Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
File: 67337a3a-3355-4837-82d2-cf7e20d337c6.roa (raw, json)
Hash identifier: Yj5CS4K1wkbcF2zgmwx8zq6OuhAY9lsxDd8rQlJTMRE=
Subject key identifier: 15:91:96:65:D8:08:F2:D8:8C:A3:6D:46:48:B9:E6:56:DE:F1:EC:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 434034453D832ED3C7C2864C4C1C4584BDE77B2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
Signing time: Fri 03 Apr 2026 02:40:26 +0000
ROA not before: Fri 03 Apr 2026 02:40:26 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:40:34:45:3d:83:2e:d3:c7:c2:86:4c:4c:1c:45:84:bd:e7:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:40:26 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=5d978ae1a1f4b6cb86987d982e0764a2bc81e7bb17e0eb309ca1badccce9f089, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d7:40:89:7c:4f:b8:e6:92:07:09:67:40:a1:
28:ed:38:9b:cb:8f:fb:02:55:b7:aa:0a:9d:cf:7f:
b4:d9:34:d3:18:d2:26:dd:a5:05:d4:72:3e:d9:6e:
9d:e4:3c:f2:97:33:2e:83:ad:12:e0:ac:4f:ec:d7:
49:4c:a5:fd:66:ef:24:fa:c4:4d:21:fe:59:11:79:
3e:63:ea:43:c6:db:6e:35:d3:a2:fb:3d:59:81:3c:
4b:11:4b:6f:6b:57:ac:97:12:96:4d:d1:ae:53:1c:
76:2a:ae:4d:9b:99:f1:16:b2:96:fe:7f:c7:65:ef:
98:91:60:cf:9e:93:7b:1b:b6:95:96:64:8a:41:59:
74:a8:2c:a1:a4:a3:d9:22:d3:47:6f:6c:23:d9:42:
87:8c:e7:e0:0e:ec:15:d5:fb:32:cb:23:0e:2f:6d:
42:58:c5:c6:ae:24:00:1e:27:90:6e:cd:b1:21:ab:
58:aa:64:30:97:59:fa:c7:4f:cf:e6:20:e9:b3:27:
43:5c:b1:2e:a2:da:25:7e:85:32:38:4a:14:bc:73:
33:b1:bb:49:99:92:f1:e8:8a:67:5d:64:42:bd:a1:
1d:7a:64:7e:a7:2f:21:8a:fc:22:69:c9:8a:27:29:
09:ef:f8:51:a2:57:b6:48:d1:e6:e4:af:72:49:d1:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:96:65:D8:08:F2:D8:8C:A3:6D:46:48:B9:E6:56:DE:F1:EC:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:1080::/48
Signature Algorithm: sha256WithRSAEncryption
31:c2:02:7b:1b:55:a4:8f:70:8d:64:d0:be:c3:25:70:21:4b:
20:2b:60:7a:a8:fb:89:31:4f:49:52:d8:15:ae:0c:43:45:0c:
f2:34:88:94:39:1d:87:f9:09:8e:47:1c:ae:90:fb:be:0b:72:
d1:10:50:18:bd:81:d7:c2:1a:b8:d7:fa:41:36:95:6a:39:8d:
72:f3:ac:b9:a0:4c:2a:d2:af:93:ea:4b:62:0c:5d:0f:97:ba:
03:37:e6:2c:20:24:e4:35:e1:69:ee:19:6c:53:14:dd:cc:88:
69:e8:e4:ab:ae:07:c9:32:fb:dd:14:42:cd:11:bc:ed:63:5d:
a0:0d:3c:5f:58:98:41:c2:38:36:e4:ac:36:38:90:df:41:39:
2a:2b:46:a6:51:72:5d:53:cd:70:bd:f8:a7:d5:96:ab:9a:93:
9f:e1:da:d1:2c:e6:72:be:d4:a8:1f:b7:c1:9f:a2:6d:81:67:
72:9b:06:69:26:6d:87:cf:fb:2b:2d:1a:27:c6:60:d4:cf:0e:
ee:81:11:0b:71:e8:aa:04:da:38:82:fe:f1:fc:ea:cf:01:a1:
32:9b:d7:34:4d:89:d0:0f:94:00:92:f3:42:8c:37:89:7f:2e:
ca:c2:7d:fd:55:e1:cc:1b:b0:f6:00:33:45:ab:1c:ab:2e:32:
94:35:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:48:07 2026 by rpki-client