Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e933a26-0f94-4e35-8165-229bf38e651b.roa
File: 7e933a26-0f94-4e35-8165-229bf38e651b.roa (raw, json)
Hash identifier: PqyBpga64S2A0P49u1qKZa69+bQVUiROI8m77bYRJzM=
Subject key identifier: 3F:47:4B:71:81:3E:B4:82:07:A7:07:A2:64:0C:EA:CE:1E:DC:F7:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0374555CAFA6F80B00A221BC150A6C15AC8D8877
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e933a26-0f94-4e35-8165-229bf38e651b.roa
Signing time: Sun 31 May 2026 01:00:10 +0000
ROA not before: Sun 31 May 2026 01:00:10 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:74:55:5c:af:a6:f8:0b:00:a2:21:bc:15:0a:6c:15:ac:8d:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:10 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=923c6b671aae7c42ad9b48cd00a3bdbbbdab43b04924c0e3601df51d9cd06834, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:bd:6b:b5:42:85:00:f0:82:e1:cc:db:a3:
29:b9:89:6e:90:de:7a:ce:b8:ad:42:4f:0b:e4:6f:
bd:90:6f:23:b8:4d:cb:56:1d:53:7c:17:db:04:2c:
f8:c2:4b:fa:96:21:35:9d:c6:78:1e:41:45:7d:e9:
54:21:22:31:bf:01:86:94:58:72:19:9e:9c:bd:e2:
0c:85:74:4d:86:31:12:34:d8:9d:e8:da:c5:f5:4d:
ab:87:76:38:64:26:55:1f:9d:01:ed:07:ec:75:e6:
5a:a1:ea:92:df:d6:e0:05:1a:6e:34:94:87:e2:75:
62:7d:7c:71:5c:91:e3:c8:7c:d7:97:fe:4e:0a:8d:
25:1b:2c:a6:fe:a1:3f:11:0b:0c:62:dc:f2:d3:d1:
cb:3e:1c:a4:e1:cc:d3:b8:af:6f:3e:09:f5:49:ca:
7a:1c:12:1d:42:e3:db:1d:59:2c:c3:34:6e:c7:b0:
3e:83:c6:72:ff:38:1a:19:85:03:38:dc:d3:36:11:
00:9f:f1:c3:dd:53:64:e5:26:19:7c:01:0a:f4:2f:
c5:6d:e1:89:7c:0c:e3:9f:ec:7c:c3:dd:25:18:3e:
98:c3:22:01:72:e9:25:2f:79:93:ed:09:c0:0c:f8:
ed:4c:4d:70:30:dd:cf:90:dd:33:5f:69:19:41:1c:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:4B:71:81:3E:B4:82:07:A7:07:A2:64:0C:EA:CE:1E:DC:F7:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e933a26-0f94-4e35-8165-229bf38e651b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:9080::/48
Signature Algorithm: sha256WithRSAEncryption
0e:eb:2b:74:5d:c1:d3:e9:9b:78:4a:8d:73:89:a4:1e:c1:67:
7b:1d:62:a0:97:c9:95:3d:10:30:27:92:ea:f9:a9:d3:96:39:
83:1f:56:c0:75:ea:f6:b2:8e:8d:6e:41:04:66:ca:fb:56:03:
e7:11:07:53:41:82:8b:55:6a:59:fa:16:2f:ef:45:75:7d:8e:
18:e3:7e:69:07:b5:95:79:06:0a:b6:a8:67:de:64:b7:64:32:
6d:0c:7f:ba:04:25:85:c2:4c:30:90:72:4a:a8:a5:a2:30:4f:
bb:76:f0:f9:06:89:60:5f:a1:2c:c2:d8:91:73:74:c5:56:25:
c0:d2:3d:cb:b4:01:42:52:23:ce:b0:f5:14:44:ab:8a:ec:a1:
b7:b3:76:3e:10:59:42:52:9d:e2:f9:33:e8:96:e8:fb:68:fb:
b5:91:96:fd:91:9b:92:6f:b3:dd:a1:7c:0d:57:e6:aa:47:24:
81:61:e8:b1:fe:db:95:af:9c:fa:be:a7:c7:86:1e:f9:ea:0e:
ed:e5:58:52:bd:1d:8f:8d:ff:a3:fb:25:d4:0d:c1:42:d9:24:
dd:4d:6d:eb:00:09:54:3d:f1:1c:4b:59:51:c3:3a:bd:cb:b1:
3d:c4:66:be:e7:46:b6:98:36:eb:bf:23:1e:7c:47:71:cf:1f:
ea:ab:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:15 2026 by rpki-client