Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa
File: a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa (raw, json)
Hash identifier: T8WUygmA2LNVfiTrVXZWY+RVlSUrDScuO4C/ai9l4TY=
Subject key identifier: F5:53:53:B8:C3:75:A2:47:D7:FE:84:39:73:33:D0:A1:F5:3E:C9:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5701E45A6F2BA4F508B78268056DE2D8D4E26E25
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa
Signing time: Mon 27 Jul 2026 03:30:41 +0000
ROA not before: Mon 27 Jul 2026 03:30:41 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:01:e4:5a:6f:2b:a4:f5:08:b7:82:68:05:6d:e2:d8:d4:e2:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:30:41 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=b0369eb3d6d4467ca426fbcf6c1385d9c77dc5f812ff8066b2ffb3038cdeacf9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:a4:96:af:5b:67:fc:b9:b8:85:75:1e:9e:
59:eb:15:1c:af:35:54:50:f5:85:03:8d:29:0d:fa:
28:81:1f:eb:aa:cb:8d:f8:c3:2f:31:95:eb:89:5e:
f4:16:1c:d7:a4:70:9c:b1:63:3c:b0:82:47:c6:1e:
45:d7:11:36:d6:d6:f0:e4:e0:e6:44:d7:65:73:35:
13:7d:10:2c:eb:30:fa:8b:59:90:f7:c2:39:2e:c7:
2a:6a:18:0a:bd:e9:de:28:71:63:f0:ed:e3:52:aa:
5e:e1:73:a0:27:ef:32:0a:a6:8e:53:f2:44:77:ab:
07:b2:16:4f:84:f7:f1:51:2b:65:3f:45:52:d4:5b:
e8:7d:c9:5d:7c:5e:e7:a2:16:fb:23:8c:59:21:26:
b7:60:16:ff:61:6c:1a:07:01:11:9f:51:0a:dc:b4:
41:02:68:20:c8:c8:5b:78:7f:0d:ab:f0:18:f0:8d:
b9:ac:03:be:e2:8c:77:18:5e:ef:b5:37:c7:97:d7:
22:b0:8f:ab:2d:58:0e:05:d9:af:90:ea:18:25:13:
85:c4:5a:1e:22:1f:32:0c:56:f9:e2:07:e4:27:7f:
48:8f:96:e3:79:fc:bb:c5:78:2a:de:0d:d8:87:a4:
f5:88:41:7e:e0:ec:ea:8b:06:a1:c2:7d:d5:95:a7:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:53:B8:C3:75:A2:47:D7:FE:84:39:73:33:D0:A1:F5:3E:C9:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b000::/40
Signature Algorithm: sha256WithRSAEncryption
a0:94:b6:a4:eb:12:02:43:0f:73:90:1e:16:cd:97:4a:75:38:
2e:af:62:f4:27:09:aa:ff:71:46:66:6a:8e:b7:8c:2e:3b:69:
99:2f:b0:24:0d:6c:d8:42:17:92:28:25:33:03:cb:95:0c:dd:
07:19:b1:09:3f:41:b7:f6:0c:38:fc:04:d9:d4:37:a3:9d:d3:
71:8c:24:50:8d:4c:1d:87:d2:a7:6f:6a:66:69:cb:77:d8:1f:
14:aa:81:e5:6b:43:5b:cf:65:9b:ae:6d:33:46:85:c3:d7:c5:
f3:b0:c3:20:0b:9f:9d:25:84:d3:bd:80:dd:37:94:bb:59:d8:
e1:85:e0:e5:68:d9:3b:80:e4:37:38:01:71:ec:1d:e5:7b:10:
bc:3c:b9:e1:b3:db:a6:b1:b8:9a:d8:24:08:d0:b2:bf:e7:d5:
f9:e4:d7:53:0a:b5:08:f0:3a:f4:c6:34:38:58:ad:da:31:0f:
3b:1e:ae:1a:67:29:f1:d5:5c:f2:93:22:c9:e2:82:b2:ec:68:
e2:74:37:db:c3:99:fb:95:80:94:12:e7:4a:71:8e:f1:96:b4:
c0:f3:20:21:f2:8f:a8:76:08:8a:13:98:c3:dc:fc:66:e2:10:
40:4b:2b:f9:ce:e2:08:ab:13:a2:81:87:95:dc:b1:af:35:0c:
f5:9a:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:58 2026 by rpki-client