Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a5c7cdc-b723-4146-b5f0-e7f18d51f873.roa
File: 5a5c7cdc-b723-4146-b5f0-e7f18d51f873.roa (raw, json)
Hash identifier: 5XNIK49dzp+8ODDyu0vIATEaEx5mc/PWybsrg/0k3Q4=
Subject key identifier: 72:45:D1:17:E6:39:E5:2F:01:1D:B3:51:FB:26:8E:2B:33:25:27:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EE529226FCE94571578BFDD5134B79092318B6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a5c7cdc-b723-4146-b5f0-e7f18d51f873.roa
Signing time: Tue 28 Jul 2026 18:19:16 +0000
ROA not before: Tue 28 Jul 2026 18:19:16 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e5:29:22:6f:ce:94:57:15:78:bf:dd:51:34:b7:90:92:31:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 18:19:16 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=f59e73716c7c540b2aae645848210ab84bc923baec906b9143b4e983f805c71e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:36:df:ed:75:4c:28:46:28:af:11:be:79:
92:9e:96:cd:82:9f:5a:81:44:5c:6c:89:69:01:0a:
a3:3b:4e:73:42:be:ec:63:8f:6e:03:59:c9:b0:ef:
82:89:6d:7a:45:e9:94:3a:68:44:54:a7:b3:b8:77:
fe:aa:71:d5:95:5f:61:eb:b6:dc:42:85:18:89:35:
67:5d:24:6c:0a:b3:e3:75:5e:79:37:25:60:b0:1c:
95:c3:bd:47:03:1d:d2:91:24:55:94:8e:bb:9b:b2:
f9:12:41:31:6b:81:66:5c:41:50:5f:5f:55:81:e6:
00:f3:1d:e4:cd:a5:fb:af:b2:26:cf:58:7d:7a:95:
76:3a:b3:30:25:97:89:d6:e9:bc:31:ec:bc:73:2a:
b5:89:46:10:8c:68:b7:75:ed:c9:18:e2:83:97:b3:
b4:9a:4c:e0:59:3b:d9:14:b5:bb:0c:5c:5c:a4:65:
9a:b0:47:b1:e4:d6:83:64:a2:e4:ca:c6:78:f9:45:
2d:18:b7:3b:b1:60:4f:f1:bb:10:85:69:fd:1c:ce:
3d:96:c5:bd:b1:6c:1d:f1:c8:65:ad:ba:09:a4:1b:
4c:a2:d2:38:22:8c:04:e1:fb:3e:ec:52:63:18:4d:
23:22:d5:5e:29:01:3d:90:26:cc:e7:2e:aa:53:2d:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:45:D1:17:E6:39:E5:2F:01:1D:B3:51:FB:26:8E:2B:33:25:27:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a5c7cdc-b723-4146-b5f0-e7f18d51f873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:4000::/40
Signature Algorithm: sha256WithRSAEncryption
67:bf:29:1b:e7:d8:fd:54:b2:40:eb:d6:f1:6f:50:80:61:9c:
23:e8:c1:72:59:f6:e6:d9:3e:33:dd:35:fe:54:cf:6c:27:6d:
0f:70:5f:5a:fe:c7:dd:de:b3:ac:f3:8a:6d:e7:32:c7:54:63:
99:b3:51:6d:96:c4:ad:a9:5b:c6:bb:4d:22:45:87:17:69:26:
8c:88:dd:6e:19:7f:7d:f3:6d:9d:09:8d:17:ba:25:00:8c:2f:
36:8f:a2:c1:ac:3a:9d:13:2c:4f:a8:86:5a:4f:ac:fe:e0:4e:
fa:3c:9f:55:ca:bf:4c:c6:bf:9b:1a:53:2b:19:fa:73:7b:3a:
84:71:c4:1d:a7:00:28:13:a1:dc:ef:75:af:5c:42:72:97:4a:
a1:57:60:7a:34:69:fe:7a:8a:8a:37:8b:14:1f:56:c7:38:b4:
82:af:83:0e:d1:03:84:c7:13:0e:71:39:6c:6d:20:d0:f8:73:
08:b0:52:30:54:e3:91:38:3f:2b:bc:49:4e:85:91:61:d2:dc:
e2:e6:ec:4c:de:39:f5:26:55:c3:29:22:74:48:c2:2f:3e:a8:
da:11:c5:27:81:b5:b1:5a:f9:6b:87:ff:d0:6f:ed:91:08:92:
77:9d:f5:71:56:20:ed:90:fe:23:a8:e1:70:d2:f1:fd:59:7a:
e0:0e:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:31 2026 by rpki-client