Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: fVvZqAOHnxFspI6hFvTMftPBEpluiLVxsLs7A6S1I84=
Subject key identifier: A2:F8:85:9F:17:BE:89:CA:BE:69:57:6D:91:71:24:2B:D6:00:06:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 263F81439C7AE5A8D915D65BEAB827B33D779CF9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Tue 19 May 2026 05:20:23 +0000
ROA not before: Tue 19 May 2026 05:20:23 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3f:81:43:9c:7a:e5:a8:d9:15:d6:5b:ea:b8:27:b3:3d:77:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:20:23 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=8bc76f82d1f9ff5dbd0110288dc717d4c1d6e6a1f2de8b8242f3c8e72c797319, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:6e:52:aa:30:dc:f6:2c:9c:1c:ea:c6:55:
5e:88:03:fc:c2:7d:f2:e0:a7:87:10:91:32:80:e5:
ff:64:8a:ee:13:6f:a1:ac:39:58:4d:5a:81:b9:20:
37:c0:40:4c:6b:4f:bb:31:f5:85:bc:e5:e2:cb:55:
da:39:c1:56:34:11:83:69:39:73:72:b8:3d:7a:f8:
e5:29:ca:d2:a1:f1:f2:51:20:a6:bb:1a:a0:83:5f:
75:19:8a:36:b4:34:e7:db:71:22:4d:53:ff:9c:be:
61:eb:ba:38:9a:97:c8:4c:f3:a1:85:ed:14:a1:06:
01:8a:6e:b4:6b:96:e7:93:66:75:3e:21:c1:1e:65:
b8:11:97:72:f8:39:2f:3b:f5:79:b9:91:83:5d:a2:
fe:a4:51:8c:f8:aa:58:56:6d:ec:71:1d:9b:f9:96:
a3:28:b2:36:06:24:03:6d:ef:fa:43:cc:1e:0d:90:
f1:1e:bc:9c:ae:c8:28:7a:13:c2:06:bb:5e:27:98:
15:ab:2c:62:60:5f:79:38:0a:dd:3b:19:82:10:08:
b4:00:bb:08:e9:53:85:8d:ba:74:aa:b6:52:7a:c6:
ba:96:a3:c4:97:37:33:05:8c:7c:1e:78:31:bc:ac:
ce:a7:bb:c0:8a:79:d0:0b:0c:68:b3:4f:f8:0f:30:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:85:9F:17:BE:89:CA:BE:69:57:6D:91:71:24:2B:D6:00:06:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
05:9f:ee:b1:bd:bc:db:ac:27:86:62:02:60:10:eb:6e:0a:74:
0d:69:0e:f6:ae:1f:39:4f:e4:55:64:03:3b:3b:1a:75:f2:11:
98:0f:05:00:7a:46:42:3b:d5:f1:59:8a:15:c6:25:88:1a:e3:
0a:92:f2:6d:92:53:76:68:17:bc:4a:cb:39:5f:ad:88:29:e7:
10:b5:d0:50:6c:1f:f1:20:67:25:e3:25:f9:db:2a:eb:cc:6e:
5a:6f:16:e4:13:df:59:57:e4:49:98:83:bf:78:4b:40:0b:cc:
be:e1:2e:2d:e2:a6:3e:eb:dd:3c:87:83:32:14:6b:7f:be:11:
f4:08:fa:b9:4e:65:dd:ea:c3:89:df:86:48:77:72:90:82:fe:
0d:87:2f:b0:a0:53:3c:18:3e:98:3b:1d:d1:7b:d4:03:fc:e8:
f4:e6:a2:4b:8b:5b:5a:9c:25:24:2b:6a:e5:c4:8b:11:1a:ac:
43:2f:7a:6e:9a:e8:54:57:d3:6e:ac:18:03:a9:51:87:b1:99:
91:1e:44:10:35:cf:57:55:df:90:8f:c4:cd:bc:16:4f:13:fe:
41:b1:27:58:ac:47:2b:4b:3c:48:5c:e5:dd:db:e5:c8:4c:85:
87:a4:25:6c:b0:69:87:3c:3f:c6:f0:ea:c5:2e:ed:86:16:e5:
0d:3a:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:01:59 2026 by rpki-client