Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f43bed2-15fe-4a59-9d5c-729d9204020d.roa
File: 8f43bed2-15fe-4a59-9d5c-729d9204020d.roa (raw, json)
Hash identifier: slvxUSxa/LXcXLRJu/fcIyc7ynGtqFBpmN02JqHjdNk=
Subject key identifier: 2A:A8:EC:DB:D3:FD:37:F6:6B:2D:10:BB:93:BC:B4:34:A6:32:69:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72E83F962CBF5D2B81AC4FB126868C37F11CA503
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f43bed2-15fe-4a59-9d5c-729d9204020d.roa
Signing time: Fri 22 May 2026 16:01:54 +0000
ROA not before: Fri 22 May 2026 16:01:54 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e8:3f:96:2c:bf:5d:2b:81:ac:4f:b1:26:86:8c:37:f1:1c:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:01:54 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=d29e2778291497ef6475986c68f2b713fbbb922866d9bebe459da76b1a83c8b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:15:cd:d5:1c:69:45:20:6c:9a:45:df:09:
2d:c6:76:52:d4:03:85:d3:fc:30:e9:b4:4a:34:c9:
8f:85:e2:9f:5e:70:ae:3f:a4:1e:78:f5:4e:16:be:
da:05:9f:04:68:a5:1e:e8:db:37:42:a8:cf:98:41:
ce:16:c4:f4:66:5e:b2:13:f8:fc:8c:48:d0:0f:53:
6c:2f:5f:8b:ed:2f:ef:40:c1:42:16:8b:db:8a:d4:
85:5a:0a:8e:9e:ee:09:7d:76:61:8e:3a:2b:ce:de:
60:fd:64:66:b1:37:8a:19:8b:70:81:05:a2:d5:e6:
1f:a5:aa:f2:bc:98:cb:82:c1:de:2e:73:ee:a8:dc:
ab:13:de:72:8b:23:6c:dd:5e:c9:23:2c:5a:64:26:
ea:be:5c:50:b4:27:8f:6c:2a:7b:a5:ff:51:3f:74:
af:28:ff:48:6e:45:c0:c2:05:e1:ad:f2:63:63:87:
48:4b:3a:39:a7:2b:75:30:97:f3:fd:82:92:f3:4a:
a6:e4:29:84:ee:97:2e:db:99:34:b6:61:67:fb:cc:
2f:9a:3e:0a:35:02:63:bf:8c:02:40:d7:57:ee:ef:
af:9c:d5:4e:2d:e7:e1:dd:6c:ae:47:6b:dc:cc:de:
40:73:da:1c:47:93:16:b8:aa:10:73:0b:ef:03:65:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:EC:DB:D3:FD:37:F6:6B:2D:10:BB:93:BC:B4:34:A6:32:69:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f43bed2-15fe-4a59-9d5c-729d9204020d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:05:39:d1:88:a5:6c:97:71:28:07:a6:e5:39:47:3f:4d:40:
83:d1:fa:0a:76:fa:e3:ac:33:4f:f0:44:9c:b5:0a:97:9d:dd:
46:64:16:34:fd:8e:86:65:e4:4c:bd:93:5f:46:c9:47:fe:ba:
82:c7:08:2d:e7:6c:8f:01:67:33:a8:c2:4a:cf:27:82:af:26:
cc:9a:43:cb:ae:5d:43:da:b6:f1:73:ce:81:44:98:a1:b2:4a:
d3:cc:04:47:0c:8a:f9:7b:65:65:4c:3d:44:af:27:f8:96:7a:
b3:23:1c:ae:b0:77:cc:e2:34:e5:c8:33:c7:a4:d6:b1:91:cd:
bd:b7:fc:78:6a:52:d7:f2:55:e2:ab:55:19:56:93:07:46:0b:
77:e8:23:85:88:1a:fe:d7:16:1a:49:8d:9b:b2:f3:da:60:03:
4c:f6:08:a6:47:f0:6f:a5:09:fd:53:aa:00:e4:28:62:01:0c:
ff:9f:b2:21:01:9a:82:af:0c:fc:57:c6:5c:93:3f:8a:a6:3c:
28:9c:82:13:8c:57:0d:ac:ce:d1:2a:88:f3:44:d4:3e:86:7e:
84:77:35:e3:09:d0:15:a3:80:4d:a0:cc:84:b9:b3:a0:5a:6e:
64:7f:e9:df:9d:c6:31:0a:4c:5d:47:ed:3e:4b:87:53:24:29:
7c:48:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:44 2026 by rpki-client