Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
File: 73ae3aed-406c-4215-aaab-cbe4f0a30441.roa (raw, json)
Hash identifier: BzHElGIfxh8rcZTBOYTqO+0yBV5Mia11pgkZ5iJP4C0=
Subject key identifier: F2:50:F0:48:F9:C8:63:20:CC:61:41:DB:03:65:95:D6:F8:BC:8B:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B113CA69B8B8399C5A9304EAB894B29DAA80AB4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
Signing time: Mon 06 Apr 2026 18:36:50 +0000
ROA not before: Mon 06 Apr 2026 18:36:50 +0000
ROA not after: Sun 05 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:11:3c:a6:9b:8b:83:99:c5:a9:30:4e:ab:89:4b:29:da:a8:0a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 6 18:36:50 2026 GMT
Not After : Jul 5 23:59:59 2026 GMT
Subject: serialNumber=5327d539ac034ce1da4edea6bc3177b2be044c44b4374e47f310bc89167ca954, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:aa:33:16:83:54:bf:90:ec:d8:b5:2c:c7:
66:95:e6:37:0e:a6:30:e0:46:96:a6:74:1e:7f:2d:
d7:5a:04:de:2e:d8:fa:07:14:7c:5d:4d:08:45:81:
fd:a9:52:5b:2c:f0:64:96:a7:58:6e:f1:9a:30:16:
b5:fa:5a:2a:db:f6:39:90:66:69:6a:52:39:8c:f4:
1f:f7:59:28:a8:79:e4:65:ed:38:37:48:7e:fd:22:
b6:86:7c:48:20:03:d5:c6:ac:98:01:18:58:03:7c:
c8:f6:f3:4a:1c:c5:ec:d9:07:dd:53:70:17:ae:f2:
b7:c9:e9:85:01:07:f2:84:9e:fd:62:3e:2e:75:a3:
e1:d0:6e:da:13:d8:1c:12:ba:5a:0b:b6:0d:cf:74:
eb:12:05:77:49:d0:12:05:7e:ac:a5:d4:31:2b:da:
1e:ff:7f:47:7e:46:b1:2c:e0:4a:9c:57:ed:5f:47:
cc:63:d0:c4:9b:df:9c:cb:e4:b7:05:92:5a:bf:4f:
64:03:fc:e0:d7:77:a2:d4:e4:82:13:92:2a:54:33:
d4:ea:b9:82:61:8a:6e:94:82:6c:73:12:18:d9:bc:
a4:1b:ee:9d:58:4d:85:23:4d:05:86:29:d3:7b:89:
ca:ad:4f:2a:5c:39:99:d5:fa:57:61:f1:b6:96:f2:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:F0:48:F9:C8:63:20:CC:61:41:DB:03:65:95:D6:F8:BC:8B:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:8b:70:0e:51:51:cc:a8:b4:76:81:42:ea:21:b0:ac:be:ee:
a3:49:cd:1b:91:40:d9:c4:9e:52:44:47:c7:a8:de:aa:a0:13:
fb:75:57:a6:f2:b5:8d:ce:72:b3:37:74:a4:65:2d:d4:a3:79:
76:ab:40:d2:dc:7a:77:19:d8:5a:e2:64:1b:e7:14:70:81:32:
26:06:1d:b3:db:85:85:05:ca:0b:d4:9f:ec:9e:38:83:aa:11:
5b:be:90:31:03:86:f6:84:66:50:b8:cc:90:4c:94:b8:e5:a6:
94:7e:5c:d3:85:7b:09:58:86:d7:99:84:4d:b5:38:25:ac:46:
03:df:52:f8:f9:a8:71:e9:f7:71:b5:63:8a:63:4b:6f:7e:5f:
34:a0:74:2c:12:52:a0:db:e3:b4:4e:93:be:ca:09:90:b1:69:
c5:9f:5a:9c:56:fd:c1:3e:b8:3e:a5:b7:47:f7:f0:04:73:b0:
dc:54:57:b3:98:00:ce:5e:5c:1e:6d:ec:e0:39:92:e9:6e:90:
91:90:c7:de:20:9d:97:44:e7:1c:a5:f7:dd:7c:92:72:4e:f3:
2c:42:54:28:45:52:da:5b:9a:40:8e:38:7d:bf:20:bf:9f:d7:
23:4f:2a:9b:a5:51:bf:d9:60:4e:db:89:d8:4a:b8:79:98:64:
a1:32:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:39 2026 by rpki-client