Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
File: 452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json)
Hash identifier: Rd+QiSarMUFmVp/56Ghk4O4+a384FF9B0m7s4+JDDr4=
Subject key identifier: 5E:45:D4:F2:69:1B:32:AE:98:0D:18:11:66:79:59:D2:1F:51:C9:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16A9E851C16FEAB87A623E0D8521C0EBBE07A17E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
Signing time: Tue 19 May 2026 05:40:49 +0000
ROA not before: Tue 19 May 2026 05:40:49 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a9:e8:51:c1:6f:ea:b8:7a:62:3e:0d:85:21:c0:eb:be:07:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:40:49 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=35ff1ff1c6619771c91207f49e3663216394b64b0104176f70212140c2bd0181, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:a1:ce:f5:7a:d6:3b:34:21:d0:c5:2b:7f:
43:c0:07:e8:ad:04:81:d5:2d:06:b3:91:db:ed:5f:
79:a0:8b:fa:8f:82:9c:02:ca:6f:92:dd:8e:8a:f3:
a6:c1:bb:cd:37:bb:21:8d:46:8b:63:54:37:fe:dc:
e9:6c:26:52:4b:1d:42:80:21:86:2c:a2:fa:4e:cd:
3a:f8:64:d1:f3:5a:ce:63:14:81:fa:14:02:fd:3a:
ee:c0:c3:4f:32:02:05:c0:72:f7:55:1a:2e:74:ed:
32:cb:8d:80:db:aa:62:ee:3e:d3:ef:07:ce:b7:a8:
ad:6e:37:4e:ac:4b:1e:cd:70:e7:84:7f:d5:f1:aa:
86:ad:f8:43:8a:36:e7:e9:bd:a0:70:48:58:df:39:
eb:09:ff:3e:13:8e:b3:dd:15:a1:3e:62:05:3a:ea:
12:1b:b2:bb:a8:7d:3f:71:af:51:d5:ad:78:e7:50:
e7:b9:72:73:27:9f:50:3a:4f:53:fb:e5:3e:ab:cc:
1e:c0:85:5f:fd:ea:31:3e:bb:03:87:7c:30:b0:7a:
8c:6e:9e:e2:0c:3f:0e:28:b4:72:ed:33:16:17:dc:
f7:73:03:38:20:62:20:7c:a8:8b:34:7d:d7:67:26:
63:ef:cb:64:d7:b2:29:48:63:e4:3e:b8:68:80:3a:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:D4:F2:69:1B:32:AE:98:0D:18:11:66:79:59:D2:1F:51:C9:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/37
Signature Algorithm: sha256WithRSAEncryption
92:08:fe:c4:b4:57:c9:dc:bf:27:6c:11:63:e1:6c:66:32:62:
30:4e:52:ee:f5:0d:77:03:39:5f:99:44:a4:9e:0a:bc:54:ca:
15:f0:42:e8:8b:ab:f6:fe:e4:9a:41:39:35:00:44:9a:b1:46:
cf:a9:04:2a:3c:e8:8a:3c:94:d2:41:02:03:c3:68:3f:2e:30:
dc:3c:a1:e5:e0:be:cd:b7:86:44:46:5b:8c:c4:de:96:46:b2:
ee:53:b7:72:58:84:8d:29:9b:06:02:73:bc:8a:d3:42:6b:9a:
c2:8e:8d:bd:6e:db:b7:5c:dd:10:69:f5:b7:2a:43:f8:c7:d8:
a7:89:51:5e:fa:17:a1:92:98:68:56:8a:c0:e1:49:95:7d:5d:
4e:fa:4a:67:44:a0:99:15:4f:e0:b8:65:01:02:8a:00:b1:24:
3d:56:31:00:82:b8:0a:a0:1a:e4:b5:9d:57:53:99:8f:8c:db:
2f:73:f0:df:9a:90:79:92:7a:52:a7:5f:d2:ed:4e:0e:2c:07:
5b:5f:85:0a:b8:9f:59:cf:a0:7c:78:b8:66:c6:4f:12:16:4e:
dd:6e:eb:5e:5b:11:b4:16:a5:71:66:e8:21:8e:c2:9e:59:84:
fc:6b:75:42:e3:d5:b7:e3:d7:f7:1a:8a:ed:63:99:be:62:bc:
a1:1a:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:11 2026 by rpki-client