Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b8f9832-df9b-4fc8-94da-5e883e0d6e47.roa
File: 5b8f9832-df9b-4fc8-94da-5e883e0d6e47.roa (raw, json)
Hash identifier: GdAQduvhNEHzdu5fNNKC8yyG6ZEw71YYW9g+qj0pjes=
Subject key identifier: FF:C3:1E:02:E1:63:F0:F6:3F:00:FA:E0:81:05:22:28:C3:FF:2A:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F08B18CE486C5A87003D3B662FE2C94B587C2D2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b8f9832-df9b-4fc8-94da-5e883e0d6e47.roa
Signing time: Thu 30 Jul 2026 01:40:32 +0000
ROA not before: Thu 30 Jul 2026 01:40:32 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:08:b1:8c:e4:86:c5:a8:70:03:d3:b6:62:fe:2c:94:b5:87:c2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:32 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=c1dfc034036a7e8dd4790226c2dea1233de1e7f6c6d22a8fac2dd41d7f083ea9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:1c:4f:40:f8:f4:aa:02:2b:f8:b3:47:b0:
37:22:5e:13:48:0a:78:07:b3:38:43:3b:80:03:c7:
cc:31:4d:64:44:3f:fd:f2:25:70:cf:d1:e6:f3:12:
51:ac:1c:6c:4f:2a:4d:91:8b:50:74:ae:4e:48:74:
6a:92:81:eb:0c:a1:3f:56:2f:84:c0:9f:7a:1a:35:
51:7c:06:2e:f2:ab:e1:2b:a6:e0:74:87:d3:12:b1:
91:34:97:a9:36:8b:78:d2:31:00:ff:12:3a:03:82:
23:98:07:63:e1:8b:56:b2:ab:c3:4a:7c:f5:50:4c:
df:8b:0c:4e:e1:cf:49:21:a6:ca:c2:76:a1:4a:29:
a2:1d:50:fc:ed:e2:62:3e:be:96:8e:d0:7a:ee:bf:
4f:04:dd:c4:25:24:ae:24:5e:35:0a:4f:f7:01:6e:
c7:b3:b5:6f:01:6d:ee:91:6b:19:96:e8:9f:40:d3:
59:77:f9:74:fa:6d:e2:66:5b:56:86:67:4a:1e:0a:
0b:b8:fd:ae:da:29:89:d7:15:96:a4:1a:e5:a4:13:
cb:15:66:65:5e:35:cd:33:4a:2a:dc:69:89:85:c7:
6e:70:0e:bc:b1:14:cc:e0:60:88:4b:9e:dc:e0:b2:
4e:ca:00:f1:38:c1:c7:ac:be:e4:ea:95:b7:21:88:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:1E:02:E1:63:F0:F6:3F:00:FA:E0:81:05:22:28:C3:FF:2A:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b8f9832-df9b-4fc8-94da-5e883e0d6e47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:8000::/40
Signature Algorithm: sha256WithRSAEncryption
10:8a:d1:cc:7a:7f:6b:36:d3:c2:bf:ba:d2:43:2a:be:fd:c3:
aa:f6:cf:f9:56:3a:61:76:3a:32:81:3b:84:09:a5:45:de:4f:
98:4c:19:16:35:35:33:93:f9:bf:e8:aa:16:97:77:e9:5a:5b:
f8:a0:99:08:e1:31:2a:68:76:02:71:44:b4:08:67:c8:c5:4b:
d4:74:f5:17:a8:87:28:5d:75:25:b4:13:6b:3f:66:db:26:86:
39:5d:67:a4:df:95:81:ce:7b:19:b4:54:be:3d:65:59:af:43:
67:b9:de:d7:ea:d2:0e:da:18:42:9c:50:e9:c2:b8:3b:a1:23:
7d:0a:b1:d1:66:01:99:fc:eb:06:82:d2:18:65:ee:55:36:57:
0d:a2:0b:b4:29:a5:48:01:ba:64:c3:96:56:0d:1f:f2:e2:20:
6d:dd:e2:2e:95:d3:67:dc:1c:0d:96:6f:bc:bb:18:18:cf:2a:
6c:93:19:17:4f:b9:d2:f5:2e:7d:ee:8c:ce:25:96:b2:7b:b6:
4b:7f:47:a5:ef:8d:78:b2:f1:89:9e:69:3f:b0:84:ef:6e:19:
58:5c:70:03:a3:a2:89:41:1e:d3:26:13:31:04:03:a5:8e:85:
68:f9:c3:b8:4f:60:a6:eb:7a:ec:a7:60:72:d1:fe:31:0e:45:
74:05:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:10 2026 by rpki-client