Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
File: 04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa (raw, json)
Hash identifier: 95Ekx93ClqmX3m2Zi5bHvT1ZfiDMdQKtmEM+glekZ08=
Subject key identifier: 70:89:08:FA:16:D7:E5:7E:CA:B7:27:90:25:18:AC:8A:FF:B6:5D:5C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3498DB9B34FB8B81522CF74567A6208F6E04C9AB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
Signing time: Mon 27 Jul 2026 03:20:42 +0000
ROA not before: Mon 27 Jul 2026 03:20:42 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:98:db:9b:34:fb:8b:81:52:2c:f7:45:67:a6:20:8f:6e:04:c9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:42 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=a734ea7545fb69848ffe67b09b34ccff31d8689abcc114f407658d0dcafcf538, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:ca:6d:79:8c:51:ca:12:a4:5e:cc:2d:13:
9d:de:be:22:67:e0:92:7f:4e:c1:88:27:1e:b2:b8:
dd:99:49:85:11:74:7e:f9:1b:d1:0b:a7:50:f7:e1:
c6:05:cf:e0:c2:73:dd:bb:87:65:09:fb:ba:92:64:
4d:23:46:c7:77:35:5a:d2:c5:ad:41:0a:f6:68:b9:
d1:66:bb:fe:11:a8:bf:85:6f:43:52:73:0c:00:78:
bf:98:e3:75:42:0f:ff:7d:29:b3:a3:86:61:41:68:
60:5a:ba:ec:f9:8a:b4:7c:11:f5:d4:0a:f9:3d:81:
f7:3c:7f:ce:aa:d5:60:a2:88:da:2a:83:2c:87:55:
62:56:8e:d9:2e:d6:49:91:4d:b2:01:1d:81:c5:53:
c0:c9:b3:c6:18:38:34:73:c8:b0:26:27:d5:1e:9b:
ed:f2:bd:55:5d:ca:bd:ca:1f:d0:2b:c0:ac:3f:8f:
8f:a4:94:9b:71:5b:46:2c:9c:b7:35:05:ed:74:39:
32:96:1d:f9:41:75:e0:ce:40:0f:7a:32:1e:bb:b9:
ac:e6:44:3f:4d:14:91:87:fb:a5:7c:7d:ef:05:e2:
83:fe:d0:05:b6:f7:19:d5:8e:a3:0b:f4:92:d8:a4:
fa:e6:7f:31:88:5d:31:d1:78:fc:84:b5:86:15:32:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:08:FA:16:D7:E5:7E:CA:B7:27:90:25:18:AC:8A:FF:B6:5D:5C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:b000::/40
Signature Algorithm: sha256WithRSAEncryption
9d:07:d7:ca:b9:4d:ed:e2:ea:ca:ca:44:c7:1d:09:05:7a:ed:
b4:b0:f7:93:0e:bd:21:35:7c:8f:14:42:cc:2d:f7:f1:b5:00:
e5:0c:45:0a:ec:0e:60:7f:50:b2:d8:e3:7b:1f:6c:3b:48:81:
6c:3a:02:86:0a:b3:94:9c:67:c3:04:35:e0:f6:59:87:0a:59:
01:b6:8a:f1:90:ff:61:9c:95:0b:d4:b2:cb:fd:93:f1:81:37:
94:34:5a:1f:24:ac:2c:b2:3c:63:6e:c6:23:b7:6d:80:01:28:
ec:de:45:a3:f4:ed:fe:8c:63:c0:2d:12:04:3d:95:f0:4e:54:
b9:78:1b:c5:e1:42:e0:74:5c:f7:f7:82:8f:20:23:79:d1:67:
75:30:0c:b2:1d:78:ab:64:da:35:ec:ac:87:88:e5:ec:bd:21:
8e:27:4f:63:44:be:05:fc:c8:0a:7e:6e:18:9b:8b:bd:dd:2c:
f6:f9:90:a7:59:b2:d4:b4:81:e6:af:6d:d9:8a:21:17:36:54:
fb:d8:38:16:1e:1c:61:e0:69:26:86:7b:5d:18:a0:0d:62:74:
9e:22:db:ad:e2:89:48:77:50:04:3a:92:1c:89:36:12:42:71:
70:c1:97:36:97:ef:ce:d9:d9:41:6c:02:72:b8:91:f0:57:6a:
ea:a8:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:27:45 2026 by rpki-client