Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: a2mYDG+ccPhFZTGQqd06Jhw2kBolsGUCV61H2+/NhFM=
Subject key identifier: 19:49:A1:8C:72:C9:F0:EF:C9:21:1A:D4:6C:2A:A0:B8:16:7E:DB:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E88B4785A43052365E238FC3CDFEF3FA2EAA3BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Wed 20 May 2026 00:00:06 +0000
ROA not before: Wed 20 May 2026 00:00:06 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:88:b4:78:5a:43:05:23:65:e2:38:fc:3c:df:ef:3f:a2:ea:a3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:06 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=ecd3bd98fbb2bff267de6a69b98edd9e87dbe878f0e66e176ecab9af8e8bff68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:98:87:24:e7:b2:28:e7:c2:2b:d8:2e:07:
2a:5d:a9:31:c0:50:9d:06:ae:d2:07:a6:7b:86:29:
41:9e:7b:aa:41:4b:6f:5a:cf:75:5f:aa:d3:70:73:
71:55:2b:a4:42:d4:84:d0:ad:06:71:e8:41:7b:56:
d9:a5:af:54:a8:86:63:b0:95:89:5e:9b:3a:8b:a3:
24:c7:2b:74:cd:e5:05:19:92:4d:4d:9a:6a:d4:8b:
53:fb:56:4b:69:85:7c:08:92:ba:23:a5:69:83:e2:
be:85:9b:01:bc:bc:c7:0a:62:0a:7b:ab:5f:79:b9:
30:73:20:fb:4f:83:84:e7:d4:c7:f8:ed:5f:eb:7b:
34:75:ea:fd:e4:c7:bf:16:16:9e:fb:3a:b7:8d:8b:
a2:2f:7e:95:44:2a:da:dc:eb:20:9a:86:ae:e3:b0:
58:c0:e6:93:9d:b4:1a:9e:03:97:77:36:c8:d9:cb:
9a:e5:a1:5c:87:ce:43:b0:87:a1:25:b0:62:47:e3:
60:11:57:65:f8:76:1f:3a:07:b7:e1:f6:72:b3:70:
08:37:62:a2:b2:f1:05:02:7f:a5:a5:3b:26:75:e3:
51:bb:df:a2:9f:b3:4e:6b:96:11:08:47:5c:93:cf:
4b:55:5e:d5:d4:77:85:3a:55:26:bc:2d:98:26:dc:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:A1:8C:72:C9:F0:EF:C9:21:1A:D4:6C:2A:A0:B8:16:7E:DB:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
60:83:d5:ad:d4:d7:65:63:63:5e:f0:97:dd:e2:9c:07:2a:30:
46:fa:47:3d:8d:ca:3a:84:3c:64:8d:34:be:ef:ec:9d:1a:64:
21:56:a1:df:05:a1:be:70:e8:08:57:5a:5a:8b:ca:ac:dc:fb:
9c:a9:71:1b:39:cd:7b:55:1c:59:8d:e9:22:89:4b:f9:b3:30:
48:da:b5:b9:61:aa:8c:7c:68:2c:3e:cf:ed:b7:7e:06:20:8d:
de:d2:56:e0:4a:af:b8:e6:d5:b6:44:5d:89:d0:c7:d7:78:8f:
c0:21:54:54:57:cd:93:5c:ce:e9:d1:ca:8c:f1:dc:8f:90:df:
1f:6d:70:c6:89:6d:20:e8:3d:c5:2a:25:0b:b4:d9:06:8e:92:
57:70:5b:f4:a3:1b:63:6f:cd:a6:94:b7:ef:27:c7:51:20:01:
c0:72:a8:15:0b:5b:5f:ad:1d:c7:ef:81:52:dd:ee:89:e0:4d:
03:b5:4a:41:42:42:ed:a0:5e:9f:94:e8:d3:89:65:25:20:b8:
ba:ed:5e:c7:be:ec:67:66:6f:81:a8:95:57:67:1c:44:86:3e:
96:e1:ad:81:a0:f9:17:53:76:5a:b1:f2:18:97:03:e3:8d:13:
c7:50:a8:25:c6:9a:d2:eb:55:3d:a0:6b:75:a6:69:e9:2d:01:
c1:b7:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:30 2026 by rpki-client