Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa
File: 81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa (raw, json)
Hash identifier: YbC/gL8hUW2/HxyQdA4Mal+Gr7xNd7Gw4POaiKGYuKo=
Subject key identifier: 70:D6:4A:06:31:F0:67:C4:11:B1:9C:57:BF:E4:A8:F4:02:98:AA:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 175C09068D4EB460D90D2DAC61B2C9D03261CD56
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa
Signing time: Tue 19 May 2026 05:40:39 +0000
ROA not before: Tue 19 May 2026 05:40:39 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:5c:09:06:8d:4e:b4:60:d9:0d:2d:ac:61:b2:c9:d0:32:61:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:40:39 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=8bf1ec6c841a4eb3d2e9bc4bc268e5d96dade4a29eb167e38d06a7a470efb37d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:9c:bf:7d:52:2a:a9:9c:b3:a8:d7:19:b0:
cf:28:8c:c0:f5:8f:9e:2a:ad:26:b0:ee:56:b6:bd:
42:44:14:f4:0e:0c:d2:8f:09:25:56:c4:0d:80:b9:
34:ae:ab:b4:5f:9b:76:79:9d:27:58:d1:0c:4c:da:
d5:96:33:0b:9b:33:a4:87:ce:41:1f:84:82:cc:f3:
dc:12:e2:26:ad:1c:f4:35:f3:08:8a:45:24:d2:b9:
01:9b:3f:de:90:e1:fc:8c:33:37:89:42:81:cc:9f:
9f:20:06:c3:df:9a:aa:fb:83:d0:aa:9f:0c:ca:ca:
e6:cb:33:f0:a5:0f:fc:8f:85:97:a2:f8:59:c7:fe:
d2:d4:f0:8e:5f:4d:4e:c2:a0:09:5d:eb:d1:bb:07:
b0:dc:19:4c:af:1c:c5:3f:62:32:05:94:65:2b:b5:
7e:51:65:46:3d:60:62:ac:a8:1b:e0:4e:f2:97:5d:
48:c4:4a:d7:16:50:2c:65:19:68:74:c9:b3:7a:5f:
5d:89:88:27:ea:64:0f:c7:85:d0:53:d5:73:0d:22:
b5:16:38:8f:93:c9:65:e0:cd:96:ac:96:a6:fb:2d:
a0:31:70:0e:08:cc:e3:24:d2:4f:5e:f7:32:54:ad:
65:c7:34:10:d1:84:3e:2f:f2:09:1a:4b:a8:c3:19:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:4A:06:31:F0:67:C4:11:B1:9C:57:BF:E4:A8:F4:02:98:AA:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:e040::/48
Signature Algorithm: sha256WithRSAEncryption
1b:54:0f:08:1b:84:44:4f:be:97:3d:e6:3d:78:81:16:f0:12:
b8:92:7c:41:cb:cd:ff:9f:e3:8e:e5:b8:7c:87:fc:26:89:a6:
20:1d:41:80:34:af:a5:b5:39:52:91:67:97:b3:f8:d4:15:fe:
f1:e1:77:52:52:4b:05:36:f6:51:e1:08:8f:3d:a7:92:d9:5a:
f0:3e:ea:33:8e:99:bc:02:a2:d9:1b:b7:55:38:a1:ba:46:d9:
27:7e:91:79:47:98:aa:e5:76:22:72:cb:ca:4b:82:0c:b2:4a:
1d:ef:54:f9:fb:da:d6:e6:a2:0d:91:9d:e1:f9:80:7f:47:29:
7b:46:98:3a:03:dd:23:9e:71:09:74:3d:f2:52:de:5f:13:42:
4a:84:5c:68:15:00:30:80:b7:af:1b:b3:c8:41:ff:57:cf:1b:
68:0a:18:4c:0b:63:c8:11:71:d2:3e:0b:6e:2c:2d:17:d9:6e:
98:57:47:bb:e4:18:32:e6:53:16:a3:9d:ca:73:4f:76:8f:c8:
4f:c0:e8:a2:3c:f8:87:7f:31:f5:ae:fa:8c:89:20:ac:e1:24:
24:cd:c2:f6:7b:1f:e6:22:d7:9c:44:36:2f:1b:cf:2b:4e:cd:
9e:09:79:75:c3:aa:1d:40:3d:a9:33:2b:b1:5d:c4:fa:85:91:
6c:d7:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:10 2026 by rpki-client