Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
File: 1366e04f-98da-4078-9b0a-cc452dfb7a22.roa (raw, json)
Hash identifier: oVdy3u84Ybmk+a8THid19e+iDlSTX59fN6Pb70Woh2M=
Subject key identifier: 75:9F:9A:75:FC:F8:5E:AB:3A:87:F5:B3:1A:71:83:4C:7B:89:A9:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DF31B927E2AD93E39857837D013CE5C6A2E09BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
Signing time: Fri 22 May 2026 16:03:32 +0000
ROA not before: Fri 22 May 2026 16:03:32 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f3:1b:92:7e:2a:d9:3e:39:85:78:37:d0:13:ce:5c:6a:2e:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:03:32 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=844c1e95de6d34182055b384d5147d64f5d63083b5a8be3e92871ccfa5195148, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:43:88:f2:f2:70:53:cf:1a:db:55:ab:f1:
53:cd:7b:41:cc:83:0d:56:ca:6b:9d:4a:27:f2:34:
f3:e6:29:2f:8f:5b:01:9b:d9:0b:b3:4b:89:57:90:
25:4f:61:d0:8a:b4:ad:4d:15:67:92:14:53:68:1f:
c3:25:17:f8:68:90:76:c7:25:93:31:be:b0:64:15:
18:5d:32:a6:8f:fb:48:73:a5:2b:04:ea:eb:09:12:
bb:b2:e7:fc:be:92:c0:8d:35:32:ea:ec:ce:d2:0a:
3c:bc:16:a5:05:4b:f8:03:ab:8b:a3:b4:51:6a:b8:
28:48:60:a3:05:40:6f:ea:57:c6:8e:c7:35:aa:5a:
32:d5:ef:01:b2:fe:4a:86:35:13:a9:7a:0e:72:80:
8f:bb:2a:1e:ed:2b:9f:c4:91:a0:8c:9a:fd:ff:37:
d0:0c:b8:66:ff:96:35:46:a1:22:9c:d8:11:18:0d:
e2:e9:65:19:83:ca:f6:f7:33:bc:04:0a:1e:f7:4a:
93:87:0b:8f:e9:c1:50:2c:a2:b7:f8:70:56:27:d0:
cf:09:b2:05:5c:c0:04:88:76:74:24:97:41:9f:84:
8b:60:4d:44:5f:e5:05:04:7f:1e:8e:3d:98:05:9e:
03:a1:52:74:7d:d4:1e:7a:d0:4e:79:24:09:04:c2:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:9A:75:FC:F8:5E:AB:3A:87:F5:B3:1A:71:83:4C:7B:89:A9:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8020::/48
Signature Algorithm: sha256WithRSAEncryption
3c:db:5e:91:6c:48:cb:60:06:a3:34:68:3f:44:0a:07:61:e7:
14:f0:a3:d6:30:41:10:6c:d7:cb:3a:f7:2d:01:35:64:94:cd:
da:a6:03:78:61:9b:46:e1:06:8d:d8:9c:bd:0b:ed:c7:3c:97:
a4:c6:02:40:82:78:cd:18:2c:22:4a:b4:4f:7a:07:ae:13:9a:
f1:8c:36:da:dc:2c:5d:63:5d:ea:b4:f2:cd:3d:29:19:01:6c:
a2:51:29:ea:64:63:1b:4a:c3:5f:eb:d3:08:8e:9f:68:d3:18:
1f:71:95:a2:c1:c5:27:26:3c:21:6f:7e:44:24:74:cc:c0:47:
f1:72:cb:5f:2f:76:2d:38:e4:2a:53:0f:73:74:85:61:e3:dd:
17:27:a7:78:db:57:de:56:2c:63:95:bc:cf:3f:1a:4a:0c:7f:
4b:7e:3d:a6:a8:7b:a4:8c:f7:0e:0d:48:55:93:1b:4f:fb:f2:
e8:f3:52:20:bf:48:57:04:58:84:46:ca:6c:5c:98:db:bf:6c:
21:bf:03:02:52:ef:19:99:e2:8f:f7:be:ab:09:3f:a0:28:57:
e5:ba:00:d5:7a:54:0c:b0:73:9b:26:eb:3e:e0:f9:ca:24:30:
70:c8:8d:d0:87:a2:0c:49:10:df:e4:20:1d:05:05:b1:95:9e:
85:c9:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:49 2026 by rpki-client