Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1995a56a-6e27-402a-b5c5-3dceb4be4537.roa
File: 1995a56a-6e27-402a-b5c5-3dceb4be4537.roa (raw, json)
Hash identifier: PFk3Yh9Hx7bLJzOBqKCpEsjFeJJ6QBYto5FYmJ0U8V4=
Subject key identifier: 97:6B:31:F3:74:73:0A:0D:91:2B:77:87:2D:77:FE:AA:5F:A6:EA:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5031224F3FE9009EA50C8251ECF8EBA843719FDC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1995a56a-6e27-402a-b5c5-3dceb4be4537.roa
Signing time: Fri 22 May 2026 16:01:57 +0000
ROA not before: Fri 22 May 2026 16:01:57 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:31:22:4f:3f:e9:00:9e:a5:0c:82:51:ec:f8:eb:a8:43:71:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:01:57 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=ecacd1cb2e98a4356415bf897b63726ff22d7577ca50ef995c9c89b2b6dfa8f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:a1:95:cd:a7:ce:53:22:b8:b3:26:be:bf:
0a:d7:ef:53:7c:6a:06:03:c0:6a:d0:0b:ee:b6:d3:
c6:06:c3:4b:69:fd:94:6a:c0:55:57:26:a4:86:9f:
c5:9f:15:0f:56:b3:ba:d0:d4:19:a1:2e:69:7a:ba:
f1:20:0d:b6:bf:9e:d6:ee:80:95:de:b8:4d:df:42:
30:4f:ca:a1:24:09:00:12:40:aa:d6:92:0b:f1:bd:
fc:75:8d:63:6b:b9:76:45:be:e8:38:a1:af:49:ad:
fc:48:ad:d0:8b:16:14:2d:55:13:6b:60:60:61:40:
61:c9:4b:3a:81:89:a9:c2:1c:00:b3:e3:a1:9a:e9:
22:19:53:42:23:32:22:df:e0:6f:ac:4a:d9:a6:b0:
5d:fb:48:35:f3:05:1e:4d:f6:be:bc:23:a2:c0:db:
43:0b:a5:d5:07:95:9b:ed:18:38:b8:6d:b6:29:c4:
12:83:58:a8:f9:dd:db:91:60:f7:94:62:be:64:44:
62:f9:e5:0c:9a:66:cc:10:e0:ec:8d:c6:50:3c:51:
45:d2:21:3f:f2:d1:48:d5:fb:04:07:11:e0:75:af:
60:72:c3:ac:ad:88:83:f2:4c:02:fe:11:70:32:47:
d7:b9:ad:e7:b4:b0:e0:6e:ab:39:77:f9:5d:de:a2:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:31:F3:74:73:0A:0D:91:2B:77:87:2D:77:FE:AA:5F:A6:EA:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1995a56a-6e27-402a-b5c5-3dceb4be4537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:800::/40
Signature Algorithm: sha256WithRSAEncryption
54:d2:b7:f3:8d:58:40:47:ff:47:96:1a:65:30:50:cf:21:a0:
45:1c:b3:75:a6:49:d5:df:19:02:75:db:9d:54:10:bf:47:5d:
94:be:80:19:cb:21:e7:55:9e:e0:7b:06:28:88:3b:76:d0:15:
6f:a3:7d:5e:15:b4:56:73:d9:a3:22:b8:1e:64:d2:63:f3:d8:
86:dc:e6:d2:55:d2:bf:24:f4:55:ad:5c:68:92:e3:4b:d2:97:
05:0a:0a:19:ed:e8:96:5f:94:fc:52:a4:9f:d8:0a:c7:72:ed:
f6:e3:3f:d8:c2:fe:93:82:3a:4a:26:16:b2:49:ab:b6:08:92:
75:7c:59:2d:cc:5b:d5:14:92:8e:6f:8b:11:1f:4f:0c:4a:c7:
f8:5f:51:0f:ea:69:7b:2b:ad:7f:ae:a2:25:dc:6c:d5:da:3c:
57:26:51:4f:49:1b:5b:75:cd:1a:e0:bb:2b:f0:ed:83:c5:a6:
0d:0b:45:21:87:a6:16:e7:27:fb:9d:d1:f6:f6:40:9a:3e:81:
22:b2:40:2d:ca:11:02:a8:c8:8c:4a:58:69:39:2d:35:61:8f:
52:28:44:64:96:18:16:56:28:91:96:eb:56:cb:92:09:28:ad:
06:7e:1a:0f:7a:87:f4:48:31:b8:f3:64:54:b3:83:3b:d4:20:
07:34:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:39 2026 by rpki-client