Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d05b320-910b-406e-955a-e1d143ee93ff.roa
File: 9d05b320-910b-406e-955a-e1d143ee93ff.roa (raw, json)
Hash identifier: DGU446SHvmfxkLN0CgbblFmVD9omoSmkTRpRNws3w14=
Subject key identifier: 5C:7E:17:C1:54:4F:21:BF:7B:0D:B0:FB:F3:CD:C4:37:EC:3F:65:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 784A2FF214C7EA5F0F727A2B4CF41D6DCFF0E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d05b320-910b-406e-955a-e1d143ee93ff.roa
Signing time: Sun 31 May 2026 01:10:45 +0000
ROA not before: Sun 31 May 2026 01:10:45 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4a:2f:f2:14:c7:ea:5f:0f:72:7a:2b:4c:f4:1d:6d:cf:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:45 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=27f2ed39a4605eaae868e8607da884d074642979c4ff4d707d640300c9106715, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:5b:18:99:13:98:d8:b4:be:29:a6:90:ad:
ee:29:d4:ca:ab:d5:08:d3:45:ab:63:08:0d:68:14:
b5:c5:9f:74:2b:23:b2:b8:a7:4e:43:3c:08:5b:d2:
25:c0:f9:25:55:a5:09:01:41:2c:80:45:83:34:8b:
b3:42:a6:d0:dc:13:ee:40:a5:1b:17:03:ea:e7:d6:
19:66:7e:5b:6b:67:b1:f0:80:25:6a:a6:ed:ef:dd:
4d:ca:94:1d:a0:01:3d:14:cb:91:2a:c3:69:d5:55:
90:5e:90:5e:3f:92:63:be:b6:52:65:a9:2b:10:e5:
a4:e4:bd:64:2a:5c:53:3f:91:72:c9:00:02:4b:56:
eb:96:e3:7a:1f:61:13:49:7e:25:22:70:23:fa:94:
6c:3b:5d:20:c8:83:74:2a:12:93:41:3f:ba:b8:24:
06:55:dd:42:a9:20:e3:cd:a3:73:a6:6e:8f:e8:39:
0c:20:55:d4:04:a3:e3:f9:ad:c3:d6:af:8c:7f:33:
56:e7:d1:ca:9e:f2:8f:c8:3b:55:03:fe:13:86:08:
16:35:eb:64:c1:81:3c:66:39:57:c6:7b:2e:f4:25:
13:a4:37:47:53:df:69:1e:8f:19:e4:1e:da:d5:0c:
d8:89:d5:06:ce:6a:b4:ae:f0:9d:b0:67:a9:a9:9c:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:17:C1:54:4F:21:BF:7B:0D:B0:FB:F3:CD:C4:37:EC:3F:65:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d05b320-910b-406e-955a-e1d143ee93ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:a080::/48
Signature Algorithm: sha256WithRSAEncryption
55:52:67:d3:10:b0:99:30:68:f6:61:ae:e3:98:6d:d9:70:29:
74:c0:16:79:e4:f6:08:89:41:a9:60:b0:02:35:f2:02:df:44:
f8:96:9e:3c:1a:16:1c:cb:c2:cf:69:b0:b5:17:01:e4:d4:83:
eb:fc:ef:65:1e:3f:cc:a7:29:cf:fa:8f:2c:6a:f3:2b:10:6e:
38:a0:47:70:21:44:66:3c:94:d8:81:61:8d:f2:be:d8:55:cf:
3c:47:69:64:a3:1b:eb:a6:be:8b:32:45:6a:d7:a1:9b:4f:68:
61:39:1d:66:f1:64:fc:3d:ac:36:a6:41:5e:1f:2f:6e:b1:70:
9e:06:d9:57:1f:e0:43:07:1e:2b:bf:fb:07:5d:0d:55:b3:5a:
08:76:6f:bc:f5:b5:7f:1f:df:c1:46:ae:d6:c8:a5:bb:af:06:
a2:86:32:74:07:3e:b1:be:fe:be:f1:87:09:0c:ce:7b:3a:c3:
35:5f:87:b3:9f:e1:9b:c5:aa:80:e2:28:54:de:a8:e2:26:14:
c3:8e:d0:17:5b:92:20:fb:e9:12:37:20:34:fe:d6:ac:2e:b2:
6f:90:e1:42:c2:ca:a9:06:38:99:62:87:10:08:a8:57:91:82:
e1:08:19:b2:bb:9b:ed:69:24:f4:06:11:96:3b:93:c8:0e:b1:
70:f5:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:58 2026 by rpki-client