Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa
File: 15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa (raw, json)
Hash identifier: k3mmjVJKlU/Ec+tjB9zBR+Cr13bkYEi46LzfTmdDBYg=
Subject key identifier: 06:08:A6:3D:FF:7A:10:0C:68:99:A8:C4:5D:F4:6F:2B:4F:AE:C0:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C1EDEF459961649DBE2BE399D9F59EDE97C706B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa
Signing time: Fri 22 May 2026 16:01:59 +0000
ROA not before: Fri 22 May 2026 16:01:59 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1e:de:f4:59:96:16:49:db:e2:be:39:9d:9f:59:ed:e9:7c:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:01:59 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=02b6000a7e2e3937e699dccda8f4fbc847e447200f31b2c589b85dd2bad30253, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:fd:e7:ea:0a:53:4d:2c:d8:8f:0d:a2:cd:
ac:ef:bf:cc:22:1e:19:d9:7f:ec:b5:69:78:f7:0b:
39:c9:65:4a:f5:8a:91:a1:2a:6a:69:71:88:9c:81:
4b:a7:df:49:84:1e:35:18:c9:e3:b2:b9:6e:15:78:
c4:d0:ff:97:5a:8f:64:02:27:2c:b1:97:d1:2e:3e:
65:48:c5:83:c8:57:72:b7:42:ba:28:32:7c:f3:45:
80:04:87:30:42:0a:09:ef:38:aa:11:30:67:e5:2d:
7b:92:89:1d:fc:f8:26:80:4c:ef:90:c4:45:9e:0e:
1d:5f:64:83:c9:70:1a:bb:46:55:f5:3a:54:b6:44:
3c:e6:22:0f:0e:a0:17:ad:f1:4d:c3:75:64:95:8e:
77:51:ed:ca:e2:15:7b:f0:76:9f:6d:8c:8f:d1:dd:
d1:4c:c9:81:60:08:e6:02:59:11:2f:8e:22:d9:5e:
65:ad:ad:0f:41:34:de:c4:32:55:bb:4d:fc:2c:2e:
30:0b:5d:be:bb:92:2b:7e:98:d1:85:f5:33:32:d9:
ec:70:b5:80:94:2d:9f:3e:de:d9:84:c8:dc:d5:93:
8e:7e:3a:ce:c9:4c:f7:43:15:67:4c:c3:42:0a:79:
b5:f6:93:bd:fe:d9:3d:02:c6:43:ab:99:c5:60:cf:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:A6:3D:FF:7A:10:0C:68:99:A8:C4:5D:F4:6F:2B:4F:AE:C0:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:c000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:99:7e:2b:87:a4:c7:ce:c0:d2:b8:e8:a4:fc:71:2e:e6:c1:
64:d9:61:05:1f:d6:6f:7e:a6:3e:12:8e:e4:5e:74:0f:fa:87:
71:0e:d9:9d:10:fb:8d:23:1e:55:34:db:0a:80:c1:90:ed:2a:
d3:eb:77:3d:8d:cb:c5:27:15:2a:ce:50:5b:d7:93:36:92:f7:
22:14:70:f5:30:46:c0:1a:02:7b:19:53:c2:2d:81:b4:fd:4f:
8d:e5:fc:b4:eb:7e:03:62:2e:61:6d:e4:33:c0:3b:c7:c4:79:
ee:20:82:25:74:16:a2:7d:a2:d0:6f:9b:2f:36:a7:e9:0f:91:
45:36:90:8a:de:3f:1a:6f:91:39:49:20:a3:02:cf:95:d0:7b:
48:c6:7b:98:93:33:b8:28:2f:c8:95:48:28:d8:21:90:f6:30:
9e:3c:ef:8c:e8:90:13:80:d5:b3:53:cc:ea:86:bf:fa:d6:14:
df:fc:85:98:a5:2a:b5:d5:c0:8f:d7:62:d0:9f:22:b4:7f:9c:
36:05:c4:27:ad:be:10:8e:fc:8a:b3:29:50:9c:0f:14:77:26:
10:f8:c0:23:09:2e:79:30:90:39:d2:c3:7e:3e:a8:b0:59:ee:
9e:ce:07:69:47:cf:c0:f9:ac:c2:70:4b:09:fe:d6:fb:06:76:
75:16:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:31 2026 by rpki-client