Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
File: 4408cd10-0fa6-407f-adbc-3a7a668523d6.roa (raw, json)
Hash identifier: 8QTV1su8PfznwLnaaD9OBkEMeti/phtQeVjGyWwY47U=
Subject key identifier: 82:54:96:CD:AA:43:68:3F:0D:39:3A:8B:E0:C6:BC:A3:A4:22:67:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1182F1CE7C7E9859B356894C2668744A196D4B77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
Signing time: Tue 19 May 2026 04:40:58 +0000
ROA not before: Tue 19 May 2026 04:40:58 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:82:f1:ce:7c:7e:98:59:b3:56:89:4c:26:68:74:4a:19:6d:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:58 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=357cf9f687c0d5a4f57a36c5c107c3d8b36450055fe7eca65b9ae370141611e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:79:18:79:af:8e:aa:d4:0f:2d:c8:2e:d8:
4d:21:2e:5c:0a:92:01:03:82:0c:e2:bf:59:da:49:
03:19:88:9b:68:66:a4:f3:54:59:63:30:7e:78:08:
a9:93:25:16:8e:3d:24:8c:71:82:da:00:bc:7d:29:
44:1b:1a:a0:c6:7f:9a:a2:95:fa:2a:2b:a4:a2:eb:
c3:b9:39:a7:11:0d:06:2c:3c:f2:2d:e0:b7:a5:81:
2d:3d:0c:5f:67:18:51:5a:90:60:60:a1:1f:7a:58:
9a:33:39:e3:e3:83:76:1c:59:f1:03:b4:2c:dc:26:
ff:27:88:9d:8b:7d:3e:42:83:98:a4:90:55:26:cc:
13:a3:1f:51:a9:a5:5e:fd:73:e1:5c:50:eb:c1:b2:
2b:76:74:ff:2b:5e:df:68:e8:e7:39:1e:ce:86:9d:
a0:23:d9:44:c3:30:92:83:70:6e:d4:75:0c:b8:7e:
6e:93:8a:88:f6:fe:60:12:15:7c:e5:2c:c9:18:c4:
0a:e5:4e:a3:b3:b3:a8:65:4a:c8:e0:e6:00:52:14:
de:e3:92:af:da:02:b5:ca:68:2a:0e:af:de:d6:b6:
61:1a:16:e3:ed:96:0f:70:63:e3:e9:20:61:c7:77:
3b:1c:cb:df:ec:21:50:c6:12:0c:86:3d:40:93:64:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:96:CD:AA:43:68:3F:0D:39:3A:8B:E0:C6:BC:A3:A4:22:67:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1040::/48
Signature Algorithm: sha256WithRSAEncryption
22:6a:ce:e2:b4:46:c0:f3:0d:1f:f9:99:0d:41:45:7e:95:2d:
7d:47:bc:91:94:5a:3c:56:4a:f7:ce:d0:a3:af:70:a6:78:69:
84:8c:79:e0:e1:99:31:9a:2c:38:42:56:65:45:b5:ae:79:26:
aa:10:c1:d7:9e:2b:ad:f1:68:b1:73:38:ac:0d:92:b7:70:66:
64:53:78:a9:10:8c:c3:3f:95:9f:62:1b:89:4f:8e:33:c3:73:
b8:5e:15:62:63:cc:39:8b:b9:28:d9:5f:e6:86:0f:37:8e:60:
9a:c7:00:44:a8:69:2a:d7:a2:d9:21:21:7f:47:2a:fd:5b:fb:
db:6e:b8:f4:0e:cf:84:8b:83:f9:16:b4:a9:fd:93:4d:9b:4f:
f3:30:59:01:fd:46:0a:d8:f7:a3:39:af:b9:b7:e5:37:ca:51:
7d:c2:a5:6e:fb:2b:5d:27:cd:9e:ae:10:25:06:64:c4:da:4f:
3f:58:ad:de:4d:2a:99:37:b6:e8:eb:55:f4:ca:9a:43:f5:fd:
19:2c:3b:c5:95:92:e5:b6:06:42:ee:02:e6:ae:92:59:b9:36:
ed:80:30:b3:06:6e:9c:b8:e2:42:3a:f5:05:90:85:c5:9d:90:
2f:e4:56:48:28:0e:23:5c:99:c6:dc:0e:f9:c0:08:22:60:21:
65:f8:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:33 2026 by rpki-client