Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b7a4eb-e2de-4458-a759-5125161eb686.roa
File: d2b7a4eb-e2de-4458-a759-5125161eb686.roa (raw, json)
Hash identifier: CUuYnMK0oD6Sd1/ifQgHR46HyOsAfm3XzsPeJ7NY8Mg=
Subject key identifier: D4:96:36:13:D2:FA:A4:49:16:22:6B:5E:47:7B:71:02:49:9E:54:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2BE87C272D19096637C43879A3AE0DECC69D626A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b7a4eb-e2de-4458-a759-5125161eb686.roa
Signing time: Mon 27 Jul 2026 03:21:00 +0000
ROA not before: Mon 27 Jul 2026 03:21:00 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e8:7c:27:2d:19:09:66:37:c4:38:79:a3:ae:0d:ec:c6:9d:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:21:00 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=21f1ffe13867bd51cf2edc4a7db2a8a8a9ea6944cf84765453e53adb3e93bba5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:df:a4:30:83:1b:68:d3:62:6b:98:25:02:
af:09:f0:2a:0d:be:ea:e7:66:62:02:98:f6:25:17:
87:5a:29:4d:64:a3:18:e0:6a:1e:68:56:3a:61:1e:
e3:96:39:c1:b7:fd:63:60:2e:d4:29:40:c5:76:03:
c7:57:52:6e:07:eb:81:3e:85:27:6a:38:e9:25:81:
19:fe:5e:00:be:1b:77:2b:72:2a:03:23:bb:6e:67:
6c:37:2a:31:fc:22:eb:59:5b:e0:af:1a:e5:83:a7:
1c:7d:d9:0c:a2:3d:d2:ad:24:89:4c:c0:0b:98:f6:
f7:a6:54:61:4d:b6:e8:04:ce:eb:9f:f5:fe:4c:e1:
a3:6b:06:08:d1:1a:a0:06:0d:ae:a3:f1:74:31:97:
99:56:a2:82:51:03:2d:c2:50:b1:ae:3b:4a:b7:5c:
88:33:b5:ec:2f:c3:f2:65:d9:42:6b:6a:78:b1:35:
25:0b:16:1e:4c:3d:2a:84:f8:3c:ff:4e:7c:96:1b:
df:12:3b:ff:0d:c2:18:53:67:f5:04:a7:40:3f:2d:
50:19:30:3c:9c:76:40:3a:6f:37:48:61:36:b8:9a:
60:67:79:2d:9f:31:b5:f4:5f:e4:c8:fd:d5:c3:23:
06:36:1b:bd:e0:c0:04:6d:b6:06:f4:14:2f:f6:d7:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:96:36:13:D2:FA:A4:49:16:22:6B:5E:47:7B:71:02:49:9E:54:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b7a4eb-e2de-4458-a759-5125161eb686.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:a000::/40
Signature Algorithm: sha256WithRSAEncryption
62:38:92:66:26:e9:e8:ea:b1:c4:f6:d5:8c:cf:60:e9:79:35:
ee:e2:11:ac:9c:60:02:8c:99:2d:b7:3c:a3:e6:7b:c3:ed:70:
7d:43:2f:6f:a2:ea:e0:cb:79:31:fa:50:35:86:15:f6:94:65:
3e:d3:46:e4:2e:c6:66:bc:69:d6:64:4f:9e:c0:7b:e4:39:18:
a6:bc:79:e5:66:2b:2d:36:b7:da:68:00:99:f5:bb:48:79:99:
6a:df:9f:01:7e:f6:c5:33:11:07:d9:05:cd:f8:95:54:36:ac:
29:e8:5b:54:b2:01:6c:15:81:bf:30:89:51:36:85:ad:81:62:
6f:83:96:bd:3b:50:ed:b9:8c:d7:d8:73:a6:93:f5:d7:7e:b4:
b0:21:08:f3:36:38:fc:20:4d:39:96:49:1a:5b:8f:46:55:6e:
5e:8a:1b:28:a7:f7:db:a2:2c:4e:07:9c:4c:53:b5:9a:72:7a:
f1:06:ba:6c:06:29:3a:39:0d:98:c9:ef:f4:e3:99:42:fb:6f:
a0:fe:6e:1f:b4:97:62:63:8d:90:2e:64:ed:93:99:99:50:e4:
8a:e0:2c:07:ec:58:f0:77:53:28:15:15:d5:39:fb:5b:e8:08:
a4:60:49:6c:03:4a:94:72:11:71:e6:ff:ec:f7:2c:31:06:8f:
15:c9:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:00 2026 by rpki-client