Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
File: 915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa (raw, json)
Hash identifier: crQQslDE42Kp7C6zT1bTIb02F2ZlBeZ2dsoN/zylxf4=
Subject key identifier: 1F:BA:1B:76:7A:02:4B:2B:C0:18:B1:18:47:B5:39:AC:47:64:FB:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 578CACF6E036EBBE56E7778061421EA67328A5F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
Signing time: Tue 19 May 2026 05:31:24 +0000
ROA not before: Tue 19 May 2026 05:31:24 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8c:ac:f6:e0:36:eb:be:56:e7:77:80:61:42:1e:a6:73:28:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:31:24 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=f4a655a22db63eac4f47d5e142b59d268b2ecb4a4dcc39adf6075ef1c3be61e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:42:4c:5f:16:fd:80:05:85:e1:7f:66:d2:
ac:4c:1a:d2:fa:63:b5:3f:38:0f:bc:0a:8f:fb:9c:
9b:ac:5e:81:d1:94:da:92:ea:58:6e:6f:73:39:8d:
56:c7:39:15:78:27:db:aa:68:c1:c0:66:98:34:8b:
9a:c3:a2:d4:63:f3:ac:e1:5b:fc:41:10:a5:a2:90:
c7:40:d2:17:91:85:92:d2:9a:3d:de:3d:fc:f2:26:
70:4a:ef:89:11:2d:51:c2:b6:fd:90:22:53:88:20:
28:8e:fa:ff:01:3a:39:df:1d:0e:aa:88:58:75:b0:
d1:17:9d:e2:e6:51:89:65:aa:81:9c:42:e1:33:58:
cb:f3:a5:e4:68:3e:30:2a:8f:2b:23:fc:75:84:8c:
bd:fc:03:54:5e:21:dc:94:84:b2:90:b5:f6:72:8c:
6f:3d:f2:f9:28:42:68:1d:dc:36:31:ad:b2:e0:bc:
f9:10:13:56:e9:0d:8a:f4:30:ab:67:5f:98:06:45:
7c:53:e3:97:c9:42:ed:7c:51:85:56:ba:81:de:55:
9f:f8:55:e7:74:c3:ef:78:a4:a7:51:72:1e:97:b5:
fe:e8:ae:08:ac:99:ed:01:77:50:32:ca:e1:ea:73:
93:b4:72:84:60:82:35:eb:d4:39:ac:29:6d:8d:55:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:1B:76:7A:02:4B:2B:C0:18:B1:18:47:B5:39:AC:47:64:FB:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:7d:02:85:5e:f4:d0:47:a4:ec:a9:09:fe:c9:7e:07:8a:33:
c1:38:37:32:9f:40:c8:38:18:99:f3:30:70:91:7f:b2:43:ae:
cd:75:36:93:29:50:6b:9a:bf:fb:75:8b:4e:bf:f1:1a:01:a2:
da:3f:02:78:ef:19:a4:13:f5:2c:dd:07:78:47:b3:ff:f3:58:
f8:63:a2:72:8b:4e:5c:76:28:2e:1b:b3:3c:0c:42:a5:56:40:
4d:97:30:3c:16:a0:46:70:37:2e:b7:42:66:9a:6e:4e:bf:52:
10:d7:73:70:83:bb:a9:ee:27:14:a7:b7:d4:41:ad:d0:88:b0:
79:6d:02:88:68:7f:a1:4a:45:ec:62:05:3d:91:38:4c:6b:16:
37:0f:0b:9d:72:48:4e:06:62:9e:c3:46:a3:b8:ac:48:b9:47:
51:06:19:cb:2b:d6:55:de:e1:ed:6a:31:4c:f2:13:2f:87:4c:
3b:69:8c:7e:17:45:c4:24:af:ba:b3:86:5f:df:35:f6:d2:f2:
a5:5e:94:48:49:78:7c:1d:56:34:12:37:17:f2:cc:6e:b4:ff:
7f:41:55:88:10:05:78:bc:31:b5:7c:01:e1:ae:92:32:8d:c4:
b8:b4:38:e0:18:5a:af:b0:3b:6d:60:3a:21:3a:47:4d:ba:90:
3e:1b:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:32 2026 by rpki-client