Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
File: 8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa (raw, json)
Hash identifier: C93w03hfhStTusytZOGeV6f4fhyshll2Nf2tLu1y1DQ=
Subject key identifier: 85:B4:79:93:5F:0F:BB:88:12:9C:82:4A:E7:61:1F:96:11:2D:E3:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3618A39B3713BFDD2133F6EB1149146EFB55D101
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
Signing time: Tue 19 May 2026 05:01:13 +0000
ROA not before: Tue 19 May 2026 05:01:13 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:18:a3:9b:37:13:bf:dd:21:33:f6:eb:11:49:14:6e:fb:55:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:01:13 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=9140f5b48def6c083180325eb746347a084f68e555aca283353e0379ab1d3318, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:2f:36:96:e2:ed:32:97:fd:42:55:1d:83:
e8:b3:49:5f:24:2c:72:87:3d:2e:1b:f8:27:62:bb:
55:5f:fb:4a:32:5c:cb:68:57:63:04:e4:cf:76:8e:
75:b9:c9:ea:8e:b4:35:99:17:8f:c8:7f:b3:61:da:
65:70:b1:cb:3e:2f:35:cf:a2:17:34:40:9f:bb:fd:
ad:93:98:76:f0:78:c1:10:21:58:1c:1d:5b:b6:17:
93:f0:94:7a:71:be:0c:18:4d:80:eb:43:18:47:b3:
dc:6d:72:2c:3f:5e:d6:6d:aa:14:c4:dc:a7:d7:d0:
bd:83:69:ba:fa:25:78:bb:29:1e:db:b4:57:53:7f:
0e:98:56:f4:91:ef:80:62:c1:b3:80:4d:1c:2b:f8:
dc:54:b7:d3:68:7f:d2:2e:35:eb:73:91:57:82:a1:
3d:89:40:5b:e2:6c:b8:22:3d:4e:78:4d:9c:c3:29:
ae:6d:62:cd:4e:4c:a6:65:12:23:67:5a:54:1d:9e:
1d:a9:0d:b4:40:6a:6d:1f:3a:26:07:68:5a:4f:d1:
5e:66:cd:c9:48:91:0c:60:33:4b:70:53:61:ed:3b:
de:66:3a:51:29:bd:5f:37:52:04:7c:d2:88:35:5a:
5b:af:05:4d:20:f3:01:af:70:4f:f1:05:35:a5:10:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:79:93:5F:0F:BB:88:12:9C:82:4A:E7:61:1F:96:11:2D:E3:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:800::/38
Signature Algorithm: sha256WithRSAEncryption
18:1c:e7:f4:00:c6:e9:22:92:25:e3:fc:ee:74:ad:ba:f2:41:
45:e3:72:59:c1:4d:6a:cd:e0:d6:f5:89:ea:25:e6:8c:4c:e4:
77:ef:90:c5:a0:90:69:e5:7f:3f:c3:c9:79:a5:bb:e9:28:cd:
ba:92:5b:0e:2d:cb:61:9a:18:8e:78:c7:23:b4:3a:2c:eb:6f:
e4:14:de:7d:35:53:60:ad:b0:d0:df:e1:01:c3:29:d8:00:f9:
a3:53:a9:5b:13:3e:49:b9:f8:cc:2f:d4:ee:0d:89:37:2d:8d:
a2:8d:ca:83:82:fc:cb:a8:b7:93:2b:fb:52:59:36:96:af:31:
84:a5:72:ab:22:0e:9d:67:bc:e0:93:47:b1:91:02:43:52:75:
30:81:6f:08:32:3e:7d:91:d2:d3:c2:28:1a:10:f9:36:6b:5f:
a7:8f:53:a1:af:4a:61:02:02:70:71:4b:fb:6d:01:52:a8:2f:
1f:12:25:54:5b:bb:6a:11:81:88:fe:60:d6:a1:75:0c:d6:2a:
ce:e6:cc:fe:4b:bc:41:41:55:47:67:ae:d5:9e:70:fd:f7:86:
18:2b:11:25:03:69:a3:f2:dc:b5:21:76:44:11:35:08:37:f1:
39:49:ec:50:55:55:17:2a:58:40:8f:6e:0d:47:aa:26:bd:91:
3f:19:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:34:14 2026 by rpki-client