Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
File: 7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa (raw, json)
Hash identifier: WXhxkPyuOtQrA8pxJA4P0/LWSkKnn4Uu/V3XMnpR59U=
Subject key identifier: E2:B5:E2:9C:6E:1D:33:16:E1:00:7A:23:70:55:CB:B8:C6:0E:86:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FBE4A375FA60BBA8CBDF2DA8208DD739E10178D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
Signing time: Fri 03 Apr 2026 02:30:20 +0000
ROA not before: Fri 03 Apr 2026 02:30:20 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:be:4a:37:5f:a6:0b:ba:8c:bd:f2:da:82:08:dd:73:9e:10:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:30:20 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=1ac05fdff7a1f777ccac697e4137247e3b4b80e933272602ef6b0e699cf27792, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:81:e8:cc:f5:ee:d9:cf:a6:56:32:d2:b3:
6c:ce:dd:6b:db:78:de:8b:f9:e2:c2:f9:bd:49:3a:
96:95:93:1b:64:8f:c7:e5:23:2e:c3:7f:9f:58:99:
4c:d0:ea:1f:d4:ac:94:1d:c2:f5:46:04:2d:b0:b9:
54:83:e6:b5:9f:68:29:15:62:85:fd:8a:e3:74:f2:
4d:b5:9f:a2:33:33:00:a4:6a:52:da:80:24:47:9d:
6f:c8:2d:78:c1:ab:be:0b:03:f6:97:2c:b4:f8:cf:
d8:46:70:b0:fc:5c:46:f7:b4:05:2d:68:db:c0:35:
db:c9:12:b0:ab:3f:36:bd:32:cb:ba:4c:10:44:5c:
8e:1c:48:30:65:6f:af:60:a0:8f:49:1d:49:0a:15:
60:9c:29:78:7f:fa:ac:0d:08:8c:13:b6:3c:6e:39:
e4:69:d0:12:dc:d1:ce:3c:58:34:98:3c:01:9b:f1:
09:36:83:9b:ae:b1:b6:75:c7:24:a0:5c:71:2d:1f:
82:75:a8:9e:fd:18:65:0d:fe:a8:d9:c8:a2:0d:74:
10:f9:0e:74:22:72:ae:be:f4:23:33:ac:54:a1:4f:
fe:a1:c7:2c:71:fd:91:22:41:9b:9d:da:0e:3b:a1:
f9:82:ec:dc:76:d5:6e:fb:5c:03:c3:1b:91:ef:61:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:E2:9C:6E:1D:33:16:E1:00:7A:23:70:55:CB:B8:C6:0E:86:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4020::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e0:24:7f:b6:8f:4f:52:cd:d1:26:74:ab:c4:03:35:48:86:
85:55:d6:5d:dd:17:ba:f8:bd:73:2d:aa:8c:d6:d7:00:ae:5b:
9a:9e:3f:2c:25:2e:73:de:0e:1d:f1:8a:5d:3c:5e:18:93:66:
24:a2:bf:8c:a1:bf:b0:c9:72:48:d0:a8:50:80:6e:1c:a7:0e:
f9:0f:0d:1f:e2:ba:14:74:01:4a:83:47:61:a2:fc:95:ba:fb:
01:34:61:39:f8:e7:dc:f0:4b:87:64:bc:31:be:b7:3d:dc:59:
eb:82:10:b7:b1:78:f1:d0:30:46:3d:11:fb:d0:54:82:35:4e:
1e:0c:7d:3c:3a:89:e9:fe:ca:45:b9:db:d8:10:df:50:31:bd:
d1:8d:4e:e8:e2:e2:16:23:01:5d:4f:85:50:10:94:1a:b8:e5:
f2:03:66:79:e3:e6:59:f6:b4:da:ba:59:78:4b:3c:29:fd:03:
61:fb:a1:16:0a:08:41:50:11:6f:b8:dc:a9:ba:29:0e:74:8a:
d3:20:aa:4c:cb:7e:6b:63:9b:e3:2b:57:c6:ad:65:3d:1a:00:
3c:b5:2e:4e:ca:b2:39:d2:2e:aa:bc:e6:2e:47:32:63:07:89:
81:b9:3f:f7:c4:19:82:91:d9:b0:c7:df:69:2e:c4:4c:95:62:
51:62:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:51:59 2026 by rpki-client