Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3ed7d23-a6bc-40a5-ba8d-3143e853f592.roa
File: f3ed7d23-a6bc-40a5-ba8d-3143e853f592.roa (raw, json)
Hash identifier: ddlDR29/cCswrQDS9+iXxwSFWSyAvbYkaQzutdyOfBI=
Subject key identifier: 4D:D3:10:DF:6E:7B:D4:A0:D2:FA:09:1A:B0:98:B3:B2:28:89:FF:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DD99A82063ADE5DBFAD96691A2A8892413C5548
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3ed7d23-a6bc-40a5-ba8d-3143e853f592.roa
Signing time: Tue 28 Jul 2026 18:19:15 +0000
ROA not before: Tue 28 Jul 2026 18:19:15 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d9:9a:82:06:3a:de:5d:bf:ad:96:69:1a:2a:88:92:41:3c:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 18:19:15 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=1f638eaf884b2cf73ce635e650b008da162f357eb7315a81129da5db4ecd7d5f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:f5:73:87:48:46:dc:9d:99:91:3d:61:f9:
f6:72:d9:0d:0b:24:91:0f:f4:5b:f3:a9:5c:dc:4a:
09:82:aa:7a:42:af:df:de:1e:86:cf:38:9f:6e:9d:
59:c0:7d:31:a7:16:c9:10:2f:fd:ec:37:09:ad:ea:
84:d5:bc:dc:fc:b6:05:b6:84:c1:6e:38:17:28:67:
a7:fb:b2:d8:5f:6a:88:d7:06:19:9e:50:0a:d6:45:
25:f0:ca:cf:bc:52:12:0f:2e:bc:39:4a:fc:f4:2d:
55:e9:5e:4f:1e:b6:22:57:b1:c1:98:fe:a6:7d:2d:
ef:8d:d0:9c:59:67:01:d0:4e:cb:44:e1:46:57:6a:
a0:28:1c:72:eb:7c:25:79:6e:e7:ec:eb:fe:69:63:
e3:7e:86:da:ff:54:52:55:cd:e7:ce:89:14:21:f3:
20:80:e2:89:f9:18:7e:77:c1:cd:ff:91:39:e8:e0:
81:35:95:13:b8:f8:3b:cf:64:8d:5e:55:24:32:d7:
bd:eb:f3:67:16:69:2f:cb:0b:87:5c:4e:26:67:b5:
ee:0d:55:91:27:8e:63:4c:62:23:a7:f7:10:48:2c:
6a:c5:70:24:08:31:3f:ed:e0:c7:52:35:bd:8c:09:
53:49:b8:6c:ed:95:7f:42:b2:df:58:7d:32:67:9e:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:10:DF:6E:7B:D4:A0:D2:FA:09:1A:B0:98:B3:B2:28:89:FF:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3ed7d23-a6bc-40a5-ba8d-3143e853f592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:2000::/40
Signature Algorithm: sha256WithRSAEncryption
21:01:26:3a:a2:ae:af:71:41:5c:29:1f:30:47:b2:bb:a3:a9:
83:90:93:10:fe:2d:48:c2:3b:46:c1:37:d0:a1:0f:a7:ea:6d:
b1:5a:15:3e:4c:5d:be:32:08:6e:1b:16:bb:86:cb:87:4a:e6:
09:df:ec:1c:2f:1f:8c:88:50:a5:4b:29:ae:07:ef:89:4e:8a:
c0:b7:d0:9f:f2:ac:fd:ad:77:0a:d9:4c:91:a0:da:a4:90:b1:
36:1c:2e:f2:f7:f2:41:e9:36:b9:6b:16:a1:33:80:b5:60:d7:
6a:e6:be:fb:76:25:5b:8f:60:41:63:5c:29:77:b0:da:b4:d1:
7e:d8:e3:ff:5d:07:43:99:5e:21:13:fa:5c:a8:81:a0:73:c8:
8c:77:6d:5b:c3:ae:fa:ad:2b:92:0f:ae:3b:4f:e9:e9:81:e3:
85:dc:0a:3b:ab:41:a4:71:c5:c1:86:83:cf:33:6a:c2:53:cd:
c1:73:33:66:d8:a9:1c:2c:96:ac:0a:32:75:93:b7:91:c1:22:
63:18:37:5a:a4:9e:58:dd:64:2a:fc:24:b9:f2:2c:9c:14:17:
d5:b7:6c:83:67:8e:c2:18:dd:6b:ed:4d:45:db:db:2e:ce:69:
56:43:f5:fb:9f:de:94:25:ad:91:67:75:24:3b:bc:c7:b4:24:
40:f5:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:27 2026 by rpki-client