Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
File: 8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa (raw, json)
Hash identifier: uwzMMqLmslODlPTgiDEPjVfFHqcD9NXeK27EyxK+BV8=
Subject key identifier: 4F:E5:33:CD:49:17:2E:CE:05:95:07:C5:90:A9:CB:D1:BB:B2:A1:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 400D92484275CF7B3B41027DD78CCA12B4F88207
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
Signing time: Tue 19 May 2026 05:10:59 +0000
ROA not before: Tue 19 May 2026 05:10:59 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0d:92:48:42:75:cf:7b:3b:41:02:7d:d7:8c:ca:12:b4:f8:82:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:10:59 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b7aae69578ce3bb83e0f9d0173fa40ca07c5b9c55a3e525642ee7fbf307eb6a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:fb:52:4a:de:04:68:f8:01:75:d5:07:91:
ec:98:88:4e:ae:03:37:05:b2:71:44:ee:15:51:5f:
de:9f:e0:d0:77:b3:9c:e4:56:6b:7f:88:8f:f1:c5:
24:5e:2a:9c:85:0e:93:c9:69:f1:f7:d0:dd:46:e9:
aa:30:9d:6f:8c:c5:c5:06:3c:46:07:97:ab:e1:3c:
a7:ee:de:0c:f1:29:db:64:26:28:da:bf:97:01:bf:
97:99:56:f7:62:e4:f5:27:0f:0e:dd:cb:52:a3:64:
a2:ec:83:9d:06:8b:a0:e9:c7:9a:83:62:19:d7:65:
bc:22:21:9b:e4:ee:fb:98:ae:83:4a:c4:b2:36:ea:
93:7b:a1:5c:1c:d8:29:65:b3:54:7c:94:51:c6:8c:
d9:5f:ad:ab:23:ab:10:a4:ee:f1:b9:e7:7f:f4:46:
ed:8f:6a:4e:a1:a9:a0:a8:a2:f9:22:1e:5f:4b:74:
cc:c4:8f:cf:68:f5:52:17:8f:ee:e6:7a:b0:d0:9f:
01:7d:ff:6f:53:9f:ee:14:a9:4c:36:91:68:57:51:
b1:84:9f:95:89:25:3e:06:ff:12:f0:da:e1:71:81:
0b:f3:57:a3:f5:84:0e:92:ea:5e:30:15:d4:66:69:
43:bc:5b:35:7c:65:7c:19:08:ad:8e:18:73:dd:db:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:33:CD:49:17:2E:CE:05:95:07:C5:90:A9:CB:D1:BB:B2:A1:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:e000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:58:3e:06:bc:04:e4:a1:bc:12:bb:0e:c6:bf:cb:88:e1:1d:
b7:50:89:3d:a1:39:66:aa:b5:e9:7d:3f:ba:f4:57:ec:af:8d:
cb:d6:c1:37:f4:6b:27:4b:cc:1f:f8:0f:c6:2e:91:b7:0f:29:
39:ba:2e:98:06:f6:d2:59:c9:7c:30:f2:db:e1:3b:00:03:ff:
c9:b9:25:ca:cc:b0:55:3a:7e:4e:8e:56:25:6b:d5:1f:cd:92:
ce:83:2f:b8:21:dc:bb:03:f9:14:b8:73:9b:a3:1e:86:0c:b5:
4a:78:5a:b9:ba:5f:cf:38:41:06:b6:56:1d:ac:00:95:6a:82:
bf:07:f5:cb:07:0e:f3:6d:68:bb:d1:4b:6c:ec:7c:8d:8a:8b:
5c:73:45:69:1b:a4:44:cd:5a:c0:cd:1d:7c:88:bc:59:42:01:
cc:37:c7:4c:dd:fd:7b:e6:bc:f9:6f:2c:d7:af:a0:7d:a3:8c:
9c:11:32:24:e9:48:ea:6c:05:7c:36:88:d6:fa:a2:4b:dd:4b:
75:10:6f:85:be:dc:6e:f5:c5:eb:60:7b:ac:2f:7a:ee:7f:42:
b0:71:93:39:d7:3d:6e:b0:20:90:55:99:d6:64:ca:c5:6c:1b:
03:8d:bc:49:1d:cd:8c:bb:12:bd:b8:0e:1d:88:63:db:d9:5b:
2f:b1:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:17 2026 by rpki-client