47F13D086AE8B40DC5974972033
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/597c9aa1-9211-466b-8119-7bc3a30795e6.roa
Signing time: Tue 18 Aug 2026 18:12:54 +0000
ROA not before: Tue 18 Aug 2026 18:12:54 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6c:78:63:60:48:b4:7f:13:d0:86:ae:8b:40:dc:59:74:97:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:12:54 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=6b87f7ca98e4ced6daff049cf59800cdc115998cc37191c82a5a045ce8b4c6ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:1c:93:f4:30:1d:ba:74:58:b4:60:70:7b:
fb:e2:96:43:b9:85:a6:2c:36:6c:99:06:f6:2b:19:
68:8e:bd:e9:ab:27:9f:be:16:e1:b9:36:d8:6c:d6:
85:61:07:0d:ca:e1:2c:1a:f9:c6:9c:41:33:bc:af:
9a:9b:c3:d2:89:31:29:0a:8b:ec:39:1f:0d:a3:c5:
c4:e7:7b:aa:ab:b1:4d:f6:93:3e:d3:d5:f5:47:b0:
a4:60:1f:2c:3d:4b:2d:16:5c:2d:c6:e0:1b:1a:da:
ef:f8:88:a6:cb:3d:d5:48:6e:5f:59:4a:d4:53:03:
3a:39:a0:01:59:c2:7b:9c:89:32:21:45:02:20:cc:
a1:23:e0:49:ed:35:2d:19:a6:03:a7:28:49:bf:79:
83:13:93:1e:d6:a2:f2:a8:c4:31:c4:28:1c:d2:e1:
d0:17:6e:61:5d:06:94:f9:31:da:d0:da:4f:60:5e:
fe:72:9b:3d:8a:f2:3a:07:e5:af:6f:77:dd:73:5f:
7b:1a:48:34:1b:4b:88:35:a5:ee:ef:6e:4e:8d:6d:
af:1c:7e:d0:a2:22:ce:fd:13:a2:b4:1b:67:b5:59:
ff:d1:1d:81:cf:6c:07:4e:7a:c9:a1:c1:07:d9:fa:
f8:1f:84:4c:59:d0:57:92:c7:b1:c7:3e:15:bc:96:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:9F:31:DE:FE:B5:9E:D1:CC:34:94:68:03:FD:E6:1A:4A:D3:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/597c9aa1-9211-466b-8119-7bc3a30795e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:85:00:dd:51:3e:fc:66:18:f5:31:fc:f4:ae:57:4e:1a:3b:
c9:2c:5f:99:30:3a:d1:35:92:6d:63:f2:be:4a:76:e5:83:e4:
47:44:b8:25:b9:42:d9:a1:b7:f1:5b:5d:01:16:97:b8:93:a5:
f8:46:1d:6b:9d:af:17:76:c3:83:f4:49:18:02:cd:59:a2:ac:
22:02:90:5d:76:32:97:c3:7e:3d:b2:9f:86:12:45:98:6c:fc:
70:a8:49:50:6e:42:c7:a3:f2:ed:26:ee:1c:bc:55:0b:2f:da:
02:55:2b:f5:fe:cc:3b:4d:36:00:ab:6f:7c:c1:b7:5f:39:1c:
2a:f0:38:fa:41:5e:7a:73:41:47:31:cd:22:3c:66:04:60:fb:
0a:ba:14:ff:87:cd:e3:98:1a:5a:e1:44:ec:d4:90:4b:95:a0:
a6:7b:1e:cd:eb:90:35:4d:1f:f5:39:7f:bb:43:50:c6:88:2e:
12:18:a7:23:11:16:09:be:24:13:bc:2f:b8:12:7f:da:92:fb:
2c:17:c5:5e:55:91:2d:16:22:d4:65:87:94:50:4b:c9:2d:27:
aa:d0:49:86:44:4e:a2:0f:70:16:94:11:e5:34:c3:94:e3:75:
d4:42:b6:a5:13:02:b5:20:c2:08:d1:84:52:ea:98:08:05:a9:
63:35:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:10 2026 by rpki-client