Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
File: 787a0cca-ea85-49b8-8c0b-bef4512620de.roa (raw, json)
Hash identifier: sLvps+pQxTiFn+ipOCkMkO6EBIqHo0ZnJ51NBNJv9GM=
Subject key identifier: DF:F5:41:57:C7:82:A2:11:66:E2:62:47:F5:7F:31:DA:02:1E:16:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F22F7EAA2D8D714A4CF3145DCC0CC66776E25B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
Signing time: Mon 27 Jul 2026 03:20:10 +0000
ROA not before: Mon 27 Jul 2026 03:20:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:22:f7:ea:a2:d8:d7:14:a4:cf:31:45:dc:c0:cc:66:77:6e:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=cf25e5b9ef1cec858a8c220b83cfbff58df21548821d957cde0aef050ab875a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:09:44:97:f7:e1:cd:67:79:8a:84:ff:ff:
3f:91:76:e3:81:82:82:ef:fb:60:6c:11:7c:17:e3:
48:0a:b4:0d:fc:8e:1d:1a:de:06:e6:b7:7e:fe:a8:
8a:f0:83:c1:56:81:8a:7f:c2:c2:d1:e0:04:38:0e:
6c:bc:62:aa:f4:a4:15:cf:57:b7:d6:a4:b5:02:49:
30:dd:b2:71:02:3c:5f:72:9d:3c:39:d3:98:bd:6b:
0e:54:32:1c:68:ee:f0:9d:24:d0:0e:1a:91:17:ea:
04:9a:6e:4a:93:bb:13:ab:b6:c1:45:23:18:d0:e1:
be:23:37:93:93:be:72:8e:a9:ef:f7:2c:bd:65:ad:
fd:12:4b:68:ae:ae:89:6d:e7:12:eb:9e:e1:8c:3e:
92:a4:94:af:9a:20:f6:73:0c:c6:9d:7a:c4:f7:b6:
25:f9:43:9e:6e:30:7d:24:70:d3:2f:dd:09:74:82:
24:ee:8e:b5:b0:b2:a7:be:77:f4:a7:e7:44:ab:40:
79:f9:6c:ca:86:06:1e:22:f9:5a:45:33:fc:07:35:
a2:35:1f:8e:84:f4:25:76:e9:c8:e6:ce:bb:b6:95:
fb:51:37:aa:5e:0f:6e:c3:81:05:1a:23:67:44:55:
22:9d:1d:ca:74:30:77:9d:08:29:0f:f6:16:81:10:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:41:57:C7:82:A2:11:66:E2:62:47:F5:7F:31:DA:02:1E:16:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:9000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:df:5b:9f:d7:97:63:d2:7a:15:c0:52:92:55:0a:0f:c4:46:
4b:6a:41:57:d4:f0:12:37:b9:c6:b9:12:eb:33:85:ee:c3:50:
cb:67:3d:b2:5a:3e:9b:d7:65:a4:1b:3c:08:f8:96:2a:02:9b:
a9:57:db:5b:54:aa:db:01:b6:59:7c:a9:5b:c4:f6:13:74:ac:
ff:1f:b6:a1:fa:b7:2b:f5:e1:23:c4:ce:30:df:c3:ad:62:f3:
fd:87:40:ee:84:71:17:00:a0:fc:ca:96:a3:c3:dd:45:b9:47:
01:93:e2:72:79:1b:04:27:31:7e:77:f7:69:ec:fc:42:5e:c1:
98:a0:42:e4:56:a5:e0:2b:8b:d5:66:b4:13:d2:e4:0a:07:5d:
72:9c:3b:00:30:ad:ab:4b:12:a5:b9:9b:79:4a:d0:62:e2:19:
05:b2:9b:f9:cf:2d:e3:fe:f3:ea:c5:c3:26:41:69:ee:72:0b:
e0:8a:59:6c:d3:3a:8e:78:28:bf:24:a1:d4:c8:d8:91:32:e9:
1d:6a:44:77:27:55:91:bb:6f:c7:17:c8:59:c0:33:cc:3f:ee:
e4:75:e5:0b:29:a9:16:05:2c:46:07:50:92:d2:83:8d:3a:92:
0a:b1:91:82:1e:31:f0:b8:92:68:85:81:d3:98:32:ac:52:65:
02:41:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:16:14 2026 by rpki-client