Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa
File: 0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa (raw, json)
Hash identifier: JWMAe+5qNsF18rgypusFbGj1hs4siGJaI2uakkYMi64=
Subject key identifier: 4D:57:1B:97:B6:F6:34:B9:35:C0:66:FC:D0:44:35:FD:1C:02:33:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B0355112D417FF6D7B1EBAABD0939B29BD4DEB1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa
Signing time: Sun 31 May 2026 01:11:02 +0000
ROA not before: Sun 31 May 2026 01:11:02 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:03:55:11:2d:41:7f:f6:d7:b1:eb:aa:bd:09:39:b2:9b:d4:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:11:02 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=2ee8540d8f4e3db239478bcce36ba78853f0a0bd814825cd275572c06ff37b5b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:fd:40:b9:14:93:e1:6e:24:9f:4f:a2:8e:
2a:c8:ef:eb:67:d6:46:ee:5c:6e:19:90:f2:8c:85:
cf:d7:b9:fc:27:3b:6c:da:c9:b8:3c:df:48:3a:75:
56:75:e7:d8:64:cf:1a:b7:ca:63:40:82:5e:99:f3:
cd:65:10:75:a4:57:ca:f7:00:94:d5:a3:43:c5:61:
c1:66:0f:f9:17:98:59:8c:f2:ce:78:d8:21:34:53:
ce:dd:50:1b:82:11:64:3d:b2:e2:ee:fa:4b:4c:ac:
f6:b4:e2:eb:cf:fa:43:7d:94:da:60:61:80:fd:85:
2e:1d:75:5f:8c:d8:63:44:76:49:eb:d3:ae:ec:77:
5d:ba:8a:bd:84:94:79:45:e8:48:68:df:f0:d0:f6:
cb:c9:10:3f:7e:6a:33:fb:1c:f8:b8:dd:e9:27:4c:
7b:a7:9d:f7:95:c2:a5:6e:3f:6c:6b:15:67:86:f5:
50:23:2d:a4:5c:45:e6:cf:fc:10:c1:fc:f7:74:fe:
11:86:23:44:52:96:e0:dd:a7:d3:be:2c:fb:be:be:
ce:52:77:9c:8f:bb:6e:de:e1:40:68:f3:1d:ce:e5:
9a:cb:75:5c:4a:8c:90:50:41:6a:4d:8b:03:c2:97:
3e:82:19:21:b1:41:f0:6f:81:ff:f7:2c:0f:94:9d:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:1B:97:B6:F6:34:B9:35:C0:66:FC:D0:44:35:FD:1C:02:33:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:800::/40
Signature Algorithm: sha256WithRSAEncryption
ac:e1:8b:f2:8e:29:31:7d:0b:a3:46:88:d5:20:68:48:04:12:
19:45:96:c6:6e:2f:a3:c8:20:24:d7:64:89:86:3f:91:9c:b6:
a7:27:33:7a:aa:77:a7:ff:50:d2:75:4b:26:ff:c3:61:81:52:
66:f9:7f:bd:59:83:f1:05:81:c5:61:2e:00:d9:c8:5f:19:5e:
a1:7e:8f:b2:ec:6a:ff:96:3f:d8:f8:95:f5:62:d5:ca:ae:47:
b0:3a:2b:a9:ef:fc:20:e2:a3:7d:d9:d3:33:f5:7c:97:e0:a8:
27:0e:2c:09:00:fe:be:f8:88:34:3d:87:e8:38:bc:69:69:fd:
44:c8:91:8c:f8:59:56:a8:70:d0:93:11:98:ff:70:85:4d:de:
19:f1:f3:5b:ca:28:58:62:01:c7:46:6f:75:47:1a:5e:15:5c:
b2:84:cd:a4:ed:6e:e4:fd:b3:99:a9:f5:b4:60:0a:f7:fc:ec:
b4:95:db:bd:75:de:e6:b2:ac:db:76:2b:45:4f:40:64:83:c8:
70:10:e3:55:79:95:c5:cf:ff:3a:91:e0:cd:19:40:9d:d9:8d:
de:13:8f:35:35:27:1c:f7:90:e8:64:ff:43:7b:d6:1d:54:b9:
8e:db:88:68:bd:ef:36:0c:b6:41:05:b7:bd:9d:44:55:2e:5b:
0d:4c:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:55 2026 by rpki-client