Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
File: 7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa (raw, json)
Hash identifier: pPVJVk2+s8I2DL87Bhnhj/WiL+fc8akjLLciA5B+qAM=
Subject key identifier: 95:57:64:DC:BF:1C:74:CC:AD:22:7A:34:21:3D:BE:75:EF:1C:22:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67EC45A3528918E72A34119BAE579E820A74CBA6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
Signing time: Tue 19 May 2026 04:50:56 +0000
ROA not before: Tue 19 May 2026 04:50:56 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ec:45:a3:52:89:18:e7:2a:34:11:9b:ae:57:9e:82:0a:74:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:50:56 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=22af8aed7dfddf0035d723fbb14310bbe825213933cc5839dc52f4402813144b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:9c:f9:a4:02:b2:d8:f0:fb:d8:a7:92:3f:
91:36:f8:db:8d:0e:2c:41:9e:9a:15:bd:a3:b3:df:
0a:b7:9a:00:09:34:1b:8a:3d:d9:da:69:d0:38:9b:
f3:33:85:fe:3a:2e:a7:29:86:04:63:96:bf:3b:24:
24:90:41:36:c4:2e:a0:7e:b2:43:10:7b:07:4d:10:
eb:f2:fc:e0:30:fb:f2:36:5d:6c:66:b7:6f:aa:ba:
d8:1c:2f:25:0b:8e:95:67:c7:ae:24:7f:b3:18:3f:
46:fb:41:6b:ae:e0:bf:05:5a:7a:07:35:8a:b2:fc:
c3:2d:2b:db:ff:13:b7:94:20:f8:85:b4:22:ad:fb:
53:8a:b1:41:f4:8b:21:3b:3d:9a:d9:e4:5c:b4:7a:
b1:eb:4d:0c:01:72:ef:74:8f:b4:e6:3a:78:3d:09:
cd:b0:b4:e2:72:ad:da:c7:06:56:b2:6f:f1:c5:92:
a5:6b:a5:6b:a9:6f:32:10:20:bc:50:50:7d:46:4e:
a3:93:3c:bc:4f:72:e5:e1:9c:bc:5f:60:65:b2:c3:
6a:04:ca:1d:6b:98:cc:04:cf:04:98:5b:37:e3:68:
76:b4:a7:64:8f:eb:20:1c:80:2a:79:ce:82:5e:c0:
88:60:6f:fb:65:b6:87:9c:a3:ee:62:c5:05:53:bb:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:64:DC:BF:1C:74:CC:AD:22:7A:34:21:3D:BE:75:EF:1C:22:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:9000::/40
Signature Algorithm: sha256WithRSAEncryption
66:83:f3:aa:69:3f:63:4a:73:91:b2:01:7b:dc:e6:17:60:0b:
da:67:7b:fe:37:80:02:b7:61:51:9c:1d:1a:50:6c:f4:e4:a8:
72:70:57:fd:74:d9:3d:8f:fc:68:bd:8b:28:22:0f:2c:3e:cb:
96:23:99:d8:f8:0e:ff:49:a5:2a:dd:ef:09:f3:12:7a:c7:c4:
96:38:cd:5c:57:e1:6c:0f:ab:a1:c3:e5:ad:37:b5:98:bb:87:
5a:5e:0b:e0:aa:6b:36:e2:18:c6:25:f2:01:8c:38:75:5c:6e:
b6:fa:75:1e:52:7d:a0:62:1d:a1:9f:8b:25:b8:d9:a7:42:ed:
e4:f2:91:f9:f6:54:97:c7:ef:40:26:d4:ee:5a:d4:de:4b:d8:
1f:cc:ea:32:bd:01:91:83:e4:35:aa:0f:1f:1f:61:13:6d:16:
5c:9c:e8:ef:0a:e9:ca:4a:75:bb:60:56:dd:ed:b9:9a:a1:c6:
94:44:6c:34:e0:b9:e4:53:1a:31:a3:76:3e:57:2b:63:9d:41:
c7:27:ef:35:23:69:3a:87:69:6a:41:7c:8c:21:6e:f7:1a:e3:
0b:f9:c7:03:96:d7:18:63:14:79:ae:6c:00:b2:19:6c:b9:a5:
19:a6:29:f6:ca:6c:ab:9e:61:24:01:47:90:75:ef:7b:42:7c:
12:45:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:10 2026 by rpki-client