Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File: 61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier: oucli6d9fKIF6cMoJMn7GEV/LwWz1o0G9ZJhrjeLx0U=
Subject key identifier: D3:0C:BC:F2:FC:3C:88:9C:D0:8F:1F:01:EA:68:14:43:CE:8E:A0:D7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FDAA1D874CE2C4DF04C40EAD2C6C908665E349F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time: Tue 19 May 2026 05:30:13 +0000
ROA not before: Tue 19 May 2026 05:30:13 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:da:a1:d8:74:ce:2c:4d:f0:4c:40:ea:d2:c6:c9:08:66:5e:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:30:13 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=eec142e950ea723d720c9f8fa9537d9a09bdbf15dec66b59633f0b959759149b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:29:cc:34:83:1f:0e:f6:0e:54:8f:42:b9:
9c:c4:bb:1c:d4:1d:c0:b1:5e:52:7c:a1:35:23:ed:
0b:ca:42:3e:84:c8:dc:58:c9:bc:52:35:3a:9e:e9:
33:af:d2:0e:09:2e:3c:ab:30:b0:00:43:19:0e:0b:
55:a6:70:60:c8:8f:d5:52:a5:d4:ad:a5:48:84:1b:
b3:1a:00:34:c0:09:0c:a0:c2:8b:c3:fd:03:b0:50:
c0:05:97:1f:3a:07:12:7e:ac:fe:b0:0b:95:6c:49:
c3:79:2c:4c:f3:06:62:0d:a4:46:f6:a4:c8:9c:93:
e0:80:49:f3:05:40:06:4a:48:e3:86:f1:9d:89:4f:
bf:08:92:2c:7d:6a:dd:52:10:b2:d7:b5:ac:32:43:
70:3d:f5:d2:29:7d:53:a7:ce:ec:fe:cc:0e:9e:cb:
dc:79:11:1e:e8:d1:8d:d9:e3:ca:21:e9:9d:63:54:
96:b4:9b:c0:d6:5f:fc:48:8d:7a:86:fb:b3:a1:66:
47:a8:ff:59:2c:0d:c5:88:7d:a8:32:2d:bf:a3:d8:
64:ae:e6:2c:83:dc:a6:da:8b:b5:c8:f9:5e:30:16:
8c:27:25:62:ff:8d:00:8f:aa:7a:0c:d6:4f:e7:b2:
8c:a0:e1:98:be:73:98:2e:13:cf:a8:c8:cb:97:fa:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0C:BC:F2:FC:3C:88:9C:D0:8F:1F:01:EA:68:14:43:CE:8E:A0:D7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:a000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:3b:f4:9e:aa:31:58:68:cf:dd:cb:c0:d5:b4:1f:93:5d:c8:
42:1d:bf:f5:02:6d:85:69:59:a1:ff:22:da:4e:57:40:cd:1e:
13:6c:ea:12:9e:70:af:de:79:6a:78:42:c6:1c:e1:89:b3:f4:
d5:be:1e:32:a1:69:2a:80:0b:9f:c9:33:7e:35:6e:2d:ff:f1:
84:a2:cd:e5:f4:8e:c2:58:d1:a3:a2:f3:af:3d:57:10:4c:26:
6a:0a:eb:9a:a8:da:65:17:5f:3a:70:5b:43:73:bd:71:4b:13:
41:ed:9c:c6:ff:58:57:6f:9c:b6:a2:12:83:d7:6c:6c:49:b0:
fd:90:88:57:8e:f5:dd:6a:58:5a:6c:9a:df:57:f1:8d:1d:39:
bf:9e:a7:04:47:6f:41:9e:dc:f6:66:9f:18:2e:df:08:35:4d:
8e:a4:b8:4c:ba:59:2c:5a:b0:6f:c1:28:3d:31:10:d5:24:38:
b4:a8:41:3d:d1:53:c5:e7:86:cf:f9:2b:f2:d3:79:5c:22:2f:
16:c3:af:56:80:45:10:be:da:06:9f:7b:c7:cb:70:2c:6d:35:
a9:f9:23:9e:a6:a0:93:42:77:01:99:a7:f2:d9:9d:84:83:e4:
d8:6b:97:46:aa:15:5e:df:34:06:b2:09:96:93:18:7b:49:c8:
a9:01:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:03 2026 by rpki-client