Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/809bad48-7fcf-4c3f-ba02-08289ae445d4.roa
File: 809bad48-7fcf-4c3f-ba02-08289ae445d4.roa (raw, json)
Hash identifier: dGmtoOzSKOeizHP0ILKC6UGIKlhDerPO/AZwLtuMvZc=
Subject key identifier: 3C:28:09:5F:61:C5:4B:C8:55:56:DE:E8:FE:A6:07:C8:93:04:68:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50F4138CEF21E99EA1BCF2315BDC2A04DBA4777D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/809bad48-7fcf-4c3f-ba02-08289ae445d4.roa
Signing time: Sun 31 May 2026 01:00:55 +0000
ROA not before: Sun 31 May 2026 01:00:55 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f4:13:8c:ef:21:e9:9e:a1:bc:f2:31:5b:dc:2a:04:db:a4:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:55 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=cc7957614f565c37c170d3aa3e121dca14d3505206c8b2e823fd75d2634cfa7a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:84:b1:75:b8:0e:8d:c9:94:76:e5:7e:95:
8d:dc:c5:f1:e3:18:da:48:e0:80:25:58:66:86:8e:
f4:70:dc:f2:eb:92:64:af:6a:3c:db:23:3d:ba:2f:
b5:bc:56:d6:96:35:54:e0:6d:fe:50:5d:a2:74:25:
c8:5d:d7:5b:7a:d2:a5:7e:45:83:64:42:06:44:5f:
e7:b2:59:1b:fe:6e:b1:99:85:af:6c:04:b0:04:15:
8d:a4:64:4d:6b:84:b5:4c:8c:bf:b4:3a:17:01:2d:
ab:2b:99:79:0f:0e:85:95:c5:fe:f0:f9:0f:92:59:
8a:05:1c:3c:51:b7:64:36:38:43:71:04:ad:08:2d:
25:db:0e:fd:41:30:a0:40:17:0d:fa:75:d7:65:27:
83:e1:2c:08:19:91:a8:da:8a:41:0a:da:f0:1d:7d:
9a:f5:06:a3:32:92:d2:f9:4d:52:ec:03:44:ab:ba:
4f:d4:a1:ac:d6:74:c6:b9:2c:70:a8:0e:af:f7:50:
4b:f9:92:1b:50:f5:a8:7e:fe:9d:35:6d:ad:e4:a0:
b6:05:f6:5d:9f:c4:5a:65:a2:f2:82:1c:67:e1:90:
5c:7f:ae:d8:e9:5a:00:13:05:cf:15:48:23:55:22:
52:46:74:89:c6:2b:02:41:fb:9d:53:35:44:96:09:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:09:5F:61:C5:4B:C8:55:56:DE:E8:FE:A6:07:C8:93:04:68:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/809bad48-7fcf-4c3f-ba02-08289ae445d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8020::/48
Signature Algorithm: sha256WithRSAEncryption
c5:ee:80:66:64:78:a5:7f:b1:a9:ad:87:70:22:44:8f:fb:dd:
6f:66:18:3b:7e:55:71:74:5b:33:f4:8e:c8:51:ab:09:29:21:
af:0f:05:d3:ff:4e:07:af:dd:fc:b1:af:26:75:76:ab:57:07:
29:8b:83:89:56:94:37:f1:98:2e:ce:4e:c1:02:03:89:62:4b:
42:d5:0a:bc:34:8d:42:1e:b1:9e:23:ab:78:91:bc:d0:9d:25:
0e:19:21:89:58:2e:ee:fb:40:d7:19:5c:28:16:fa:f3:c1:28:
53:40:46:70:ab:ac:20:1e:ac:8d:84:6f:e6:1a:67:9d:0d:77:
e5:ab:0a:92:b0:77:3a:87:1b:f0:50:62:13:f6:9f:d7:27:e0:
bc:c8:c5:0e:e9:c0:3b:f6:b2:c1:1d:a2:05:64:b6:6e:1c:aa:
53:1b:0d:1b:ae:3e:bc:82:f8:68:c7:a0:c6:7e:a6:14:4e:26:
71:4b:e2:3c:8e:12:1b:61:9a:e7:fa:de:4c:b2:24:46:c0:71:
5e:ab:be:da:e2:83:85:42:44:dc:0a:bd:6c:d4:27:e8:65:45:
15:c3:d7:5c:f9:00:5e:d7:65:cd:6f:9a:b7:19:2e:89:2e:3b:
25:22:57:15:d6:49:70:4b:13:db:8c:db:df:7f:64:3c:9a:1d:
48:31:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:33:31 2026 by rpki-client