Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/629bc819-2628-4e56-be9d-dd2d0390e9de.roa
File: 629bc819-2628-4e56-be9d-dd2d0390e9de.roa (raw, json)
Hash identifier: K4eyfF/iSVIsKaMEtqSR8ruyNEyA5oz/Kxzu6+SU/mc=
Subject key identifier: D2:60:16:64:98:F1:1D:38:D1:6E:A3:6B:91:D8:86:B3:F4:1A:DB:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 306F5886C72067521F4A338F9964B58A3479F748
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/629bc819-2628-4e56-be9d-dd2d0390e9de.roa
Signing time: Sun 31 May 2026 01:00:33 +0000
ROA not before: Sun 31 May 2026 01:00:33 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6f:58:86:c7:20:67:52:1f:4a:33:8f:99:64:b5:8a:34:79:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:33 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=7ebf621992f7cbbb14fab851a10caa4cf1d1cdfa3dfb7abd6e935eb375b46c21, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:1d:8a:65:b8:21:88:72:c2:41:93:ef:3e:
bf:15:46:64:e1:0f:1c:0e:b6:be:af:b3:0b:d4:b5:
4c:d7:18:c3:fd:84:98:f1:6b:c3:f3:be:79:af:6b:
b3:27:a9:77:0c:e7:fe:77:22:56:1f:24:95:35:c9:
41:18:d2:35:9e:83:4a:79:9f:f2:1b:f7:5c:29:08:
ad:0e:e2:bd:fd:c2:c7:75:1d:0d:93:66:89:bb:34:
f3:5f:06:bd:1f:a3:07:ef:70:dd:b4:b7:e5:d1:41:
3a:21:a0:4f:27:e0:30:84:15:f1:5d:c7:31:77:1f:
90:3d:24:c8:a5:79:78:7d:89:03:3c:96:d8:78:6d:
bf:ad:cf:0c:a5:28:c8:80:37:25:f0:df:e7:8c:e3:
c1:86:ab:04:c7:21:da:3a:9c:39:8c:87:ee:88:1b:
99:07:70:be:cf:b5:e1:94:b4:7b:30:60:fb:01:a0:
6a:e4:b4:30:8b:af:28:9c:43:e4:3f:e2:bc:eb:8f:
d8:da:34:06:79:43:05:52:00:c7:a8:63:2d:9d:a2:
0e:5c:f7:2b:f7:59:5d:6f:49:bd:c3:6f:b8:09:50:
79:59:09:ac:5f:39:99:45:8e:35:e5:7d:02:90:2f:
8b:6b:cc:b1:d1:35:d9:57:f3:e8:bb:c9:7f:05:2f:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:16:64:98:F1:1D:38:D1:6E:A3:6B:91:D8:86:B3:F4:1A:DB:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/629bc819-2628-4e56-be9d-dd2d0390e9de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4020::/48
Signature Algorithm: sha256WithRSAEncryption
69:47:ec:62:46:8e:cd:4b:e0:fa:41:28:07:b5:81:32:b0:c3:
8e:aa:13:c4:a0:4f:9c:2f:0d:22:3f:4e:36:31:2f:7a:51:88:
2c:ce:d8:a2:2e:9f:f7:28:ca:3d:00:17:fb:a7:bb:39:5b:56:
16:10:bc:1b:a4:79:f0:54:c3:59:0c:31:7b:46:86:7c:2c:b4:
3e:e9:2b:e1:5c:84:40:6b:f6:9d:af:97:e1:95:e8:4d:67:d7:
b9:16:b0:8a:29:a2:4d:41:fc:76:75:b6:58:88:19:bc:b6:91:
65:48:76:a8:b5:7e:5f:7e:0a:90:0c:91:91:30:f8:02:eb:24:
3c:83:8f:33:66:7e:67:7c:c7:a0:42:cc:e1:03:69:b1:e5:56:
f2:dc:d8:17:b2:0f:af:0b:8b:aa:8b:03:84:cf:b8:a5:0c:0f:
03:d5:d8:a9:3a:ab:62:ec:d1:36:83:f8:96:ac:07:dc:e6:83:
2d:93:e0:cf:1a:88:c8:ef:6d:3d:50:27:26:2d:99:8f:59:06:
8e:21:d9:0b:db:6d:70:6a:fe:ff:8f:0f:1c:a6:29:73:74:b8:
d0:58:b2:38:40:a5:b3:02:20:b3:0b:ff:04:99:c2:ac:28:05:
ae:43:cb:98:1d:2d:b4:ab:a9:cc:bf:eb:c8:d4:2b:7c:2f:98:
ad:92:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:52 2026 by rpki-client