Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
File: 6e236a15-c957-4409-8a2a-3a19150d1b43.roa (raw, json)
Hash identifier: CADwVnrD54wfoC0cLLURqNvEFNiYvn13bZAdZdWkB+Y=
Subject key identifier: A9:5A:9C:E2:F6:6A:FE:A4:34:99:06:49:3C:97:DC:F3:BE:5A:AF:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18BDEA8A7D0EBB9A4C4AF2B4581D6850477D3DF5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
Signing time: Thu 30 Jul 2026 01:30:12 +0000
ROA not before: Thu 30 Jul 2026 01:30:12 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bd:ea:8a:7d:0e:bb:9a:4c:4a:f2:b4:58:1d:68:50:47:7d:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:30:12 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=f6af5e5880a1cb5d8711b4c17cb9c25057b1fdffa958d728d292079adbbc81c5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:fd:27:01:02:0f:06:7a:33:aa:3c:2a:61:
3c:cf:6b:96:da:00:3b:33:e8:a1:07:3c:99:3e:57:
72:bd:6d:2f:bc:45:22:18:0a:5e:a8:cd:c5:07:58:
0e:e3:60:05:b0:a1:e1:3c:64:ad:d7:fa:ae:cb:80:
26:eb:21:1c:b5:f7:5e:2a:aa:c5:b7:72:88:64:b6:
34:75:7f:0a:46:17:42:bd:e0:37:c6:9e:29:94:26:
46:7f:ae:e7:d6:da:c0:ec:61:84:0f:03:76:37:11:
74:28:33:68:fc:1c:fa:47:96:28:f7:62:79:76:bc:
8e:6d:09:ac:bc:1d:46:9a:cf:a6:60:14:22:9c:77:
3e:b9:25:63:51:63:d2:35:d3:27:c5:47:0b:69:c6:
6d:65:d5:f3:35:26:d7:e4:bb:19:05:64:84:97:c6:
8f:ce:c4:1e:71:cb:25:e1:c0:c8:03:57:30:bc:b1:
21:3f:8f:64:02:0b:fb:26:81:5c:9e:96:50:1d:1a:
06:7c:4c:82:db:ea:cd:de:bf:e5:28:88:20:c4:66:
95:55:61:6c:46:1a:2f:97:9a:75:6b:54:66:13:bc:
04:70:bd:e6:72:0d:06:c7:35:1d:e1:d5:c1:00:ae:
87:0d:26:15:19:79:25:44:4b:fe:51:fc:b4:6c:00:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:9C:E2:F6:6A:FE:A4:34:99:06:49:3C:97:DC:F3:BE:5A:AF:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9000::/40
Signature Algorithm: sha256WithRSAEncryption
02:fa:71:09:2c:09:ca:72:4a:7c:9c:85:75:93:63:bb:9a:e5:
ab:a6:47:65:02:26:8e:3d:14:29:fa:a7:a4:2a:dd:d5:01:cf:
01:79:b8:e6:d5:51:c1:5e:bf:88:de:c8:49:98:00:87:c7:b4:
e0:b9:96:3f:bc:f1:e7:cc:8a:7f:93:9e:8e:4b:31:52:8d:14:
b3:00:f0:62:a0:f1:5f:67:da:79:c9:df:e1:df:65:b5:39:ca:
b5:b1:9e:11:19:95:fc:8e:27:1c:87:a6:13:31:53:5d:aa:62:
21:f7:c1:b1:83:45:86:5c:a0:b5:7a:f7:67:7d:ed:5a:e5:50:
b1:9f:1c:e6:55:56:f0:84:40:82:b9:a0:9e:b0:eb:32:86:14:
d7:f3:ee:70:e1:d7:85:fd:02:fe:c1:46:40:8f:b1:30:af:6d:
ab:29:31:40:29:ee:f6:0f:51:24:d9:f7:10:39:37:ed:2a:9f:
cc:d3:1f:c5:ea:24:2e:22:5f:80:cf:0b:47:1d:67:8b:c0:52:
7a:03:83:bc:41:f3:18:0e:31:32:45:3a:ca:ef:90:71:3f:cc:
34:ee:5a:35:21:65:29:04:3b:be:5a:20:a8:ea:67:4f:cc:03:
85:5d:64:3c:d6:7e:3b:85:9c:51:02:f5:d1:7a:a2:2d:e4:8b:
7d:2f:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:17:35 2026 by rpki-client