Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
File: a0c32c3b-d8db-4386-9538-641f27723456.roa (raw, json)
Hash identifier: V9R4C3ldHwFK7NF9ZEhQdxXd6QFRxWmNGxHhG5Fgs74=
Subject key identifier: DB:9E:9F:0E:23:09:9B:14:06:BE:14:55:0F:51:10:06:38:EC:40:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61AE9954D949036B0FE5070AD73BBADEBE9B0656
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
Signing time: Mon 27 Jul 2026 03:20:43 +0000
ROA not before: Mon 27 Jul 2026 03:20:43 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ae:99:54:d9:49:03:6b:0f:e5:07:0a:d7:3b:ba:de:be:9b:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:43 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=9d0117b2f5801bd480692f94161212101f2b56ad15455405b7896a7d964cc4b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:07:64:f1:bc:6f:8a:7b:ab:b1:1e:bd:a6:
4f:a9:01:3b:e4:a3:bd:64:ac:3a:d9:77:32:dc:b8:
7e:69:79:2e:8d:4c:1a:c4:00:1d:f1:e1:e1:ea:6a:
9e:08:8e:8d:35:78:98:e3:3c:30:f2:aa:69:42:06:
18:cc:a7:c1:a2:de:d9:4f:bb:6e:66:15:93:01:61:
aa:2d:db:79:7a:d0:c3:a6:02:c5:0c:9d:09:50:e1:
e5:fc:c7:e4:c5:05:c6:51:e2:c6:97:d8:27:49:20:
44:0d:c0:c0:b6:cf:af:64:99:db:cd:e2:42:9a:9a:
d2:ed:ba:d8:c8:44:48:6a:8f:98:87:3d:e4:97:ee:
b8:ca:a3:17:5f:fc:4e:63:74:d8:9c:f2:0e:f1:f5:
b0:a4:68:87:49:1f:6e:1a:b3:c7:bf:c5:c5:55:1f:
6e:f9:f1:cb:8a:d7:30:ad:09:a8:cf:ac:9c:17:37:
e8:65:b3:38:c5:a5:5d:26:90:6d:6e:e1:06:c1:01:
75:7b:e5:79:66:ae:d3:93:5d:9e:97:b7:ee:4e:c4:
0e:8b:63:38:54:55:7d:dd:fc:6c:d2:f1:34:63:15:
70:4e:93:03:3a:ed:8c:3d:72:d3:32:a2:b2:ce:cc:
b5:e9:70:4a:85:5e:d8:c8:6a:25:6b:d0:5b:1d:7d:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:9F:0E:23:09:9B:14:06:BE:14:55:0F:51:10:06:38:EC:40:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5000::/40
Signature Algorithm: sha256WithRSAEncryption
3d:06:46:5c:30:16:22:4b:3a:a0:94:15:db:9e:fb:f9:18:89:
b6:cf:41:8f:9f:06:03:df:6b:49:e6:73:96:f0:9e:01:f6:29:
b9:31:d6:3a:6d:9d:51:a5:56:ca:4e:2c:a1:83:c3:20:af:17:
5c:6f:7e:dd:a5:b9:6d:fc:f6:08:39:11:f9:9d:c1:4e:ae:c7:
a9:34:e3:72:c1:03:fe:ee:df:1a:59:8b:e2:d7:69:98:82:4a:
46:f0:f9:e3:a4:73:e4:2b:5a:27:07:3c:49:3a:30:73:f0:24:
88:d6:8e:bb:51:59:19:ed:87:bc:95:24:86:5f:e2:c3:d8:39:
94:a0:0b:31:f8:4d:7c:67:db:08:05:13:cc:fd:f8:6d:ae:3c:
7f:c5:62:99:d3:d5:12:b0:5b:16:9d:ea:1a:59:76:22:db:2a:
b6:b0:f5:e5:b1:6f:bf:54:fa:58:c4:03:b9:26:bd:37:41:a0:
ad:09:1a:55:e4:c4:09:be:d9:2c:a6:16:2e:4a:f9:f1:84:3a:
b0:10:a2:1e:4f:ef:30:a8:db:e5:2d:81:19:34:aa:70:d7:89:
3d:d7:a1:43:6c:dd:c0:60:ed:8c:05:cb:ff:75:90:db:e5:7a:
e4:91:06:b8:9c:c3:06:cf:b2:74:33:48:30:4c:2e:fb:62:95:
82:4d:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:41 2026 by rpki-client