Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
File: 9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa (raw, json)
Hash identifier: fzOd09VrD4Iew2k8AoL+gU7QxIwFr+J1QgL6Z3bebM4=
Subject key identifier: 74:BA:A5:32:BC:BE:6F:1A:D0:F1:CF:A0:0C:E4:48:93:AC:38:A0:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32D6A7E574B7726C02BF4DB5CF66DED00714332D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
Signing time: Fri 15 May 2026 02:20:08 +0000
ROA not before: Fri 15 May 2026 02:20:08 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d6:a7:e5:74:b7:72:6c:02:bf:4d:b5:cf:66:de:d0:07:14:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 02:20:08 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=8ccb17b149689bb24db3daca8052910359f54442b94ac9bc08a36ebda74218fa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:92:99:7a:21:65:92:53:65:30:dd:d7:e9:
0b:f1:ad:70:6f:76:aa:a7:bb:9e:09:15:b0:fc:2e:
64:0f:57:0b:1f:34:24:96:93:7a:1f:67:b0:78:f5:
ba:48:80:88:7f:a5:52:44:00:d9:eb:37:12:94:3d:
69:aa:c0:b2:c1:ba:f3:19:3f:6e:4e:a6:fd:eb:2e:
9a:de:54:e8:7a:8f:b4:43:e6:b0:e7:a4:ef:6a:6f:
d1:6f:7f:50:cf:00:44:39:e5:22:d8:57:41:08:93:
5a:7a:c0:8e:7e:be:d2:5e:70:87:b8:3b:5d:0b:fb:
50:92:9d:e6:e0:22:21:c0:10:14:57:09:16:47:79:
9b:02:0b:61:92:c8:f5:69:ef:41:ba:32:8c:d1:dc:
3d:58:55:9c:ec:7d:1b:0a:33:cb:22:c9:ee:cf:02:
60:f1:57:7d:9f:cb:34:0e:4d:13:22:26:b7:85:60:
7a:9b:2c:13:aa:7f:ba:63:5b:c4:e7:d5:e6:52:7b:
79:59:f4:6d:e6:7b:db:45:46:35:61:ea:66:a9:b1:
12:4a:87:b9:f1:48:f1:27:10:72:e8:5d:7e:74:7a:
35:15:f7:98:9e:31:8e:eb:96:83:21:c5:a2:a1:48:
de:a4:08:c2:85:23:1a:23:de:09:e5:aa:26:13:24:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:A5:32:BC:BE:6F:1A:D0:F1:CF:A0:0C:E4:48:93:AC:38:A0:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:e000::/48
Signature Algorithm: sha256WithRSAEncryption
7b:3e:4e:33:fc:f1:0a:4b:9a:10:e3:7f:8f:64:6b:3f:66:6c:
8d:de:ee:9f:56:72:91:bf:78:ab:8a:f1:bc:a9:1b:9c:0d:b8:
6e:fe:c6:85:a0:bf:08:a6:c9:58:47:fb:0c:8f:6d:77:33:f9:
17:67:20:7e:b4:1e:87:df:db:00:7c:dc:77:ea:08:c8:ca:7a:
5e:2c:8e:76:a6:7a:11:f8:d4:38:3d:9b:cc:87:69:91:35:6e:
3e:d1:6d:ce:47:0a:7e:14:13:8d:75:0e:52:94:ef:d7:af:f9:
be:70:7c:e6:01:23:51:16:b0:56:fa:5a:17:a8:98:7b:ad:ee:
99:c8:e7:0e:19:df:55:6f:14:9f:a7:a8:50:53:c7:e0:a8:cd:
56:a2:ec:f0:5a:b5:65:a7:07:c2:d5:cc:c9:58:4d:ae:ed:6a:
b9:d2:50:d5:08:00:2c:af:8f:83:32:4a:3a:05:25:7b:49:bd:
f4:4c:1c:ec:f7:f4:8c:e1:8e:16:26:ce:c3:2a:60:1a:8f:30:
54:d4:45:cd:91:03:81:93:d0:96:29:00:bc:cb:61:bc:54:a9:
0f:98:0d:c8:67:42:4b:80:0e:42:ee:ce:5f:ee:02:b8:2a:24:
3b:a1:8a:87:a1:6a:95:e7:63:9b:92:fb:97:e9:ba:39:c5:17:
a6:70:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:11 2026 by rpki-client