Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a49e23de-6fc9-412b-9d23-4f0830d9fa7a.roa
File: a49e23de-6fc9-412b-9d23-4f0830d9fa7a.roa (raw, json)
Hash identifier: sof7FvsJGZsNvbbj6+/AnycXLdw+xl5ouHnFdaqRbx8=
Subject key identifier: F8:F9:E6:5F:56:B4:53:D4:EE:C9:F3:B8:B9:4A:79:16:86:09:2F:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4910963CC628F5AD0FE57BB897453CF46E33F820
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a49e23de-6fc9-412b-9d23-4f0830d9fa7a.roa
Signing time: Mon 27 Jul 2026 03:20:30 +0000
ROA not before: Mon 27 Jul 2026 03:20:30 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:10:96:3c:c6:28:f5:ad:0f:e5:7b:b8:97:45:3c:f4:6e:33:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:30 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=d0ed1fafe4b51de3b4e1ce9587b1abee6275922ce949d7520d5a96f0330b2778, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:22:af:bf:b2:78:29:c3:ff:67:64:44:98:
d8:b7:17:59:fd:77:00:b4:4a:e5:df:1d:56:70:53:
a0:3c:f0:e4:6b:b7:4c:20:b0:e7:05:1d:6a:17:83:
56:0c:cf:34:56:e3:85:be:99:c3:08:9e:0b:ce:87:
e0:52:63:b2:de:d0:f4:38:74:f3:00:ce:48:a1:3e:
8d:eb:5d:4a:bd:ba:ec:25:42:bc:10:27:8c:f2:19:
dc:50:34:63:6c:d6:73:c3:ff:27:f9:7c:78:72:68:
67:f1:82:a2:2d:63:9a:9c:23:13:ec:8a:80:7b:c0:
8f:1f:c0:ad:a2:a8:34:61:5e:b1:a7:44:2d:3a:c3:
44:70:b3:dd:05:b2:02:52:15:3c:b0:8f:77:c9:67:
02:04:d6:bf:17:9b:46:e0:09:ca:34:f1:65:99:f1:
c9:b2:50:c8:68:f2:0f:88:67:53:a2:b0:8d:7d:3a:
bb:ea:d5:d8:07:fa:a2:e2:14:63:de:83:80:e1:b2:
a6:94:d1:3f:9f:89:28:55:69:a0:b8:31:22:d6:89:
10:f2:95:b9:b8:d9:12:5b:aa:75:f1:1f:3a:0d:ea:
d6:d3:c5:0d:37:cd:70:9b:aa:58:d9:fb:d8:3d:68:
d1:11:d6:d0:68:bc:28:9d:cd:16:fb:82:f7:81:69:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:E6:5F:56:B4:53:D4:EE:C9:F3:B8:B9:4A:79:16:86:09:2F:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a49e23de-6fc9-412b-9d23-4f0830d9fa7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:800::/40
Signature Algorithm: sha256WithRSAEncryption
b6:2a:32:17:1a:56:be:f5:2c:55:92:c8:76:07:2e:1f:47:5d:
b2:24:4e:7f:f9:bd:ea:d6:99:28:26:65:cc:91:49:81:02:e8:
83:7a:1f:42:34:e2:10:14:88:c5:de:e2:7d:03:63:7e:86:ad:
57:9c:73:dc:3c:26:f0:de:0f:47:18:75:09:d7:f1:90:74:fe:
87:8c:ec:85:a5:ad:77:bf:be:f6:49:3b:74:c5:76:2f:ac:9e:
24:6e:ef:c7:d4:d0:b2:76:8f:23:8f:af:58:7f:01:97:1a:34:
10:44:4f:9e:db:45:d2:57:4e:c1:0e:35:8d:1a:a7:4d:b6:5b:
0a:10:78:a9:e3:70:d2:75:20:c7:b2:23:83:1e:7e:7f:6e:b0:
12:e8:72:ef:ff:d3:9f:c0:51:03:88:05:4b:90:0b:49:78:c4:
0b:0d:64:36:8e:6e:05:1b:a0:07:e6:ef:8b:3d:99:30:f3:e6:
6a:65:47:4e:dd:4e:07:9a:02:e0:41:5c:e2:73:51:dc:5e:a6:
00:fe:d0:01:1f:a7:7e:d0:37:6a:e8:c5:88:4c:f9:0b:42:d7:
e3:3b:c4:0b:2c:73:6c:b7:b1:f3:9e:01:ed:dd:0b:89:6d:25:
b8:71:e8:79:5a:a6:44:45:2f:05:c2:86:f0:f6:08:66:3c:f3:
94:9c:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:33 2026 by rpki-client