Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
File: 4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json)
Hash identifier: Fav4jv/cxy7niXAYcGe8rqZU6HP9m52VFUDKs0pitRc=
Subject key identifier: 8D:DA:9A:49:28:F0:F0:6F:88:4A:A2:FE:7E:DB:0C:03:63:C1:52:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CD30ABFF094E517B4590973C6CF84C7B472AF7D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
Signing time: Tue 19 May 2026 05:00:06 +0000
ROA not before: Tue 19 May 2026 05:00:06 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d3:0a:bf:f0:94:e5:17:b4:59:09:73:c6:cf:84:c7:b4:72:af:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:06 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=564294b083edf336bc23cc679453d2a5a01bbeb03cfeb60fcbaad2f2f24e9451, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:40:8f:f9:27:5f:6d:8c:05:b0:19:9e:24:
25:9c:7d:94:91:00:70:8d:94:b2:4c:c2:09:3c:70:
2f:30:a1:30:c4:f5:22:da:f7:2e:2a:97:af:58:54:
8e:c6:8a:9d:d7:df:b1:3b:c0:09:df:8c:05:21:7e:
c4:9d:c0:e6:d5:a5:f7:cd:79:c2:1c:ff:44:fc:65:
ef:05:ea:d8:e1:50:ef:95:c8:39:8a:af:06:7f:1b:
40:87:2e:36:f3:83:a0:30:87:57:66:c2:e7:b0:6a:
f5:9f:db:e0:62:aa:eb:ae:6b:17:80:06:6b:a6:b6:
65:f8:25:42:52:2c:0a:cb:c3:6f:7d:1a:3b:cb:93:
6d:ab:6b:ba:b5:f9:64:80:c0:ae:81:fc:ab:d8:f8:
59:94:f6:93:55:6f:9a:a3:b9:65:ef:a3:ff:a1:bd:
7e:72:11:a2:f8:b6:65:77:6c:51:22:a5:5a:63:92:
69:c2:92:05:ab:c1:71:f9:33:25:95:c8:ae:49:ba:
5b:41:2a:a8:a8:33:61:aa:92:ed:13:bc:d9:65:39:
ac:93:73:43:10:9e:1b:8e:a0:b7:85:82:a3:90:8d:
1c:ad:ae:dc:39:0a:2b:44:8a:3b:e5:1a:3c:9f:dc:
74:83:86:13:6f:6c:e1:d9:60:3a:70:1b:34:79:70:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DA:9A:49:28:F0:F0:6F:88:4A:A2:FE:7E:DB:0C:03:63:C1:52:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:28:c0:f1:9e:b7:34:88:06:7f:16:88:8c:bd:2c:7c:d2:5b:
ca:33:a0:da:fd:5d:e7:64:69:9c:dd:05:dc:30:1f:5f:01:64:
7e:f2:8e:79:c3:02:cf:6e:4f:d9:85:fd:76:b1:7e:6c:80:d6:
04:6d:91:7b:40:bf:5b:11:7f:aa:d4:3b:53:ca:7e:4f:73:29:
da:d7:dc:48:fc:d1:22:bf:1c:6c:fe:a3:84:52:7f:54:0d:16:
ae:11:2e:14:2e:8d:a1:49:b3:1a:d8:b3:1e:53:99:36:55:02:
a5:fc:8c:dd:8b:c8:45:91:0b:13:69:20:9f:c0:e6:8e:d8:e5:
13:2c:d8:18:4d:91:75:8f:78:e0:8f:7c:95:23:f7:4a:51:b3:
bf:33:7c:47:dc:aa:57:2b:95:c1:c9:30:b4:da:6a:1e:1a:fa:
32:d3:02:e2:91:d4:3c:aa:a4:17:b9:36:fa:2b:7a:13:8d:2e:
97:7c:e0:59:1a:b5:2c:53:ca:7a:ff:62:c6:d6:f6:8a:6b:b7:
2d:af:32:81:1b:5c:4d:48:11:6a:4a:0b:30:42:ff:15:53:0d:
35:3a:8e:57:20:d7:c5:ee:f7:ad:bc:05:ae:1f:9e:f9:5c:f6:
05:c0:1e:97:a7:63:5f:2c:7a:03:dd:b0:0c:b8:33:db:23:8f:
d7:cb:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:41 2026 by rpki-client