Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
File: 924a4487-e709-4e7a-9c72-9678b465cef8.roa (raw, json)
Hash identifier: lVqn0WNLSSKOizBWujtBeo7sN+RkZSfC9D2xgAQnqKE=
Subject key identifier: F5:2E:8C:4C:2B:FB:D9:34:25:A9:94:FA:98:6B:89:1D:FD:E6:14:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21688703B258BE5292ECE9CB4F5DC0F80F727283
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
Signing time: Mon 27 Jul 2026 03:20:08 +0000
ROA not before: Mon 27 Jul 2026 03:20:08 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:68:87:03:b2:58:be:52:92:ec:e9:cb:4f:5d:c0:f8:0f:72:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:08 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=1852490b549b250ebf583ff0bee12fc9b78da8f63939a7eebe8ae1668d2c2cf3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:93:53:13:80:e2:ae:1e:d0:3f:36:96:1b:
1f:b7:57:e7:df:13:b0:80:fe:21:d1:66:65:92:23:
78:26:78:de:27:0d:93:79:10:f1:5e:10:6f:ab:f0:
b4:fa:23:61:1c:90:92:32:ec:16:cd:05:b7:5a:44:
f8:06:29:ea:34:53:14:e4:25:e0:b6:eb:5c:24:d3:
e3:38:9b:24:e4:05:96:33:a7:76:80:c6:e7:c5:b8:
37:6a:e4:3f:af:80:8c:f6:6b:13:5c:64:f9:46:2a:
9c:89:f1:ee:2a:e7:53:c9:9c:d8:b6:5f:77:10:45:
cc:83:35:9b:94:40:33:c3:7c:9c:e9:b6:0a:71:d6:
fb:95:10:ec:06:54:b9:83:da:20:6c:37:67:3c:9d:
de:c3:fa:ab:91:68:92:b2:ce:b6:41:fa:29:52:87:
d2:16:9d:a5:f7:d8:15:49:33:8e:23:ad:e0:a1:2c:
c1:35:1e:71:4d:75:24:0e:b6:87:59:10:ba:ce:6f:
9c:f1:0e:77:eb:e5:56:a7:a0:49:6d:4c:0f:de:c6:
32:d7:cc:ce:3e:46:97:12:59:4f:bf:40:66:20:08:
ed:59:cc:67:c2:fb:ae:6f:3d:d6:b1:73:d1:8c:5c:
4c:6e:39:5e:f2:5a:e7:ff:36:67:97:0b:ff:41:45:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:8C:4C:2B:FB:D9:34:25:A9:94:FA:98:6B:89:1D:FD:E6:14:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
02:07:28:34:06:05:e6:dc:0a:9c:6b:56:64:a7:65:c3:88:46:
bd:30:51:5b:4b:9c:9c:18:e2:2c:72:bd:ec:15:5a:26:b5:4d:
14:e1:6a:b3:d6:d5:c2:16:76:23:65:6b:33:b7:95:e5:aa:dc:
87:37:bc:33:ef:13:3e:33:80:08:98:16:df:60:a4:d9:ba:3a:
2f:aa:38:e3:69:07:94:ff:dd:1a:d5:fb:49:40:fa:93:36:08:
09:0d:e6:81:09:af:d2:8d:6c:cb:52:c6:b3:8d:48:76:63:cb:
52:0d:f1:9e:72:85:eb:80:19:97:02:71:6e:79:ce:23:85:67:
2c:47:78:cd:af:1a:98:ef:2e:33:15:86:ea:03:c2:dc:62:67:
0b:9f:22:19:6e:0d:0f:c1:43:f9:f0:2e:fc:11:38:97:de:1a:
8a:ac:a6:e8:ac:8a:0e:e9:37:ab:1b:09:65:dd:b3:d4:57:54:
84:1e:ce:ba:88:0d:0e:7a:c1:22:6d:f6:bd:62:5b:4b:96:51:
43:94:2b:91:68:3f:7f:b1:11:7a:26:dd:5d:2e:17:89:9b:d5:
a7:84:26:d6:e4:4e:8f:0f:bb:6b:00:49:3c:f1:05:f1:08:9f:
aa:a5:1d:3f:1c:67:c7:a0:4e:d4:b2:0b:f9:66:04:5e:3f:fb:
4a:eb:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:52 2026 by rpki-client