Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b126f7d-726e-4427-9067-27eff51c32bb.roa
File: 3b126f7d-726e-4427-9067-27eff51c32bb.roa (raw, json)
Hash identifier: YbNHNxiJdxfNbGFDig20A9vKIRETnGmrGCEXmpS5Klo=
Subject key identifier: AE:83:D9:37:09:4B:22:64:9E:E1:D8:47:34:7C:2F:94:F2:17:DA:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15334A93D92ABC20D4101759B27958F3B1F0C474
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b126f7d-726e-4427-9067-27eff51c32bb.roa
Signing time: Sun 31 May 2026 01:10:58 +0000
ROA not before: Sun 31 May 2026 01:10:58 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:33:4a:93:d9:2a:bc:20:d4:10:17:59:b2:79:58:f3:b1:f0:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:58 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=c59c07abc8a63e302ad2ce4697bb1e34d1fa5498cfdece56cf988588db3c7d97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:2b:e0:a4:35:d4:4d:f0:60:58:af:e3:79:
f7:c1:13:f7:f6:2a:d2:32:94:fc:ab:c2:6d:ad:99:
b3:67:63:dc:90:9a:fe:0b:2f:64:7f:4f:cc:75:39:
4a:0a:5f:80:d1:3b:14:8a:5a:e3:73:08:2b:7b:52:
31:c0:be:b1:8a:88:58:b4:a7:90:13:04:ad:04:c7:
2e:a9:fc:b8:e7:b3:ac:83:a7:49:0d:28:27:f3:bf:
00:45:f8:31:66:f8:dc:90:72:26:f2:ad:48:df:5d:
9c:66:df:75:2a:43:dc:ad:fc:15:31:67:29:f6:0d:
c2:59:00:11:d5:41:8a:44:d8:93:5d:d4:0c:c5:53:
ac:96:1c:b1:78:b4:76:22:92:60:bf:a4:80:d1:ef:
14:77:e8:bc:17:ad:b1:eb:83:a4:9b:ef:a3:eb:f9:
d8:0d:43:b4:a0:69:b5:50:6d:a9:ce:36:b4:87:20:
50:d2:41:14:9f:65:da:51:88:7c:b2:b5:ab:45:c9:
b7:6c:5a:9e:48:07:d9:9a:2b:3e:6c:b8:ce:d0:8b:
d2:31:01:51:d1:8b:1c:aa:09:a4:c1:dd:1c:0d:93:
ce:98:b3:15:fa:c8:7e:90:6e:80:88:3a:75:f9:19:
46:4e:f6:40:a2:e5:ba:46:59:a0:67:0a:32:30:6e:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:D9:37:09:4B:22:64:9E:E1:D8:47:34:7C:2F:94:F2:17:DA:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b126f7d-726e-4427-9067-27eff51c32bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:1080::/48
Signature Algorithm: sha256WithRSAEncryption
41:cf:70:39:5a:d8:7b:b9:e8:a8:2a:ed:bf:c5:47:a4:ae:80:
96:d2:9f:e6:c1:c2:17:a4:a0:03:7a:3b:99:86:0a:89:24:ff:
71:14:76:50:de:4a:13:2c:b8:39:6d:34:53:77:33:ff:59:ed:
06:6c:02:47:10:51:ad:c3:60:94:47:6b:30:e8:a6:6b:5f:f0:
51:9d:54:ec:02:91:c9:3a:70:ca:ed:e8:d5:b3:54:b7:fe:e4:
9a:d6:f3:8f:d2:45:d8:2e:6c:e1:43:36:ed:35:12:d7:b8:66:
77:7b:12:80:75:7a:01:d7:5b:80:a2:4d:ee:de:96:74:35:fe:
e6:45:68:2b:fe:14:f3:f4:66:26:7d:a8:1a:91:d2:33:34:fa:
2b:2d:57:5b:68:2c:1d:6d:c7:19:d7:e3:19:9b:de:03:3a:c6:
0b:59:85:58:6e:71:dd:d4:04:3a:48:0a:bb:24:5c:67:ad:08:
14:ec:81:10:6a:4e:df:25:4b:4d:06:56:52:93:01:a2:80:79:
42:82:6d:ee:b9:a0:bc:52:55:d1:4f:52:f0:8e:d0:0c:9f:43:
0f:12:97:e2:db:b2:95:d2:1d:a3:9f:17:a1:93:50:a0:64:fb:
82:b3:c8:bf:0e:06:37:b9:31:17:9f:c6:e0:9d:66:f3:dc:a7:
0d:f3:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:20 2026 by rpki-client