Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
File: 0b197d7f-771e-4490-ae9e-d500d4007e6d.roa (raw, json)
Hash identifier: lrRkBnn0bigAGd9k7fe0PekQgR3p/jlJvVbxB72V4gY=
Subject key identifier: 3B:3F:F1:D9:E7:A7:14:E8:96:AC:EB:4C:5F:0E:5B:AD:05:EC:26:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 737DCCAA309D195AC85301C972BB5446D28E419F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
Signing time: Fri 15 May 2026 02:20:06 +0000
ROA not before: Fri 15 May 2026 02:20:06 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7d:cc:aa:30:9d:19:5a:c8:53:01:c9:72:bb:54:46:d2:8e:41:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 02:20:06 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=728de3c285aacb2f37ca4ada7fbec6c3ab27379a42a7389fe63a70382f175c16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:2d:a4:2f:0c:94:30:ae:5d:ac:32:db:ef:
cc:dd:58:68:5d:40:93:55:e8:10:01:10:38:38:35:
c4:34:d8:a2:09:bc:1c:c3:8f:ac:3f:e6:16:f2:ab:
d8:36:a9:5b:88:ce:8d:03:50:e0:3c:4c:b7:c8:18:
fe:14:9d:fd:aa:50:dd:f6:ad:3b:a2:b2:b9:f5:8c:
ff:86:5f:c8:62:83:ae:b1:33:3f:c6:3d:3f:dc:5e:
e6:87:83:ad:9c:f5:77:31:e6:9c:87:c9:be:74:cf:
95:82:4f:5b:92:b1:b9:bf:4e:c3:08:9d:2e:3c:ba:
0a:6e:c7:2e:84:33:8a:82:65:6e:29:33:c2:13:4b:
c8:87:07:90:d3:3e:08:a4:77:d0:28:e8:80:5d:ee:
38:cf:b2:57:8c:b9:a9:68:8d:63:30:cd:27:e5:a1:
ca:bb:89:53:a1:b5:a2:e4:e4:1d:97:5f:d6:12:4e:
e3:f8:6e:af:ed:43:15:b4:80:33:28:b7:a4:d6:b3:
6e:bd:95:cd:40:91:26:f0:a4:ab:05:e5:d2:8a:34:
9b:f5:34:7a:bb:ce:9a:c2:f3:b2:09:c2:cd:23:4b:
fd:8e:8b:0c:77:8d:26:ff:dc:a5:95:9e:0e:bb:56:
05:c2:80:06:61:c3:ef:25:5e:ab:c0:99:82:fe:5f:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:F1:D9:E7:A7:14:E8:96:AC:EB:4C:5F:0E:5B:AD:05:EC:26:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:1000::/48
Signature Algorithm: sha256WithRSAEncryption
75:1d:d0:cc:f7:dd:2e:ff:25:15:2e:ac:f7:b6:5d:c7:a0:13:
9e:b2:de:a0:de:40:2e:24:c6:50:f1:76:5f:af:d0:9d:fe:ca:
dc:07:37:74:0f:96:9f:41:63:67:4f:c1:26:24:95:c9:eb:03:
06:0b:84:7c:10:6e:b1:d0:3b:8e:9b:5a:92:18:4c:44:2d:ae:
66:9e:d4:c7:a5:07:9c:a4:f6:eb:9f:bf:cd:39:33:c6:41:4f:
49:b4:86:2a:54:1f:7d:43:dd:a9:06:d1:bf:99:ca:b9:bf:e1:
8b:6e:ee:64:3d:b1:5a:c3:ef:63:b5:16:0c:04:8e:5f:80:a7:
73:96:dc:91:fc:e1:f0:7c:36:19:24:55:b3:9b:87:6d:04:97:
5d:49:a1:1c:67:02:3a:95:67:13:48:1a:25:f3:b3:12:33:ce:
96:80:23:52:50:ed:b1:30:b6:28:ef:4e:af:8f:68:01:b7:c3:
3e:2d:da:57:b4:de:fd:41:d4:b9:4a:52:9d:5a:57:36:41:39:
d1:2c:d8:d7:09:61:24:63:3a:7f:d0:3e:a2:b2:64:c8:f3:13:
ad:3d:75:ea:10:59:85:ba:ea:66:ba:81:97:71:d8:7c:94:ef:
52:47:0b:3d:f3:02:93:0a:47:5a:37:10:22:09:38:13:d2:5e:
a6:98:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:17 2026 by rpki-client