Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa
File: 8c18535d-3e9d-4891-b30b-4807af4b80f1.roa (raw, json)
Hash identifier: 70kY+FmQTZv9ssNqgOHWyW5/OfYujLmEpvX1Hn+t3kA=
Subject key identifier: 28:9C:23:5A:94:02:EB:5C:0A:F5:47:E1:10:70:23:4A:92:53:1E:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FAE5B8AD9F341CB81229E5931E5E397ECF1C806
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa
Signing time: Fri 15 May 2026 03:50:12 +0000
ROA not before: Fri 15 May 2026 03:50:12 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ae:5b:8a:d9:f3:41:cb:81:22:9e:59:31:e5:e3:97:ec:f1:c8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 03:50:12 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=f01852de703cce980c4bfb020ab588919866b44aa1472272e34c2c7d5d65d150, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:dc:bb:e3:c0:4a:a6:c8:b8:7b:ff:cf:81:
61:71:f1:25:40:1c:93:e1:7d:26:96:75:1c:b8:bd:
ad:58:25:bc:27:80:9d:93:86:58:36:2f:24:d5:7d:
31:e6:53:a4:80:e5:ff:fc:bd:d2:df:35:1f:8c:c0:
56:77:9a:89:55:4f:27:e4:19:b4:16:f2:aa:5c:ec:
d1:83:4e:dc:4e:ca:5f:1d:1c:aa:70:76:30:e0:b6:
94:a3:aa:7a:8b:c8:99:c6:5b:5e:d5:a8:2c:72:27:
c0:1b:2e:b1:98:4f:5f:40:0e:35:b1:9d:f2:95:96:
45:7d:ba:cf:b6:78:4b:29:17:ff:3c:be:c1:80:cb:
21:ad:bf:a7:af:d1:1a:dc:8d:e2:b5:52:c7:ab:a7:
ce:7c:ac:b2:b4:2d:df:9a:cf:f2:69:09:bd:43:36:
55:02:1b:59:c8:1d:a3:d9:aa:b6:4e:d0:52:cc:dc:
75:b2:73:3b:c0:ab:fa:37:a3:66:45:7d:57:c7:07:
7f:45:07:d6:06:a1:ac:c5:c9:f2:ce:1c:86:b9:78:
81:f0:64:cd:20:47:87:43:32:b1:02:a7:9b:ba:d4:
05:81:c8:98:41:0d:d0:17:1b:15:9c:cf:6c:06:32:
e8:62:8a:40:c9:9a:a6:0f:b4:03:c7:ee:66:43:d8:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:23:5A:94:02:EB:5C:0A:F5:47:E1:10:70:23:4A:92:53:1E:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:5000::/48
Signature Algorithm: sha256WithRSAEncryption
92:64:cf:f6:c4:a1:81:7e:2e:c3:69:4c:c9:96:c1:0c:a1:05:
67:c5:64:6f:36:e8:59:2b:75:48:a2:67:53:b7:4b:07:a5:7c:
4d:df:c3:11:04:93:bd:74:11:70:87:f4:a8:e6:97:5f:49:00:
f4:11:78:40:95:06:ab:6f:74:f4:bf:23:70:1d:fd:59:a3:df:
01:77:f1:4f:ef:cc:1f:33:9a:1d:db:f6:87:64:ca:74:d7:1d:
77:12:cd:ef:8c:5d:f0:f5:77:ce:57:4b:2b:f7:3c:47:56:ca:
6c:4a:ba:3e:a4:1b:cb:07:38:38:6f:91:a3:7d:20:e8:dc:04:
b2:15:c9:2c:64:c7:7e:9b:ae:5d:04:9a:78:11:e8:b2:04:a3:
e5:4a:8e:44:77:7a:15:23:e4:8e:87:88:e2:93:65:37:4a:64:
ec:5b:fa:d2:6a:d4:9e:1b:30:ec:ed:86:f2:ea:bc:a2:37:d1:
2f:57:7b:73:9b:fd:e3:5b:37:82:b4:ee:ed:8d:5a:dc:43:61:
9e:3c:ff:86:eb:10:d1:f8:19:04:fb:ad:3f:94:18:13:26:a7:
f3:ac:dc:ce:8f:9c:2f:f4:a6:d1:11:1a:00:4a:52:bf:df:5c:
1a:1f:8f:38:48:ca:b9:06:13:6c:b4:c7:47:71:33:b6:9c:06:
d5:90:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:21 2026 by rpki-client