Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
File: 7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa (raw, json)
Hash identifier: vVUkJ1qYFIs5lMa2qYNnyBDulrU16efR+H4BPuzPfBI=
Subject key identifier: CB:C4:42:8E:A5:34:3A:A3:6B:33:3C:2D:A5:58:F2:54:57:4B:5D:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 681E1D7D609336F649CB09B2719A557B4BF665D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
Signing time: Thu 30 Jul 2026 01:40:06 +0000
ROA not before: Thu 30 Jul 2026 01:40:06 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1e:1d:7d:60:93:36:f6:49:cb:09:b2:71:9a:55:7b:4b:f6:65:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:06 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=3626e3d1164b65b0153fd45ba9fac084df8510c69a4e0949684a34c89aa5ea7f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:ed:95:3e:ad:68:2b:f0:3b:ea:42:05:d3:
96:96:08:4a:16:e1:c5:97:37:49:b2:12:25:27:a8:
29:59:f9:9b:d7:52:f7:ed:5b:0c:79:0c:f5:90:ca:
8e:9c:bd:67:ba:3c:29:0f:6d:85:0e:9d:ae:fa:cb:
1e:2f:64:e5:49:5d:69:ab:e0:3d:c0:a8:09:a7:3e:
d7:3e:39:d4:35:47:5c:9a:d2:3a:5d:5f:8f:71:48:
82:83:a4:53:a0:f6:65:3b:e7:51:49:b5:22:76:60:
6e:ec:7e:cf:5b:f5:74:2e:50:4c:d9:f4:f4:f6:1f:
c6:d3:a4:55:b5:1e:49:a9:10:d5:35:d5:ce:2a:04:
df:0a:29:81:80:72:f8:a6:c1:62:27:00:eb:f9:49:
c1:af:26:fd:7c:a3:cb:be:eb:e3:5a:e5:96:a3:90:
41:8a:28:99:be:42:46:42:78:2b:d7:33:6a:19:56:
da:83:d0:47:92:78:b0:66:0f:da:b0:c8:5e:40:5c:
f9:f7:a7:c7:ee:97:b5:e4:86:8a:a9:91:00:9d:3e:
3f:a7:0f:80:ea:7d:3e:a0:57:0e:6e:4b:b9:65:4b:
4b:16:fa:42:56:fd:f9:ea:26:ea:f3:a0:ff:50:35:
14:3a:5e:4f:e6:f1:e7:93:57:b5:11:4a:77:9b:95:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:42:8E:A5:34:3A:A3:6B:33:3C:2D:A5:58:F2:54:57:4B:5D:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:ec:33:70:ea:43:c0:4f:6b:05:03:4b:6e:72:99:91:e8:0b:
7e:46:09:67:6e:49:df:20:0c:f6:ce:27:fc:ce:d4:8c:54:b0:
cb:17:20:1b:b0:e3:d6:1f:27:7e:2c:c6:dc:bf:bf:9c:a1:85:
d2:42:66:f3:d5:e9:a3:c9:7f:62:f3:e8:ee:12:c0:d8:55:cc:
21:e7:17:d7:71:7e:d5:42:0b:a8:8b:cd:dd:78:a2:fe:7b:1e:
8f:d5:3e:4b:e1:c7:05:07:a7:73:ac:55:c0:f6:56:35:12:8b:
23:c2:1f:3a:38:6d:17:66:05:2a:b4:65:aa:93:35:ff:4f:7e:
44:22:31:92:9e:e5:0f:2c:4b:0d:e3:6d:17:81:cb:1c:e5:17:
fa:e6:34:3f:19:0f:79:2d:fc:32:47:4b:93:18:d7:ce:fb:7e:
85:f1:7e:64:15:83:28:d6:9e:b5:02:8d:f0:95:c8:ce:f7:26:
0c:ea:67:21:10:f4:e4:f6:00:b3:43:68:ad:eb:e8:93:1a:3d:
d5:3e:f0:b9:22:2f:d3:37:9d:18:c8:2a:a6:4e:6d:87:66:ce:
da:13:98:3f:31:85:6a:30:81:b1:4d:29:58:a2:97:19:da:40:
ea:7c:b1:ca:8c:25:81:e8:90:52:de:c6:eb:28:d4:54:8e:36:
e6:6f:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:31 2026 by rpki-client