Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
File: 8d2dc443-1fef-480c-8427-f1d325c92ec9.roa (raw, json)
Hash identifier: fbVa2CYAEESll7ODRI2ua4P39mGy5g9k0Dd1IPx5eSM=
Subject key identifier: 00:CE:72:36:AF:EC:58:F5:A0:19:30:69:29:EC:CB:36:18:76:24:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F4B5480F8F6DDAFBB6F9B5360F74AA4E08FE480
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
Signing time: Sun 31 May 2026 01:10:31 +0000
ROA not before: Sun 31 May 2026 01:10:31 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4b:54:80:f8:f6:dd:af:bb:6f:9b:53:60:f7:4a:a4:e0:8f:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:31 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=ef2e72d4b7cd66bf069b6a1917df0c5c21b3c751d8a6e06d0fd0122ef5176648, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:29:e4:2f:fe:4e:56:d7:89:b7:e8:dd:99:
1b:75:44:10:b4:2b:c6:57:d8:99:94:24:fe:87:29:
92:8d:01:04:db:0b:e5:04:07:f8:42:83:ad:a6:41:
db:f9:c5:0d:ac:35:ea:26:c4:c2:fa:12:15:f6:cf:
13:c6:64:3b:1e:35:f3:a2:24:63:0e:41:ce:31:4a:
df:b8:dd:e3:be:24:96:7b:db:31:86:50:a4:4d:8c:
17:56:d3:81:98:a5:63:65:64:1b:a8:f0:22:06:e7:
f2:91:94:b5:c9:ef:0d:dd:8c:71:cd:45:bb:4c:48:
b8:d5:66:3d:c0:16:6e:de:2b:51:2b:e4:1d:db:da:
8c:c5:b0:02:42:4f:3a:b9:cd:54:bb:5c:ad:67:64:
06:2a:ef:4f:78:43:01:92:53:f0:68:b5:bb:6e:c0:
32:69:4c:d7:cb:1d:93:2f:f8:86:b0:de:6b:0c:60:
a1:53:c3:c1:a1:e4:4a:5c:64:2a:2e:0f:52:0f:db:
0e:42:7c:d7:f5:f4:c4:10:8b:be:db:f4:50:31:7b:
59:1a:4d:ca:fd:ea:f9:e2:e5:39:e9:e4:9c:37:95:
81:12:9b:43:dd:86:96:24:65:a5:25:68:7c:4e:e0:
b0:7f:af:3d:4f:e3:3e:91:f7:64:31:51:dc:ab:00:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:72:36:AF:EC:58:F5:A0:19:30:69:29:EC:CB:36:18:76:24:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:6080::/48
Signature Algorithm: sha256WithRSAEncryption
6c:65:4d:e2:52:c0:7b:48:c5:73:b1:c4:ca:39:3f:84:4f:db:
b1:66:e7:6c:72:93:da:20:dd:49:c4:5b:81:6f:e3:80:11:58:
e7:94:d8:2e:85:59:4d:c0:a6:34:e7:65:a7:b4:a7:22:58:04:
6a:39:d6:00:35:c8:54:93:d6:68:98:ad:cd:d8:22:f8:3c:18:
01:07:03:99:c8:42:83:8c:4e:48:be:3a:3e:d2:db:82:74:df:
94:b8:47:51:ce:87:4d:27:0b:56:43:1a:32:64:8a:0c:5f:b0:
1e:72:30:a7:63:34:7a:44:f9:8d:6e:21:9b:3c:a8:65:eb:54:
46:b1:8d:05:c9:71:1f:52:90:2b:6e:c5:40:b4:18:56:7d:41:
c2:a5:b3:d7:22:9c:4f:57:3d:d4:53:cb:2a:0e:95:29:c4:eb:
ae:33:08:39:17:03:d4:80:d4:fc:be:ca:8f:80:02:86:1c:0a:
c1:41:e2:33:cd:3b:37:db:ce:76:bd:3b:7b:be:b7:25:04:9f:
96:cc:88:b8:1d:6d:fa:5c:5f:e4:d3:9b:4f:b6:c3:23:ca:7c:
2a:c2:59:31:67:ea:0d:b7:fe:cb:be:d7:8e:fd:eb:2b:53:c8:
f0:13:52:79:0b:ff:8d:1d:8a:b5:32:6a:8b:33:5a:63:d7:74:
d8:17:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:02:55 2026 by rpki-client