Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
File: 470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa (raw, json)
Hash identifier: ZRoh1SGqOL9K5Mc+T2BN3RFw7gU7Jf313ColjD3Y1wE=
Subject key identifier: 59:C7:A3:FE:69:F0:38:A5:8D:2E:0F:95:70:84:85:35:5B:BE:40:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E08FA163C8B3A33401AF4C03345551BAAC738CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
Signing time: Tue 19 May 2026 05:10:55 +0000
ROA not before: Tue 19 May 2026 05:10:55 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:08:fa:16:3c:8b:3a:33:40:1a:f4:c0:33:45:55:1b:aa:c7:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:10:55 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=346535b4448f76f6ead026bbcce379f4a0a1ae96706040227de92f09ee3c3137, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:a5:1d:2b:37:35:a0:b6:1b:2e:a3:c4:d9:
fd:f8:ab:9a:17:f5:99:fd:f9:44:a9:00:fd:de:e1:
7e:a5:29:bf:45:ba:b2:f6:ee:26:7b:11:0e:ba:64:
61:a6:b8:f7:c8:37:04:ad:90:ee:70:32:88:59:65:
40:65:0f:cf:1b:0a:cc:3a:ff:fc:c0:36:06:de:73:
03:fc:94:38:85:8a:82:cf:c0:51:a6:a4:6d:04:8f:
8a:c1:57:9f:34:f0:ea:a1:08:2c:13:91:00:4f:a7:
f3:82:06:a9:39:9d:fa:05:c1:27:76:3c:f8:56:a0:
b7:60:e9:59:ca:a1:28:28:34:82:4f:c6:bd:a8:a9:
01:2c:27:ef:e5:d6:13:5c:0a:1e:5c:6d:d5:7c:b7:
39:8f:59:96:f7:78:38:ad:6c:66:2e:72:d1:e2:8e:
14:e1:ab:1a:51:74:65:d3:d1:64:6f:61:00:5b:10:
db:20:e7:6c:c0:32:d5:c6:97:77:5c:c3:47:b8:7f:
06:6f:5f:db:fd:f0:f8:09:1a:7a:ed:c5:f8:e6:a0:
de:f5:8e:6d:6b:7a:bd:f8:96:fa:54:c2:a0:cb:2f:
e4:b5:49:bc:ba:c4:c4:34:ef:ae:69:c9:94:be:14:
7e:77:5f:7e:63:ac:59:43:4d:79:19:28:66:e3:09:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:A3:FE:69:F0:38:A5:8D:2E:0F:95:70:84:85:35:5B:BE:40:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:1d:bd:5c:ab:b6:02:3c:c1:73:80:6a:08:fc:f8:97:28:c5:
0e:9c:e1:e9:48:45:8b:41:60:08:ae:24:a5:8f:4a:ca:83:01:
a0:20:09:a2:48:0d:38:27:3d:d1:6c:a4:b8:27:e6:d5:e4:e0:
f1:5b:cc:00:e1:d0:74:83:1c:c0:ae:35:c6:19:bd:e6:a9:e3:
bc:c4:82:07:86:c5:c2:8e:dc:78:3a:38:a5:74:1a:ab:d4:27:
31:6b:46:6a:9f:1b:f1:dd:6d:2e:98:1e:f8:9b:da:03:12:98:
fe:58:f5:0b:3c:8f:b7:db:9d:3a:ad:27:19:84:ad:5e:cb:65:
40:a6:77:23:03:b6:83:39:9b:59:05:df:e8:41:86:f6:28:a6:
a9:3d:1b:10:da:36:16:f9:30:69:ea:a0:26:94:1f:5f:e5:6d:
a1:df:b9:9b:7e:df:9b:26:84:60:64:d0:b3:59:0d:ed:e7:66:
73:02:d6:57:ad:75:46:d7:eb:f1:68:9d:bb:9c:62:91:55:4b:
f3:31:58:78:7b:f9:fc:6b:43:8c:1e:c7:81:48:02:c9:95:38:
d2:2f:d6:80:28:f7:42:78:b8:98:ac:71:45:8a:98:8f:4e:b9:
e8:6b:62:23:33:c2:65:6c:89:e9:98:ba:aa:82:ae:56:3d:1a:
55:52:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:17 2026 by rpki-client