Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
File: 8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa (raw, json)
Hash identifier: DAJMUp3ixok2vU8BU60aGXl9gz9jmjeJkO1amWCzsnk=
Subject key identifier: 4C:C6:C7:54:05:89:A4:65:E2:50:36:D6:43:DB:BE:64:35:44:DB:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FAA4C044AA119433F3A659A76161F5F457C899A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
Signing time: Fri 22 May 2026 16:04:57 +0000
ROA not before: Fri 22 May 2026 16:04:57 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:aa:4c:04:4a:a1:19:43:3f:3a:65:9a:76:16:1f:5f:45:7c:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:04:57 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=189b5f4bbe31d144ad41c9558a85e49f4ee02243184cf60888312fb93efc36b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:18:38:50:17:73:59:63:2c:54:0c:c9:b3:
a7:4f:c7:25:cd:eb:ca:64:57:c3:39:b0:8c:b2:d5:
32:08:9d:8d:db:1c:77:ad:b0:9c:dc:98:be:c1:1b:
4a:4b:23:32:54:aa:f4:e3:0d:c3:af:15:11:45:48:
6d:80:20:5f:74:b2:6b:79:f7:f9:86:8a:6b:ab:75:
c7:e9:f2:55:fb:68:64:47:7b:89:13:55:e1:77:00:
fb:14:b5:a8:f8:a6:8f:ff:e7:50:17:73:c5:dd:eb:
8a:3e:45:46:e0:f1:8f:93:6f:e7:c2:c5:ce:ee:13:
5c:f7:73:6f:40:fe:95:ea:10:a3:b3:b2:b3:84:35:
c4:0b:93:32:5c:46:08:c0:ae:7e:d7:ed:a2:c5:d8:
4f:ea:18:2a:47:c2:40:a7:17:52:08:ed:b7:91:91:
e7:ae:bf:88:f9:ed:34:1b:6f:07:e5:eb:59:fc:e6:
96:e1:54:ab:52:a6:40:50:93:c3:01:88:68:da:e5:
10:50:de:bb:a9:6a:d1:2d:20:11:1b:b5:94:d1:4b:
d5:45:ae:81:cc:f8:d6:b6:5d:7d:b7:fb:02:f7:01:
13:a1:23:ae:d0:16:0c:42:a1:19:50:24:c4:7a:ac:
d3:28:e3:ac:e5:54:6d:a1:6a:fb:9d:75:5b:f1:0e:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:C7:54:05:89:A4:65:E2:50:36:D6:43:DB:BE:64:35:44:DB:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:c080::/48
Signature Algorithm: sha256WithRSAEncryption
b2:07:c1:66:50:e2:8c:3d:9e:b7:c0:ec:13:62:52:36:98:0f:
7a:0f:51:c9:d7:ec:d2:74:a0:97:3a:14:e2:d4:0c:11:47:ea:
f5:90:b8:b6:a6:74:aa:61:78:1b:f9:8a:b1:ea:39:d8:49:bd:
b8:80:f8:15:1f:39:43:d5:1c:f6:94:3a:7c:77:99:28:26:bf:
2f:83:b9:f3:2c:19:a8:86:12:28:06:e8:d2:37:05:cc:95:09:
a0:b9:11:76:9f:47:6e:ea:5b:31:8f:93:9b:9d:5a:45:b2:c4:
94:45:09:dd:19:00:99:24:36:ca:d5:fa:05:1b:f4:c1:d8:f7:
d6:9e:b8:c9:c2:4f:7d:b5:5a:0d:4f:43:67:54:ff:69:94:ea:
85:87:6a:9a:21:b3:03:3d:c0:b2:4c:1d:53:c8:78:6e:b1:88:
29:3c:c9:31:b3:dd:9b:f7:49:9f:b3:a3:d9:50:19:eb:c6:19:
3a:d2:2e:ce:89:77:9a:67:33:26:a3:c3:b1:d7:8e:2b:61:0b:
f4:e5:90:5a:8c:a0:08:a7:09:97:80:ca:d7:d4:5a:81:ad:dc:
45:af:45:35:31:c6:52:32:0b:20:b9:a4:d3:05:3a:c6:89:3e:
42:83:0f:14:e7:4b:73:73:a7:8f:5d:fc:13:b5:fb:29:f7:bd:
c6:d6:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:28 2026 by rpki-client