Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
File: 46510026-3bc6-4802-9977-5875dcaffcac.roa (raw, json)
Hash identifier: maWHZbswXz4qyFZnHCTdFBL39v2LUNbgKIbWALDQg3I=
Subject key identifier: 3D:D4:6C:7D:DA:6D:03:3B:6D:4D:78:16:88:A6:13:84:07:B1:46:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E0BD21F1ABC50E0C7923A861E854CB45AD6193D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
Signing time: Fri 15 May 2026 02:20:07 +0000
ROA not before: Fri 15 May 2026 02:20:07 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0b:d2:1f:1a:bc:50:e0:c7:92:3a:86:1e:85:4c:b4:5a:d6:19:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 02:20:07 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=82f547571c5b9839d97c55b06624905d1fbc594b3ac77dcbb2447310c04a4664, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:65:9f:ef:ef:15:fa:29:13:f0:3c:30:c3:
af:8f:d2:07:12:b5:23:ca:02:f2:a3:6e:c3:b1:5f:
62:96:28:10:c7:5f:fa:95:75:7d:2b:05:31:94:aa:
4b:c1:f4:0b:36:66:64:9c:9a:1c:b6:1e:48:ce:77:
b9:11:13:bd:c6:61:a6:c3:00:e2:59:f9:05:40:dd:
9e:04:9e:3a:60:33:dd:2b:98:06:f3:4f:36:c1:f9:
4d:2f:29:ae:47:38:d7:f1:01:04:7a:5a:a6:b6:0f:
c0:a3:d8:b3:c6:97:2f:fe:41:17:ed:93:98:b6:ec:
7a:35:70:98:28:03:1a:8d:b3:ae:aa:ea:53:99:62:
24:ff:7b:3a:b1:14:28:b7:9c:ca:7d:ff:cb:f3:c5:
ce:be:c4:d6:c5:85:11:a8:93:ea:b2:6f:1a:42:37:
42:59:6d:36:91:80:3b:44:b5:03:af:cb:df:ab:6f:
64:24:98:c7:5f:67:eb:f3:e1:15:23:57:36:53:b3:
e6:1f:84:28:d3:6d:7f:a9:54:f4:a9:0a:22:56:e0:
37:b7:93:d0:51:8a:b4:cc:2e:08:01:59:18:46:4f:
e9:57:14:c3:11:7b:a1:5c:c6:cf:95:6a:85:96:b7:
52:d8:b0:05:ba:c5:28:87:40:f7:17:76:12:03:61:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D4:6C:7D:DA:6D:03:3B:6D:4D:78:16:88:A6:13:84:07:B1:46:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
19:45:17:1a:3b:e8:ee:69:b2:35:e2:3a:02:8b:d5:e4:4c:68:
58:b9:be:a9:82:44:c6:ec:c1:1a:ce:c1:74:2e:d5:fc:0d:4a:
4d:63:e0:5a:91:5d:10:b4:70:6b:9f:38:94:6f:61:05:0d:40:
30:eb:dc:79:92:3d:f1:6a:f5:a8:65:21:19:74:ac:f5:51:f1:
82:d5:9f:7c:27:64:4d:0b:c4:8c:df:78:3b:bc:b1:a9:2e:64:
df:75:07:ab:3f:39:b7:ab:dd:73:42:ed:21:b6:98:75:10:b9:
9a:94:35:dc:5f:ea:44:bb:80:55:bf:00:3d:b0:71:aa:5a:fd:
61:ed:32:26:81:8b:97:09:e7:c0:ef:82:67:18:80:e7:bc:49:
4f:54:db:d1:99:58:ba:64:59:f5:20:23:b0:db:bd:0d:11:ed:
99:0f:66:df:02:47:a5:08:08:c1:9a:43:12:75:d9:6a:6b:8d:
37:92:7b:ea:f3:eb:d9:2e:a9:77:26:4a:b6:18:1d:25:ad:32:
95:3d:87:a4:76:de:83:f2:6c:75:d0:dd:4f:e6:9d:32:4d:8c:
d5:c0:80:87:a8:f2:df:e1:91:8d:ae:8a:79:ce:18:aa:e0:d0:
0c:44:c4:a3:c0:78:96:71:c8:37:33:6e:86:f4:78:c9:50:78:
13:fb:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:00 2026 by rpki-client