Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0ec53e1-82ac-4939-a807-717f5bb4d86f.roa
File: f0ec53e1-82ac-4939-a807-717f5bb4d86f.roa (raw, json)
Hash identifier: jbPFLTM44kFw3iQ3pPDAQfjZxPb1U423QxKFoVssXis=
Subject key identifier: 1E:F6:DF:A6:5F:14:F3:3C:A2:CD:31:EF:3C:A0:68:A0:33:90:B7:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CDD4B088081E51B3458784E2F36898B925A2BC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0ec53e1-82ac-4939-a807-717f5bb4d86f.roa
Signing time: Tue 28 Jul 2026 18:19:20 +0000
ROA not before: Tue 28 Jul 2026 18:19:20 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:dd:4b:08:80:81:e5:1b:34:58:78:4e:2f:36:89:8b:92:5a:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 18:19:20 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=e4ef486677cdcc7d63182982709f54f371eee08854c1bb7fb945cd537a699a48, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7c:7f:b4:33:29:a4:3a:e2:b6:3b:a9:95:2b:
81:35:0a:92:87:27:67:f8:2e:65:5d:a6:d0:a2:e3:
22:df:cb:bd:d4:be:d8:34:a2:b8:e5:f3:4b:96:94:
01:b3:d5:db:83:90:c3:85:21:35:a7:4e:f3:84:09:
ad:f3:d6:02:bc:ab:af:ff:b0:39:bf:65:2e:4f:84:
e5:b4:1c:c2:76:d3:d7:e5:cd:c5:40:7e:b1:5a:47:
f3:8e:f8:e6:a0:72:26:b3:06:36:b4:6f:61:9d:03:
a8:87:26:06:23:57:c4:50:5c:99:ec:ad:1a:35:0e:
c3:f9:c7:4b:b7:e7:77:e5:ea:e6:31:03:f8:d7:37:
ba:60:6b:f5:4b:e2:e8:c8:7b:4b:5e:a4:8c:48:22:
32:4e:64:a1:6a:89:ed:ec:83:9d:c1:3c:fa:c9:6d:
32:ad:bf:21:5d:a7:62:5f:8a:e3:e3:eb:33:b8:a7:
f5:b3:5c:d7:49:9b:34:0f:b8:46:e4:90:05:d5:6a:
f6:74:32:70:97:4a:68:cf:1d:2f:e1:7b:38:c1:fd:
02:ba:0a:5b:e9:a9:48:0b:50:bb:cc:29:11:58:79:
ea:66:67:05:83:66:71:2b:02:48:44:0d:0f:72:ef:
c2:cf:a5:5f:35:4d:6c:01:e2:7d:38:d0:8d:88:a6:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:DF:A6:5F:14:F3:3C:A2:CD:31:EF:3C:A0:68:A0:33:90:B7:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0ec53e1-82ac-4939-a807-717f5bb4d86f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:e000::/40
Signature Algorithm: sha256WithRSAEncryption
39:9b:cd:9f:14:d2:d4:e9:b4:af:1a:64:46:05:f6:7a:52:57:
8e:53:1a:50:3b:c8:3b:2a:77:cb:36:5f:1e:36:06:ac:31:ab:
26:1d:b4:33:b3:75:a0:97:fb:d6:54:bb:16:95:b6:45:5d:ed:
d9:08:25:83:ce:a7:77:51:d4:16:fe:c6:7f:3c:cd:f0:8a:de:
06:2c:56:58:0c:ef:9e:c8:52:a7:57:1f:f2:1d:a6:1e:e4:43:
c3:8a:66:11:b9:e3:c9:c9:2b:58:b7:f4:fa:b1:2c:aa:34:28:
e7:a2:73:8d:7d:6a:ad:70:32:96:85:14:1d:8e:d9:d4:87:4e:
94:94:28:f9:bc:50:03:46:a4:16:8c:e4:27:80:e8:fe:82:83:
4e:e8:2b:33:8e:3d:88:af:f9:d0:ec:aa:a4:dc:4c:10:2e:3a:
0a:b6:54:06:06:66:c3:6a:ad:ec:05:d6:71:8b:7b:ab:13:9c:
4e:20:57:29:71:6e:9f:70:4b:8f:1a:77:e3:2a:40:66:f5:b9:
98:57:4c:98:4d:69:65:22:07:24:fc:55:dc:b8:14:8f:84:1c:
5c:35:90:4c:92:a8:b4:8e:2e:b9:90:a6:de:7f:54:e4:dc:56:
f6:fb:a5:96:e5:ce:74:25:5d:e0:db:bc:99:77:10:88:8e:22:
8e:af:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:30 2026 by rpki-client