Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
File: 49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa (raw, json)
Hash identifier: SOjdA08REzyw7/vfunLB8QZjG0DZ4g2sUyjeXQ5Et0g=
Subject key identifier: A5:10:89:46:3A:2E:BF:CE:7C:D9:C0:AD:DF:C6:62:10:6F:2E:52:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 555C964724192DD1342B47E96CBA9F536026C6F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
Signing time: Thu 28 May 2026 00:00:07 +0000
ROA not before: Thu 28 May 2026 00:00:07 +0000
ROA not after: Wed 26 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5c:96:47:24:19:2d:d1:34:2b:47:e9:6c:ba:9f:53:60:26:c6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 28 00:00:07 2026 GMT
Not After : Aug 26 23:59:59 2026 GMT
Subject: serialNumber=14ace9da20c61eb250e57718ee059e79be214e1e0c7fcc943157ad8d71013830, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:c0:de:4e:ff:98:5e:b4:6d:5f:e7:63:24:
91:80:28:1b:a8:10:5b:b0:4d:b0:0c:52:10:1a:45:
fc:dd:2e:e4:72:10:53:80:f6:bd:f4:be:38:8a:3f:
dc:57:70:bb:9e:15:47:52:62:8d:0e:55:fa:22:a1:
fc:49:af:cd:c5:02:f0:b5:cc:84:53:6e:89:de:7f:
fe:6f:23:f5:cc:91:d6:97:d0:0a:56:3d:84:35:84:
d3:61:30:2c:04:35:cd:bc:3d:de:1f:d2:33:ac:e9:
4e:05:73:0f:79:c5:21:63:df:b5:2e:c8:f7:0c:ad:
ba:4e:a8:92:de:8b:17:6b:b2:e6:3a:e0:c8:b3:15:
28:5b:37:98:02:03:0b:08:8a:8e:ba:2f:c4:d5:64:
b6:66:de:d4:2d:41:64:57:98:09:c8:25:b0:4d:e9:
36:56:1b:c7:e3:b1:33:2c:e5:d2:e5:38:7f:ba:e0:
0b:51:c5:03:83:b3:e3:de:e3:42:b1:ff:8c:72:78:
10:ec:12:c1:08:11:96:14:a9:08:b1:46:c4:e3:27:
4c:7c:51:7d:0c:44:c4:7f:e1:f6:e6:56:2e:f9:ad:
d2:03:44:1b:8a:cd:ce:e2:71:21:9c:d6:13:54:44:
8b:6c:61:c1:38:e0:2f:11:8e:2b:e3:ab:86:6a:0b:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:89:46:3A:2E:BF:CE:7C:D9:C0:AD:DF:C6:62:10:6F:2E:52:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b::/32
Signature Algorithm: sha256WithRSAEncryption
92:52:b9:d5:24:35:89:c6:e3:93:34:e2:20:31:e4:73:33:25:
1f:9b:ed:ec:1b:21:df:81:ee:3e:8b:84:47:c2:07:cf:39:ef:
60:29:ae:02:0e:37:77:db:75:b0:5b:4d:82:7f:25:3c:2e:34:
d2:ba:8c:26:c1:ca:a7:f1:4c:d1:ff:e8:0e:1e:50:f2:68:79:
1e:56:ef:40:3d:88:59:d6:a3:17:b5:38:d9:b6:66:03:53:06:
84:a0:71:10:5c:50:d5:b7:d2:76:93:49:a3:87:95:bc:05:8b:
b7:e7:d3:3e:8f:a0:19:cc:b3:50:cc:80:db:ce:6e:a9:83:15:
3b:81:92:9a:4c:82:9c:ea:22:59:1d:95:ea:89:8a:4c:f3:dd:
8b:cd:e2:8a:98:5e:da:8a:56:a3:4c:14:fe:4e:8c:96:dd:04:
52:aa:d7:f1:a6:26:98:04:6c:3d:d3:ba:61:5e:3a:a9:be:81:
6c:44:cd:8f:71:af:51:39:b3:85:f3:13:c3:0c:dd:77:48:ec:
65:91:e3:9c:2a:c7:e2:ef:55:92:32:72:83:47:cc:bf:37:12:
4f:57:36:21:72:70:e1:a7:b7:f7:92:a6:24:88:88:52:4b:44:
5e:e5:c2:fb:92:38:0e:57:89:05:26:e0:78:0f:68:06:d9:9b:
85:35:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:21 2026 by rpki-client