Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa
File: cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa (raw, json)
Hash identifier: YTJAWwPx7Uwd5qPiKVr8Eq8ty9wcpOnsmy0Nv6Cs/rI=
Subject key identifier: 50:8C:8E:06:B2:DC:97:B5:10:EC:55:C3:54:2F:22:6E:91:19:F4:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0900882F3C09A872E417604A423D30461443ECDA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa
Signing time: Mon 27 Jul 2026 03:20:54 +0000
ROA not before: Mon 27 Jul 2026 03:20:54 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:00:88:2f:3c:09:a8:72:e4:17:60:4a:42:3d:30:46:14:43:ec:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:54 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=3a9864bb4b07d79e5414d58ba8f8b97137eb066e0b577599c41f0cc9e4966bfc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:3c:fb:87:df:58:c5:98:ba:d3:4f:8c:c1:
3d:e9:a2:8e:12:48:6e:61:92:82:8e:7a:3a:5a:90:
cd:d5:17:94:61:c6:80:a1:84:18:19:16:e7:9f:83:
39:c0:99:98:54:6c:ff:d9:4f:74:5c:b9:24:2b:66:
16:4a:ba:ab:27:02:a6:32:da:b8:64:55:88:ad:d4:
30:2f:05:bb:2c:5b:d0:dc:5d:df:14:bc:1e:72:b2:
73:86:31:74:01:74:ba:62:7b:73:08:7b:04:0c:ff:
32:34:e7:22:47:c1:92:fc:34:27:aa:4c:47:e6:08:
f2:33:e0:03:38:9b:18:0e:5c:40:c0:ab:f5:ab:44:
00:d9:83:12:23:2e:0b:72:d0:1e:17:e8:75:c2:d1:
71:be:6d:f4:94:3a:b1:98:ef:28:65:0d:95:b3:15:
18:a0:4f:8f:17:1a:c2:85:17:83:94:4b:55:80:e8:
07:ee:f7:2b:70:2c:21:49:78:c4:db:a9:00:e0:6a:
2d:cf:39:8c:b5:8e:0e:df:52:59:52:48:dd:83:88:
29:b0:94:59:fd:f9:8c:7f:60:85:e9:75:9b:e7:55:
ef:a2:83:9e:40:ef:d0:d1:08:c2:27:ed:f5:ab:51:
94:ce:c3:e6:9f:21:56:54:53:64:bd:bb:94:85:66:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:8E:06:B2:DC:97:B5:10:EC:55:C3:54:2F:22:6E:91:19:F4:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:800::/40
Signature Algorithm: sha256WithRSAEncryption
2c:b2:0d:0c:0f:6d:3d:6d:b0:c3:0b:75:a5:73:43:4c:de:d4:
c5:d2:62:8e:49:09:2f:56:91:5d:ac:a9:45:70:af:65:d3:e0:
6b:36:fd:e6:72:48:fc:34:b3:3c:5f:b6:27:1a:d5:a9:55:fc:
b2:b1:78:3e:56:dd:6d:a4:72:23:02:77:48:2c:47:ca:68:a0:
88:15:ef:e3:99:8c:36:67:3d:4c:c0:a1:bb:4a:7f:fa:e8:04:
13:68:bb:e3:49:2f:0b:27:d7:69:6e:17:fd:a8:2c:1c:f4:2d:
db:55:75:e3:ac:3c:da:b2:90:4e:04:ab:e7:d2:af:6c:ae:36:
c7:67:a3:ea:10:f2:af:fd:72:ec:e4:74:d8:70:b5:18:80:97:
c9:f6:4d:93:cd:00:f0:7f:a5:fe:d7:3e:56:7a:6a:f0:8f:74:
16:6a:ee:d8:30:f0:90:87:b3:91:1b:62:bd:db:1e:64:ba:65:
ba:4c:cc:c6:68:62:4f:f6:ef:76:a2:ae:7d:4c:f3:d2:8e:13:
15:84:4e:cb:e1:ba:75:4b:11:6a:3e:a4:5a:d0:63:54:09:a3:
cb:09:91:8f:3f:63:d3:5d:b8:e2:65:56:d1:03:65:36:bc:e5:
a6:1d:a1:5f:0a:da:0a:ce:7f:53:a7:f3:b2:e7:13:5a:58:a4:
c3:5f:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:17:57 2026 by rpki-client