Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
File: 51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa (raw, json)
Hash identifier: 0dzEgjnA8aL6js6c81DDL4RENEmJbLgDGETCYNi+ocs=
Subject key identifier: 6E:20:70:8F:3C:0D:A0:A5:F1:1E:0F:32:71:09:2D:1E:C5:9A:30:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B6C11A3349B5BD3FE6A6AABA4535B6413AD47BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
Signing time: Tue 19 May 2026 05:31:21 +0000
ROA not before: Tue 19 May 2026 05:31:21 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6c:11:a3:34:9b:5b:d3:fe:6a:6a:ab:a4:53:5b:64:13:ad:47:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:31:21 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=bb48cd90aa83efecacf44e02b21e0815a0f1c7ea39b00e124e9296b4da56f027, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:84:4d:b4:86:f1:6c:a5:80:ba:b4:1a:93:
ef:b5:b8:70:ea:53:79:63:a0:11:f0:c3:98:04:1d:
8f:cf:06:aa:d9:5d:a0:9f:ac:55:91:23:26:01:5e:
c0:23:af:99:50:24:ef:fe:db:01:5f:e8:a5:02:28:
bd:85:d8:e2:71:00:d9:c9:e7:82:28:f3:ae:24:4d:
76:ff:18:3a:e8:e1:8d:90:c9:fd:f3:05:0b:18:c2:
ec:10:6e:47:61:b0:7f:ab:4d:fb:2d:29:de:c0:59:
1e:80:f0:68:e4:e2:62:ce:15:f9:4d:71:7f:4f:c7:
69:33:50:31:b8:f5:f1:41:49:33:1d:a3:1e:5d:91:
a7:97:0e:8b:6c:bd:74:77:6d:6f:6b:2b:0b:bd:74:
a3:2c:43:f7:46:2f:ef:08:7e:f4:a6:e7:22:c3:95:
6e:eb:fd:46:0b:93:a0:bb:7c:1c:a3:41:29:99:27:
25:5e:db:62:f8:9f:12:6b:0a:6b:b2:b4:40:69:20:
16:ac:a0:5e:08:f6:a0:6c:84:58:ef:08:9c:2a:1e:
06:d9:d9:49:a3:87:0d:de:01:8a:28:cc:98:90:a7:
62:61:5e:c9:e6:ac:d0:1f:fe:37:79:b4:80:b3:69:
0e:96:07:eb:7a:7e:79:00:94:1a:a4:35:e0:52:56:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:70:8F:3C:0D:A0:A5:F1:1E:0F:32:71:09:2D:1E:C5:9A:30:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
63:80:42:00:a3:86:c7:92:31:f6:bc:53:50:8b:c6:50:20:92:
4a:f6:14:f2:bb:9b:60:44:12:0a:9b:d0:e7:b7:53:85:b6:9c:
da:13:d8:cf:3c:33:b1:ba:97:57:13:39:9c:70:6c:f4:bc:cc:
2f:c0:ac:e0:87:72:d6:05:0e:e2:bd:f3:16:25:ee:a2:26:42:
aa:56:3b:80:d7:a2:df:b9:0a:8a:24:03:c9:f8:60:32:b4:21:
31:77:72:db:34:36:43:ae:73:01:6d:e5:07:5c:46:16:19:3b:
28:7b:a3:e4:11:c2:c9:2b:f6:f1:0f:44:49:e0:42:94:eb:66:
23:09:b4:4d:5e:a0:9a:f8:2b:13:99:f1:26:90:34:21:57:3c:
a6:28:2b:78:c4:6a:62:c6:39:81:2f:bb:13:4a:9a:0e:5b:9e:
04:b5:e1:fd:51:1c:d1:8d:06:59:5f:f9:d7:db:a5:21:13:57:
86:31:6c:04:80:da:74:b1:5d:7d:d2:60:44:41:20:9e:a7:3e:
50:61:8d:a3:8e:d0:ad:72:50:30:2d:96:8c:c6:85:0f:7e:53:
75:b0:89:9c:60:8b:e7:3f:fe:e4:27:9a:5c:62:10:22:b5:1f:
3c:58:7d:69:78:61:08:b5:9d:b9:71:32:59:17:37:13:51:be:
81:62:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:54 2026 by rpki-client