Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/066563bf-c5a6-4655-8a52-d38439ed7ebd.roa
File: 066563bf-c5a6-4655-8a52-d38439ed7ebd.roa (raw, json)
Hash identifier: U8B93Ztf2FP0Oe9M1JwbDZGqOcS4rD6ynO7wgZHMj2M=
Subject key identifier: 93:4E:50:7D:F2:0A:EF:F1:B0:31:A9:01:50:B1:06:99:FD:D8:34:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3656DB1BE6AC6DA7304FE37D3F1FC4172D77A7B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/066563bf-c5a6-4655-8a52-d38439ed7ebd.roa
Signing time: Sun 31 May 2026 01:00:05 +0000
ROA not before: Sun 31 May 2026 01:00:05 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:56:db:1b:e6:ac:6d:a7:30:4f:e3:7d:3f:1f:c4:17:2d:77:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:05 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=fbb2467d750caea2324a08ece789dcfbc9970111af128ad30d6866d0028228e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:31:75:0a:82:2d:82:7e:63:11:1e:23:d4:
4c:0e:1a:f6:9e:9b:2b:b0:cf:7a:77:c0:a2:27:93:
f8:96:f5:6e:3f:4b:3b:42:25:97:67:16:8d:79:e5:
a2:9f:5e:28:a7:1d:90:07:86:b6:32:ba:b2:dd:ed:
49:c4:16:31:86:43:fa:38:b2:a1:53:02:89:f9:6d:
14:df:34:d5:10:c4:65:11:02:15:4d:09:0e:44:36:
80:cf:cb:de:4f:f2:c3:0e:d1:1f:8f:e1:b3:f9:21:
c0:3f:7d:04:e7:df:7e:c8:b2:a1:86:0f:2b:ac:2e:
09:b3:3c:51:b1:7f:46:8c:ce:2a:b0:ab:c2:7e:e1:
a2:08:7b:45:25:6f:93:46:47:3d:1f:d1:50:b4:50:
d0:4c:bd:d0:f8:45:10:a5:df:34:3c:f7:6a:2d:7c:
03:07:88:f0:a9:39:f7:c0:39:46:92:85:c9:99:2a:
3e:00:a7:48:f7:66:a2:fd:b4:b7:5c:41:20:32:19:
44:8e:3c:21:46:4b:fd:f7:e2:72:21:94:66:71:6f:
0b:11:44:8c:b4:0f:a9:0f:b1:f2:cb:21:5a:c0:b0:
f1:28:d3:d0:f0:eb:fe:29:bc:e9:47:38:3a:9c:c1:
c0:97:4b:26:5e:5e:61:e7:4b:ad:2e:c0:0e:09:cb:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:50:7D:F2:0A:EF:F1:B0:31:A9:01:50:B1:06:99:FD:D8:34:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/066563bf-c5a6-4655-8a52-d38439ed7ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
96:1e:b6:8c:6a:64:e1:98:86:f1:12:c5:28:0e:df:84:64:b0:
16:aa:17:af:37:53:f4:a7:03:96:14:f1:d4:30:75:0a:02:26:
fa:d3:08:82:aa:0b:21:aa:e0:f6:25:61:0d:71:41:1c:95:26:
14:f5:7d:06:b0:f8:84:e7:19:6a:5a:f7:bd:ce:9b:6b:1d:ac:
a2:7e:52:a0:54:c5:b5:61:a3:d8:81:a6:f0:44:09:4b:b9:ce:
96:3d:c0:32:ed:c5:a1:de:80:f4:f3:bc:e0:b6:c6:85:5e:12:
71:c8:ce:c2:f3:ef:3d:50:01:8c:18:4b:96:86:c9:cb:58:50:
b0:e9:5c:e4:23:90:6a:8e:e3:3c:a7:f0:73:77:07:93:4c:10:
dc:e0:b1:90:f1:9a:e6:a4:fe:40:62:b4:1b:e4:a3:67:3e:48:
ab:4c:09:79:92:33:db:4c:57:9e:dd:bf:2a:16:a9:e3:9b:3d:
97:79:20:27:0f:8c:af:b3:27:a9:e7:9d:61:c1:13:f5:00:13:
34:7e:42:66:77:92:6d:5e:e9:22:3e:52:0c:f1:04:09:be:26:
ec:02:38:7d:ea:fe:65:79:15:72:88:c7:73:f9:bd:51:21:1d:
c2:27:ed:e9:c9:08:26:77:d8:ac:3d:91:0d:a9:69:7f:9f:bc:
a1:1b:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:51 2026 by rpki-client