Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
File: 73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa (raw, json)
Hash identifier: CyTCBCAEqOp5IrLL3GnPhS+Vb2/qjVegbVz6MpZPZaw=
Subject key identifier: 51:98:45:B1:E2:F8:E4:1C:6A:C9:61:EC:7B:C5:99:5D:4E:59:C6:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6577C6F8DBFD38CCD8B3122DB7C117001089E6AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
Signing time: Sun 31 May 2026 01:00:50 +0000
ROA not before: Sun 31 May 2026 01:00:50 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:77:c6:f8:db:fd:38:cc:d8:b3:12:2d:b7:c1:17:00:10:89:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:50 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=00eed34806ec3d52e8c9464e9cd34bf7a438214021107926fdc574bfd3b30329, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:64:b0:91:8a:8a:0f:38:6f:d5:d1:db:1c:
57:20:88:06:28:28:5f:8a:50:f0:d4:0c:62:9a:63:
5f:31:a0:a2:c6:4f:da:45:53:a4:2d:38:da:d2:ff:
7c:44:85:aa:bd:82:09:f3:0b:ff:65:20:53:32:7c:
9d:d1:94:f7:44:59:56:0b:54:c8:79:2a:1e:71:bb:
f6:81:12:d0:36:45:d2:46:88:62:38:27:ab:c2:d4:
b3:d8:2b:cb:1d:29:05:89:67:07:09:3f:b5:fd:91:
5b:bb:00:97:fd:cb:ec:fe:ac:3a:a6:d6:61:54:08:
39:b7:0f:1e:46:42:88:8a:54:8b:b0:ce:c4:e8:11:
ec:0c:8a:78:35:ed:31:da:c5:43:94:d7:c7:b7:d5:
56:f6:73:44:82:32:6b:a0:fc:23:55:39:38:21:98:
69:93:f1:de:b4:63:10:64:6f:bc:0e:48:47:9e:d3:
79:a6:34:a3:14:ff:ef:ac:d6:16:04:58:b5:d0:a7:
df:15:91:d1:22:86:cc:98:ef:77:28:d0:7c:b8:c5:
9e:67:a7:76:33:7a:6b:ca:df:b0:52:4c:1c:9b:d6:
1d:a0:59:64:5f:e6:b6:fa:4d:8e:0f:ac:19:72:ca:
f4:6c:78:96:97:46:93:db:76:0c:b9:78:a1:fc:6e:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:45:B1:E2:F8:E4:1C:6A:C9:61:EC:7B:C5:99:5D:4E:59:C6:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:6040::/48
Signature Algorithm: sha256WithRSAEncryption
ae:2c:79:61:0e:04:0c:c7:16:88:e9:00:0d:a6:d5:d7:1f:24:
8e:f5:35:64:a5:5a:22:14:d3:5a:ca:6f:9d:25:f3:1b:6c:38:
8b:23:f9:60:60:ad:64:05:84:19:d9:9a:66:8f:e8:55:af:2a:
65:1f:64:f6:dc:4a:e6:e9:83:99:a6:be:f0:65:d7:72:30:8a:
ce:fd:84:89:1a:45:36:29:1a:50:fa:90:8a:6b:97:8a:3d:ad:
3e:f7:00:ea:af:f3:db:31:6a:4c:58:fa:cd:83:62:a4:dd:cb:
09:b8:96:43:bc:08:64:ca:37:75:a1:bb:30:58:a8:42:86:2e:
a9:02:fa:57:53:ca:43:09:81:dd:f9:0e:ff:8e:8c:9c:a1:6b:
b8:ca:f5:94:33:54:ff:21:6c:c5:da:df:be:48:2d:bb:b4:6b:
46:36:f3:df:76:c5:d2:ba:6c:58:c9:ac:ac:4d:77:d3:4a:c8:
54:0f:85:ac:2b:9c:61:7c:ee:fd:b5:bf:d9:13:b9:e5:3b:1a:
92:11:c3:e7:d9:ad:f9:11:d3:97:d5:23:4d:1b:31:e2:92:07:
2c:d9:17:44:35:21:2e:dc:57:a3:7f:37:f1:86:50:22:07:1a:
43:66:a9:bd:f8:50:e4:07:4f:c4:95:fc:b0:10:bc:f8:a2:55:
f1:4f:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:32 2026 by rpki-client