Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa
File: 490b358b-f6aa-40cb-8469-31081e257eb7.roa (raw, json)
Hash identifier: Hj50D304l7ERp3VS1MHyqe+e1auKyePkGqqVMIiDPpo=
Subject key identifier: 1F:DF:FF:B9:6C:D8:ED:6F:65:71:D4:36:4B:9D:0E:61:81:FB:FD:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42D30B4411BD34F6FEC3172DD1E4922AC91333E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa
Signing time: Fri 03 Apr 2026 02:30:19 +0000
ROA not before: Fri 03 Apr 2026 02:30:19 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d3:0b:44:11:bd:34:f6:fe:c3:17:2d:d1:e4:92:2a:c9:13:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:30:19 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=3e16fffb328a42ff1d12cfb14fa91773417c1c79bc95c7f67d2dad67412dba9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:17:0a:71:ca:8b:2e:7a:fb:84:63:04:2e:
fe:1b:4e:b1:ad:e2:d9:1e:43:59:c6:f0:8b:4b:d9:
9a:76:a2:75:30:19:e1:5f:64:eb:d8:95:b7:0d:26:
69:96:b0:74:39:9a:aa:ae:d5:b9:b8:9b:c5:e1:f2:
d3:7d:bf:1e:7b:45:4c:0e:8b:13:6f:02:69:71:06:
27:e1:6e:3b:cf:13:50:a5:b4:63:f3:43:73:60:92:
a4:49:23:81:60:8c:97:50:97:44:2a:ce:4e:62:5d:
08:8c:51:71:0a:cb:c0:23:3b:b3:8d:bf:c0:04:fd:
43:d2:b9:f1:61:38:eb:aa:a1:35:67:f4:ef:76:61:
b6:80:9d:9f:cf:7d:b9:54:59:92:1f:c3:62:9e:2a:
dd:8c:a6:da:63:d4:e7:00:93:c7:df:34:1a:7a:36:
a9:90:6f:ba:5a:4d:ea:a3:72:2e:7a:3e:00:19:f4:
01:cd:e3:24:57:57:40:47:ef:e4:3d:3f:10:4e:7c:
b3:c4:67:c0:fe:81:45:9e:46:f3:19:b0:ae:92:5f:
f1:92:1c:3f:44:df:9d:73:67:c4:3e:82:55:95:36:
a8:ed:fc:4c:fa:c2:c4:1e:e1:a4:8c:d5:c0:be:05:
c4:23:09:b4:77:c1:10:85:bc:08:7a:67:82:b7:4b:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:FF:B9:6C:D8:ED:6F:65:71:D4:36:4B:9D:0E:61:81:FB:FD:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8020::/48
Signature Algorithm: sha256WithRSAEncryption
5e:39:b0:c9:c7:24:ac:2f:10:a8:e8:4b:a4:2c:f8:13:cd:46:
fe:3e:5d:9c:1b:02:10:14:e2:8b:31:66:02:58:42:5c:7a:11:
ec:56:10:fd:e2:0e:29:61:d4:14:ea:8e:4f:30:8b:ba:ab:3e:
1c:e1:f4:5b:30:3b:04:c7:1a:ab:3f:37:0c:45:66:e8:e9:3c:
7d:c1:65:5a:e2:fd:ee:85:12:a2:ec:ae:79:07:ca:54:e3:1e:
a9:36:2b:e3:ab:73:89:05:90:dd:43:68:9e:26:e6:9a:d1:ee:
cd:22:f8:65:20:d1:c6:9a:d9:90:94:9e:24:fb:fb:7b:d1:b4:
c2:c0:86:0a:0d:17:d1:27:3c:35:a1:a0:ca:dc:05:81:70:86:
ff:ca:db:ed:7b:b2:02:95:2b:6e:f9:e8:a4:67:86:14:03:6a:
2f:c3:e1:76:35:d8:75:9a:7a:3b:ba:4c:a3:d7:45:2a:c9:2a:
62:1d:07:9b:93:bf:24:cd:09:18:f2:4c:da:8f:fa:6a:6d:b0:
78:30:5f:2f:d8:9a:f1:b7:65:2f:69:92:08:9d:3c:9a:6b:a1:
42:63:ad:b5:03:83:a8:3f:31:44:87:f1:b3:43:81:42:cb:dc:
47:96:1d:33:f6:a7:46:8c:98:41:54:63:f2:1b:2d:f4:4a:cf:
11:c7:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:01:10 2026 by rpki-client