Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: T+VDiPBT2bSwkBrh0ups7wVJJCgV/DOlqJ0stnmRTjI=
Subject key identifier: 1E:DA:14:D4:A9:66:AB:60:AD:9C:B4:9F:68:5E:1A:03:52:7F:37:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5183819D36D2413359CC738D8E4E3018A572CA13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Tue 19 May 2026 05:00:53 +0000
ROA not before: Tue 19 May 2026 05:00:53 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:83:81:9d:36:d2:41:33:59:cc:73:8d:8e:4e:30:18:a5:72:ca:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:53 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=aa278d3ef97e032028bc1b89dfb16b302b5b5bf6a69e0ba2d78b3f03e567079c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:e2:07:d5:f5:b2:a3:0e:7c:06:d2:2a:51:
cc:49:4c:9a:a5:04:e7:4d:fc:e6:8b:1d:af:5c:cd:
81:25:1f:be:32:85:f2:14:49:77:8c:c7:e6:4c:c1:
f6:56:81:32:0c:77:09:f1:3e:7e:16:e8:fa:f6:83:
bc:24:96:2a:3c:6b:42:34:11:e7:c1:c0:9c:23:d2:
de:5a:e1:6b:9f:2d:6c:e5:f9:55:36:86:d0:69:ad:
9c:f7:b7:a2:83:c7:9b:6f:75:a8:55:c3:0b:cc:57:
2e:ad:12:59:2c:e1:04:a4:89:37:ab:17:6d:1e:67:
30:f2:84:63:50:f8:62:17:65:6b:7d:95:0c:d4:4a:
81:0c:4b:59:c6:fb:bb:44:5a:9c:20:75:4c:51:64:
71:c6:7b:54:6b:a8:9c:20:e5:32:8f:f9:4f:14:4b:
1e:9e:53:15:65:6f:10:9f:69:cc:67:b0:c5:49:dc:
c0:ac:20:d8:79:e1:22:7a:b1:14:c1:77:91:d0:05:
76:5b:57:71:09:9f:62:56:d0:ec:19:eb:b3:f1:98:
40:64:ed:2a:a8:4c:b7:fc:47:57:0e:ad:2a:3c:ae:
c3:54:f8:4a:a9:18:c8:3e:cb:84:62:c8:65:38:36:
ac:ab:16:10:b1:4e:b7:f0:0e:f9:9b:de:2d:41:75:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DA:14:D4:A9:66:AB:60:AD:9C:B4:9F:68:5E:1A:03:52:7F:37:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:ce:b0:2c:c8:0f:0a:14:80:7b:72:3a:fe:08:36:e0:eb:3c:
25:7f:0b:85:13:f8:ce:30:0f:d8:bf:b3:9e:45:8b:4e:96:f0:
ac:a2:c0:cc:33:93:91:b0:ba:46:40:d1:03:61:95:bb:af:8b:
e3:9f:f3:e8:c1:8f:d0:14:6f:45:82:85:e2:b8:dd:bf:46:28:
f9:d1:c4:b6:87:9f:67:54:7d:f6:50:ec:29:54:69:40:a2:af:
e1:87:e7:92:55:ee:ff:b1:0c:d7:70:0f:12:21:a0:7c:6b:1d:
06:ef:06:02:a1:02:ec:f5:bb:9e:07:c9:fd:d6:96:8d:36:b3:
d8:0e:06:6e:d1:81:62:56:17:a5:51:a7:8e:1a:fe:d2:e4:a7:
60:4a:6a:bf:de:b2:ac:88:19:73:47:2d:b3:8c:65:79:1b:5c:
69:f4:a9:b1:4d:56:bf:c5:90:4d:35:95:14:b0:ab:86:25:64:
d0:ea:86:67:0b:1f:f8:c4:e5:43:d7:b9:c2:e8:9d:73:f1:88:
f2:55:b4:81:99:ef:45:46:40:dc:b5:70:6f:29:12:4d:b0:50:
57:b2:50:46:3d:6f:1d:5a:04:1f:8e:22:6f:e7:d6:85:99:ea:
b8:ce:a6:9a:6c:f1:a3:06:7d:06:66:24:32:41:53:bf:af:c3:
83:e8:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:35:45 2026 by rpki-client