Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
File: 5836d090-8999-43ab-a38c-f63a0e829c0b.roa (raw, json)
Hash identifier: CzV/y22y6Ur9FjmkVUeXizPHDorMpeYTvobUwl8JQA8=
Subject key identifier: FE:88:62:E7:E8:53:EA:CA:02:A4:D9:C1:21:CE:85:4F:70:4C:F4:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74C1957B32496BFEE363A1DF3FB4B6FA0C569DBF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
Signing time: Tue 19 May 2026 05:01:10 +0000
ROA not before: Tue 19 May 2026 05:01:10 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c1:95:7b:32:49:6b:fe:e3:63:a1:df:3f:b4:b6:fa:0c:56:9d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:01:10 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b65afbe2eb8dc8c2e4d25b071dc6ff0ffdb12f38740164bc554e783e97fc75ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:1e:ae:2f:20:64:52:1b:a0:a0:c3:ed:f2:
5f:0f:a0:9b:43:ad:65:1d:58:c5:9f:fe:11:d1:c5:
8e:0e:76:8c:42:54:a1:83:98:d3:e6:be:a0:22:e4:
f5:28:eb:96:50:e1:2c:fe:48:74:23:11:27:e6:d5:
e3:33:2a:ea:5a:c0:f0:93:92:67:76:85:48:e6:95:
fd:dd:d1:e0:75:06:17:77:51:2e:92:1a:a9:dd:1a:
0f:47:90:b3:90:ad:60:9a:0f:ca:e7:6a:8c:83:b9:
34:2c:67:a2:0d:6f:65:90:d4:89:7b:28:3b:4b:be:
61:4b:e2:5d:f0:23:c4:e1:06:08:5b:65:70:5c:80:
7b:f8:a6:ac:26:fd:f2:5a:7a:e8:ed:82:40:56:cc:
50:8e:e7:e6:ae:f7:16:a5:46:2a:3e:a2:f2:ae:d2:
d1:90:0d:1e:2e:d7:e6:5f:c9:37:81:94:b0:dc:36:
c2:c2:93:70:c8:8f:5f:5d:0c:09:90:ae:81:41:db:
a5:49:bc:d6:fa:7e:05:8d:de:22:61:a1:aa:7d:d3:
c7:4c:67:25:06:6b:3e:6e:ee:13:df:8d:92:ff:19:
aa:e5:b9:6e:ab:10:1c:0b:92:6f:81:b6:7e:f6:e2:
a1:ec:5d:79:c7:21:0d:e2:82:fa:90:0c:3f:1f:fa:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:62:E7:E8:53:EA:CA:02:A4:D9:C1:21:CE:85:4F:70:4C:F4:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:cc:f7:3a:48:e8:92:0d:21:96:7a:bb:ff:59:4a:ad:82:1d:
2d:9c:28:93:7a:a6:2d:71:df:d7:01:31:b7:7b:c9:9d:1f:1d:
6f:4f:10:25:9a:25:ab:40:52:10:ac:b3:56:42:0b:6e:ea:40:
a4:58:13:6f:b6:fb:70:b3:d8:80:44:ac:2f:2c:a5:b6:54:f9:
96:f0:6c:84:04:8b:1e:78:99:10:19:a5:cb:54:7a:68:d5:0a:
c5:b4:31:d0:24:2b:30:ad:e3:29:2b:15:73:2b:ec:64:24:c2:
44:1f:93:7b:4a:92:6b:91:3a:0f:84:ac:55:dd:4f:c0:d1:41:
a3:f5:9f:e8:d1:53:78:b3:94:24:56:1f:21:21:3a:39:1e:e4:
00:47:9d:92:6b:f6:a4:8a:73:e4:62:c8:8c:a0:bd:4b:50:21:
04:5d:7e:9e:af:34:c7:45:bc:0e:a2:c7:eb:2e:88:7a:38:6e:
7b:86:ca:d5:ef:8b:2d:99:49:dc:43:56:41:19:44:9a:5a:62:
80:58:64:df:1f:b4:19:8d:cb:c4:fe:3b:f4:56:a4:06:87:f0:
36:93:b1:27:be:1d:07:82:40:95:4e:8a:38:9e:8e:3c:13:2d:
c1:2f:89:ab:71:01:3e:61:26:8a:26:60:a0:09:a6:64:4f:e1:
04:32:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:56 2026 by rpki-client