Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: obbFkPF7rdn+gWT0TUhu9gU6wgHJglpk/V0MTQj4XdY=
Subject key identifier: 86:C3:75:F9:50:8D:65:6A:23:91:4C:54:95:BA:6D:3F:B5:E4:F3:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AABE4919624F1FC1C4CDF7691327F6109445162
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Tue 19 May 2026 04:30:14 +0000
ROA not before: Tue 19 May 2026 04:30:14 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ab:e4:91:96:24:f1:fc:1c:4c:df:76:91:32:7f:61:09:44:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:30:14 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=7fda1440f12e73fdffc637db0d9c3e06a49ac182e8b33c18976b4c75e0a2fd42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:4a:cc:e4:76:f9:43:98:39:ad:3b:4f:0e:
ec:f6:e6:82:bb:5c:e5:03:dd:61:16:17:26:94:36:
24:a0:7c:a0:b9:01:4f:bd:0d:59:97:90:53:a7:c7:
01:10:e8:89:a4:4d:3d:70:cc:31:e8:b9:3b:e7:2b:
53:fe:3f:f6:1a:98:7c:de:d5:b3:36:4b:40:7a:c5:
b5:8d:17:68:6f:18:f0:58:6f:eb:0c:19:a8:70:6d:
86:d3:9f:39:d3:e0:60:54:5c:c3:35:37:8c:71:04:
80:19:16:db:fa:bf:96:8d:20:74:03:ea:a9:ee:37:
5f:82:12:09:e5:44:72:e8:38:42:a8:54:f2:56:79:
4e:f2:bf:8d:08:4e:9a:30:1b:8d:40:60:eb:63:3d:
2e:8d:43:bd:75:d2:19:d7:77:a0:b3:2b:06:5f:2f:
c5:eb:a3:df:38:a7:54:14:78:4f:42:a6:7e:96:77:
b6:ed:f2:bf:3b:c4:e7:4c:b3:9c:d2:d8:33:55:66:
3a:d7:82:15:79:71:51:e8:45:f9:4b:b2:e6:6a:76:
c0:eb:43:81:e5:06:2b:c4:0c:c9:55:fc:cc:55:a2:
f7:ca:21:3e:b4:3b:5f:87:9e:7f:67:5f:8b:67:2c:
2c:75:7c:46:26:54:39:db:b9:bd:8a:3b:bd:c1:c1:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C3:75:F9:50:8D:65:6A:23:91:4C:54:95:BA:6D:3F:B5:E4:F3:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
55:a2:9d:9d:4d:f2:af:28:25:d1:40:3f:b9:72:06:af:4f:e7:
00:bf:4a:2e:98:0a:4d:f8:b3:d9:02:0f:e4:80:94:5b:b2:6c:
ad:dc:b8:16:ca:42:3c:dd:9e:57:4a:32:3d:21:ad:bc:44:92:
5f:45:72:e3:d8:00:d9:1e:47:13:48:e8:fd:b6:1e:62:58:c2:
9e:da:85:82:1e:21:c8:22:16:81:2e:cf:1f:1e:3d:61:e4:b4:
9d:78:c4:db:98:98:4a:90:d5:68:28:9c:ba:a3:92:50:4a:08:
9a:82:fa:0d:86:64:71:0e:97:0b:12:2a:9f:39:1a:f1:4a:b0:
90:d9:f0:f9:5c:06:33:c2:25:f9:24:00:64:07:b0:5e:0d:ba:
d3:7a:fc:72:21:cd:ad:1d:f3:94:53:f5:c8:60:31:a3:48:f3:
b7:3e:50:30:53:02:d8:51:ff:49:3a:1a:e6:d9:be:7e:1c:d6:
6e:4b:27:34:bc:a7:c7:4e:a7:cf:9a:3c:f1:87:d0:32:e4:b6:
0b:d0:97:70:79:a0:da:dc:9e:46:50:9b:33:61:75:fc:dc:3f:
44:84:58:9f:57:db:6a:23:7e:6d:43:0d:9e:c0:d9:bd:34:05:
8a:6f:b3:f2:13:3b:02:60:a4:0f:ed:16:74:f6:d4:62:a0:51:
3d:fb:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:42 2026 by rpki-client