Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f64711c-8803-4176-b3f6-6ba6f0bbc640.roa
File: 7f64711c-8803-4176-b3f6-6ba6f0bbc640.roa (raw, json)
Hash identifier: JvctIaGvM1aqHh9UaaEnzE1vYlN1d1x5vx7hbuJmX5o=
Subject key identifier: 77:44:2A:88:C0:DC:CF:C8:45:A7:CE:48:96:98:4C:4C:15:22:A3:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A79E9E381CA5FA11A0CCD52345337A89CC7CC51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f64711c-8803-4176-b3f6-6ba6f0bbc640.roa
Signing time: Fri 22 May 2026 16:02:02 +0000
ROA not before: Fri 22 May 2026 16:02:02 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:79:e9:e3:81:ca:5f:a1:1a:0c:cd:52:34:53:37:a8:9c:c7:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:02:02 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=e5178d825c3a057e3914ffdf3732c9d73c15267b22f67760e46e54e8bf9a1838, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:25:be:45:57:f5:2e:57:43:21:3c:69:66:
3f:4b:24:5b:53:17:0e:b2:73:e7:a8:d5:0f:66:52:
b6:08:1c:c7:bd:1b:0b:ac:c5:83:21:34:e9:7f:be:
67:0a:aa:4e:fb:34:2f:25:be:25:ef:ef:3c:c7:e6:
c8:3c:76:74:a6:2c:b3:d8:ee:95:fc:f4:42:0f:0b:
83:85:f8:1d:79:33:ea:75:21:0b:16:44:44:4f:ba:
07:43:ad:36:d3:8a:98:f2:d2:d6:f0:b1:92:b6:93:
79:b8:2a:26:62:2a:0c:bc:70:17:11:fa:27:8e:cd:
6c:9d:65:ee:75:27:ac:6a:81:9f:70:2f:48:49:09:
9c:b7:b2:a5:b5:2a:d8:10:d3:ed:bb:7f:c5:cc:d7:
19:c6:3c:15:05:d9:d2:58:03:6e:9f:45:cd:90:b1:
e6:e2:18:23:d1:38:bc:fd:d8:5a:35:28:08:e1:70:
f7:7f:f4:38:db:63:9e:5e:5e:b4:87:46:a3:c6:1e:
5c:01:76:5d:bb:89:ac:a4:99:4a:4a:d7:63:ad:8d:
16:d8:e4:25:a7:a5:77:5c:6e:38:f8:ca:bd:ca:d3:
87:b6:a1:42:3f:6d:1f:e6:a4:b5:22:34:67:2e:a0:
44:61:fd:da:3f:27:c9:e2:e8:27:74:32:c4:ae:6c:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:2A:88:C0:DC:CF:C8:45:A7:CE:48:96:98:4C:4C:15:22:A3:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f64711c-8803-4176-b3f6-6ba6f0bbc640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:1040::/48
Signature Algorithm: sha256WithRSAEncryption
a2:5f:91:12:f9:b0:cc:da:59:54:69:99:0a:44:59:41:31:75:
da:28:10:3b:5d:a7:0e:34:bc:b9:03:37:12:a2:08:ac:08:6e:
f5:07:48:06:97:50:15:c4:56:21:81:0d:f6:77:05:a3:c2:4e:
ac:a9:a9:5c:e9:56:2a:4a:70:f9:31:64:bd:bc:a7:91:9b:93:
02:b8:cd:5b:62:4e:7e:a2:7d:9a:23:54:75:14:72:37:a2:a3:
7f:b5:ad:90:27:08:8b:7c:ce:40:4b:65:8a:a1:77:ed:b9:87:
2b:4a:39:9e:23:35:b2:f4:a9:e4:74:7b:ee:64:33:fe:93:3f:
18:2b:30:9b:37:8c:b6:ca:0c:47:b9:2e:97:56:2d:c5:4a:8b:
93:f5:9f:db:0c:e6:37:f6:c5:f5:ac:09:c4:18:30:63:2b:e1:
fe:b0:dc:bd:59:de:90:4e:01:44:31:fe:3a:df:d4:cf:a5:c2:
5f:5d:b6:bf:6d:20:f2:c8:67:60:1b:62:62:27:13:37:00:f8:
8a:af:ef:80:1f:4c:e1:e5:6b:46:0b:ac:6a:14:2e:b8:09:e2:
85:4f:6e:54:87:7c:04:89:b5:17:0e:44:4c:54:23:c5:d5:cd:
67:92:22:09:4f:2b:a5:46:44:60:26:5a:e7:db:d9:33:2e:94:
c2:75:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:39 2026 by rpki-client