Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier: NJL4NpwyZT9uT83rHiR8AT0Q+RTIrUP8URDxG5NHGUY=
Subject key identifier: 28:6F:63:34:A3:DE:9D:09:A8:63:F1:68:27:45:34:D4:C5:B8:BE:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BB77EFEF0EB56B7C44418DB5B512236907B106D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time: Wed 20 May 2026 00:00:05 +0000
ROA not before: Wed 20 May 2026 00:00:05 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b7:7e:fe:f0:eb:56:b7:c4:44:18:db:5b:51:22:36:90:7b:10:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:05 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=701405fa2e04efe942f8c15dcb1ccd224ab0d33a836879b92071a680aae06e1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:52:a5:db:bc:4b:f3:f0:24:30:8b:f7:a6:46:
81:a8:f0:2b:d0:5a:74:cc:a1:d1:a9:82:b2:84:2b:
aa:90:a0:5e:61:03:92:c3:ca:01:14:13:25:37:7e:
72:9d:6e:3d:5f:e8:68:3d:5a:e2:09:ab:36:dc:45:
a4:f8:48:5c:13:41:b9:c0:bc:ef:57:3f:e7:17:a8:
2d:ac:99:28:d3:a7:ff:d0:c6:dd:23:5e:78:69:56:
1a:5f:b6:11:83:39:57:3c:7e:70:3b:ba:b1:32:46:
7d:5f:86:2f:02:1d:5a:4d:c4:3b:63:0a:ba:21:0e:
e1:7f:9e:30:9c:7e:66:6d:0a:67:6f:ba:c1:42:5a:
60:c7:95:c3:ae:22:8f:89:9f:19:b3:f5:5b:32:db:
ab:11:82:61:71:0c:71:d9:be:11:85:13:d0:21:e4:
12:b6:06:7f:c8:5f:98:ee:44:35:06:c8:b8:1a:d5:
e0:36:4e:1d:66:ff:dc:70:35:13:33:79:8e:61:07:
44:bb:74:a6:b3:56:be:d0:3c:82:ec:b1:20:84:5d:
d9:74:d3:63:c6:11:77:49:e7:e8:8a:f2:2b:8f:a8:
83:32:dd:a6:7f:3b:41:d5:8e:11:aa:b8:2c:6c:75:
74:78:f7:c3:9f:88:c8:4c:f1:79:45:fc:29:95:6f:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6F:63:34:A3:DE:9D:09:A8:63:F1:68:27:45:34:D4:C5:B8:BE:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.112.0/20
Signature Algorithm: sha256WithRSAEncryption
71:09:b4:7b:68:21:67:73:f7:49:00:c3:74:31:a3:74:64:30:
79:12:bc:bd:25:e7:a1:db:f8:3c:99:32:41:27:d0:1f:62:ef:
1b:14:55:44:fe:d4:ec:2a:a2:11:cf:df:76:eb:49:fa:cb:12:
19:28:7f:59:15:e1:a3:d7:c6:4d:8a:14:e4:65:da:e2:28:76:
6c:f5:67:ed:29:14:53:a7:a3:2a:7a:c9:10:75:70:fe:1a:49:
26:88:05:99:93:89:57:c2:a6:a9:c6:f5:36:77:da:1d:f6:4e:
dc:a0:17:48:aa:fe:db:96:40:0a:2e:e4:24:94:9f:fa:d3:b6:
b9:bf:8c:c2:07:66:f9:2b:96:eb:4d:d0:ad:62:ef:cf:bd:ee:
71:db:52:d1:ec:1b:fd:b1:ae:b7:9d:f7:3e:d2:59:8f:91:a2:
e6:b6:95:9a:52:28:05:11:1e:2e:ff:6b:18:e0:9a:41:8a:8d:
19:b4:f3:08:0e:05:e6:24:86:2b:91:10:d6:5f:75:7f:53:02:
06:c7:30:10:c6:d1:33:91:b3:d3:d3:e2:8a:b8:8c:2f:00:47:
47:3e:db:d4:06:31:71:d5:3d:22:2a:11:53:7f:6c:05:84:e9:
61:9a:c8:27:fc:ec:b8:1c:9e:53:96:5c:ef:be:69:84:92:4b:
3e:9e:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:15 2026 by rpki-client