Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: jVH30MEO5hd9x0QRtFQAJxD07AaiGdZCn6bprlduItg=
Subject key identifier: E6:EF:94:45:EE:83:C9:32:84:DC:A2:C6:50:FF:92:FF:96:90:BD:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7499FB081951E087CA56F0C7F0E4B202572AAE36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Tue 19 May 2026 05:40:06 +0000
ROA not before: Tue 19 May 2026 05:40:06 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:99:fb:08:19:51:e0:87:ca:56:f0:c7:f0:e4:b2:02:57:2a:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:40:06 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=6d06bd33db5efa7a854373239b63023d59c7c24e209e5443e239dd4f3d5fee30, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:9f:c7:fb:69:0a:13:0d:c9:71:c8:f7:f5:
f4:e8:b8:a4:31:54:da:46:f2:9d:63:a7:20:15:2a:
bc:69:13:2e:6c:c8:b8:0e:8f:1a:ce:68:83:e8:ae:
f8:40:59:d1:58:bd:a9:b5:70:5c:e8:27:55:f0:95:
44:fb:53:24:8f:58:e9:5d:70:01:2d:1a:bf:6b:52:
b5:22:c0:de:1a:a3:d9:d3:7c:49:7b:8d:d6:6d:de:
13:fb:09:d4:c9:6b:df:35:d2:d5:65:82:86:50:1a:
6b:b6:75:e1:45:0e:2b:f5:f3:3c:dc:5f:ae:2b:91:
f3:37:d4:d5:e5:03:19:84:0b:de:2c:dc:be:df:83:
17:22:d1:60:92:25:3b:9f:ab:ea:b2:d1:4d:29:57:
ec:7b:3d:69:7d:95:05:87:7e:7d:ba:bc:c1:ae:0c:
e8:1a:38:af:9e:fb:0c:47:b8:c8:26:12:bd:f2:8e:
3e:92:ba:38:48:eb:88:e8:cc:8a:3c:48:e9:f0:2d:
b3:e1:ee:a2:ea:55:2f:ef:fd:43:f5:27:4d:f8:38:
18:6e:f5:f7:16:f3:6f:45:55:aa:73:f7:6c:c1:e4:
d3:bd:a5:f5:37:3e:a4:c5:07:e2:63:c2:81:b2:2d:
dd:9b:ba:7d:97:a4:30:a6:29:6e:0c:73:ec:9f:7a:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:94:45:EE:83:C9:32:84:DC:A2:C6:50:FF:92:FF:96:90:BD:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
23:67:74:dd:ab:b1:03:bb:b0:25:89:77:9c:d5:72:40:0d:b2:
0f:b8:46:3d:66:16:9f:2b:b7:ab:82:27:c4:0f:0d:36:c5:46:
96:02:28:96:29:43:9e:91:87:96:f7:fa:09:77:80:63:a6:e5:
a8:5a:f2:86:30:1a:d0:22:96:71:81:b9:2f:eb:a2:f9:e1:a8:
1d:34:14:0e:0d:79:2f:d6:f3:a9:50:82:ca:56:0d:b1:05:e6:
86:8c:97:b8:ae:23:f0:9d:05:81:fe:ac:5a:b3:6b:22:59:09:
29:a8:2e:28:b5:f9:85:10:3a:a6:89:dd:54:46:39:50:31:dd:
ea:75:81:e4:4a:4a:a6:02:90:e9:48:5f:af:b7:60:52:9e:10:
31:6d:20:c6:5c:a6:3a:08:9f:44:44:c3:0a:79:86:dc:d5:98:
19:cb:93:56:d7:07:23:b8:fc:66:f6:be:7c:96:6c:10:35:05:
44:d8:49:ae:4b:4b:fb:d7:c6:01:8b:79:3b:f9:80:f5:6c:89:
09:9b:87:b7:31:d6:29:97:2a:c6:8f:59:b1:e6:0b:36:c1:5f:
54:ad:24:33:16:97:b2:31:1d:b3:b2:71:63:be:51:d6:67:30:
4e:bd:c0:0f:50:de:a9:2b:6c:3a:f7:46:c5:f6:0c:fb:a8:b0:
c5:2a:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:08 2026 by rpki-client