Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
File: 9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa (raw, json)
Hash identifier: 6f9mEQcgc0/RSdKBEpy+b42r17xXqALN6vq/wSj2/qU=
Subject key identifier: 96:FB:06:2B:AA:6D:91:AB:9A:5E:29:CF:BE:0E:5B:87:A5:4C:2E:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 267AF7BAA046CD264D772305C017B4949AB62B9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
Signing time: Tue 19 May 2026 05:10:05 +0000
ROA not before: Tue 19 May 2026 05:10:05 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7a:f7:ba:a0:46:cd:26:4d:77:23:05:c0:17:b4:94:9a:b6:2b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:10:05 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=34604081ab0fdc22dbdd48129f9a3739820111ed2bce0beaab3aa1e1ab7173d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:71:c5:13:2b:e2:57:84:fa:7e:5e:da:42:
2e:fd:ea:4a:72:ab:ef:69:e5:58:fa:f8:74:f0:23:
73:b1:20:b7:77:00:b3:e8:11:fc:f7:22:89:12:00:
ff:4d:d1:ab:07:b8:3f:a0:18:c9:1c:ce:5d:a2:77:
a8:65:55:17:e8:88:c5:a1:f4:14:d8:11:5e:60:f2:
b3:80:4c:2f:9e:b5:fb:72:e4:ff:83:44:6a:35:52:
7b:07:59:57:e8:ca:49:f0:ef:72:9c:54:18:c5:63:
52:99:93:f5:d0:3d:e8:4d:a2:6b:97:69:45:f0:c2:
f9:48:0b:98:45:a6:d3:16:f0:bf:0e:af:e7:be:87:
bd:90:2c:d2:45:62:e5:aa:ec:66:7b:1e:8d:1a:8c:
8a:fd:25:27:7f:1a:87:46:ae:63:01:07:c0:5a:73:
e2:72:b0:93:10:f8:90:82:f4:2e:c2:79:d7:b6:ed:
26:e1:6b:9f:de:e4:a8:a3:e9:0b:80:5a:c4:ee:23:
fd:2d:b2:c2:d3:48:17:31:2c:af:3d:36:70:ad:50:
fc:32:9f:c0:f1:70:0d:37:45:1b:7e:4c:91:dc:71:
4b:2c:b2:cd:02:3b:b2:62:5d:5d:80:a3:38:4f:6d:
12:9a:f7:47:82:42:b0:28:42:c8:f8:76:c4:7c:fc:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:06:2B:AA:6D:91:AB:9A:5E:29:CF:BE:0E:5B:87:A5:4C:2E:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070::/32
Signature Algorithm: sha256WithRSAEncryption
72:39:76:48:6f:0a:03:cf:e6:a1:e8:69:07:59:85:23:5d:f0:
d0:6a:a4:e2:ce:55:31:46:77:0b:ac:b7:0b:99:d0:32:f7:8d:
36:5a:33:8f:5a:12:85:4f:25:ea:c8:23:d0:db:e1:16:f4:ae:
10:61:d7:42:12:75:99:16:fe:25:a5:95:cb:c7:11:1e:8c:cd:
27:3d:3a:85:bb:6f:80:8b:0e:09:f4:00:97:4f:ed:bd:75:be:
10:fb:ed:32:22:80:84:5f:3c:89:cc:61:8c:b4:f4:8b:5c:2a:
d6:74:9b:d6:53:21:78:46:79:cf:3a:11:f0:ea:82:5f:cc:62:
97:4c:67:79:ff:e4:0b:59:28:99:d5:8d:03:c1:79:04:88:e2:
03:b6:64:f7:85:df:1b:c3:91:f1:7d:10:07:3a:46:5a:db:db:
f6:54:a8:b0:2d:1a:c8:b6:68:ef:5b:07:fd:94:92:73:5a:0b:
cd:4e:5a:eb:94:21:8c:9f:00:9c:8a:0e:9b:e4:4b:5e:45:cd:
49:3c:96:72:5c:ce:ca:d7:5e:18:f6:75:05:75:12:dc:20:45:
ba:ab:47:44:eb:ae:7f:e2:17:fa:db:72:e0:17:18:5b:1d:b4:
5a:33:f3:a3:69:30:08:2d:2e:5e:52:d6:4a:cf:2d:fa:a6:b5:
09:e1:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:53 2026 by rpki-client