Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a41612bd-48c1-461d-af16-49857a6ff0f4.roa
File: a41612bd-48c1-461d-af16-49857a6ff0f4.roa (raw, json)
Hash identifier: pInvUzeAAEzAvtkBQzej8qprMjpDzGFby9UyR08sbM4=
Subject key identifier: D6:AB:E1:7E:2A:77:40:5A:70:14:D1:74:1E:85:0E:9F:D9:AA:7B:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5846529E1C3C5DE69F3633A00EDE92B00B58DB63
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a41612bd-48c1-461d-af16-49857a6ff0f4.roa
Signing time: Sun 31 May 2026 01:00:34 +0000
ROA not before: Sun 31 May 2026 01:00:34 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:46:52:9e:1c:3c:5d:e6:9f:36:33:a0:0e:de:92:b0:0b:58:db:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:34 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=9776a2eb6c95b20a275198a8dcc4a28c14e6a6c049d0dad7b30d38ebb7a62a49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:03:75:80:7f:ae:ca:6a:83:6a:e1:d7:84:
41:af:14:3b:c2:55:01:67:c0:e1:53:c5:95:29:b9:
8b:c8:63:4b:10:aa:55:95:ab:ed:1b:e9:da:93:05:
b6:38:27:6a:58:ae:81:96:43:5d:18:60:c1:ee:42:
0a:a8:90:f5:e0:87:bc:02:b8:00:30:39:4a:56:2f:
0f:5e:bf:33:4d:d7:15:27:e7:51:78:d8:16:87:1e:
10:cd:79:bc:cc:a4:e9:d8:ed:90:36:b1:1f:ec:1d:
97:ab:81:35:74:e8:d8:0a:59:9d:83:cb:c1:d6:89:
dd:cc:d8:46:80:af:bb:dd:b8:c4:07:9c:92:30:c6:
e5:75:6c:15:79:c4:d4:b9:06:27:cf:49:2d:80:a9:
01:28:36:1f:5a:c3:f1:ef:f3:d6:d7:de:89:5d:25:
cc:4e:15:55:3e:26:9a:78:5d:aa:c4:d0:d1:2f:b9:
4f:c0:2a:e9:b1:4f:8d:22:e0:29:55:d1:f6:a6:ef:
2e:c1:5a:1d:44:c5:94:7c:81:b5:ee:52:b8:47:7a:
1b:01:ee:14:db:35:a7:c7:ce:12:ab:6f:13:6a:c1:
8c:11:85:e7:e7:7b:47:cb:17:f0:9c:d0:0b:a3:66:
94:e8:bf:61:b8:fd:4f:12:1b:75:2b:93:5f:d0:d3:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:E1:7E:2A:77:40:5A:70:14:D1:74:1E:85:0E:9F:D9:AA:7B:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a41612bd-48c1-461d-af16-49857a6ff0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
52:34:03:b3:11:78:f4:cd:be:fa:a0:68:19:92:19:f3:02:5f:
66:74:45:b8:c6:6c:4d:1b:92:b1:bf:62:93:8e:cb:a5:3d:4c:
ef:cd:88:5e:04:c0:c5:2a:a4:5f:c4:26:31:01:72:38:5a:51:
c7:d1:60:40:16:28:21:1f:6b:cf:c4:75:06:1a:9b:d9:40:26:
72:93:40:69:e8:3e:77:19:ba:87:1a:4c:90:3e:b1:07:b9:46:
1f:a7:fe:62:d7:56:22:49:d7:4d:7a:86:bb:05:cb:17:91:b9:
4f:f1:c9:5a:ce:81:8a:39:55:9f:fc:72:31:a8:c1:11:9d:bd:
33:7f:a1:3f:a0:17:46:a3:f0:ae:0b:99:b9:22:f8:05:80:8c:
91:69:36:9a:f1:f3:88:6b:7b:f5:32:ac:fb:5e:7a:8c:dc:d3:
d2:23:21:9b:1f:ef:f9:e1:a5:83:f2:13:36:dc:97:71:82:8e:
f5:f4:0d:c1:7a:24:4f:38:32:56:4d:36:09:97:93:3b:61:ec:
6b:d9:33:8f:da:4c:8d:c6:c2:2f:b5:18:0b:7a:53:fe:35:39:
55:6d:e1:83:2a:c3:2e:02:cf:05:a7:9e:09:da:44:ce:15:e2:
a3:a7:91:a7:dc:2d:7a:71:d6:b1:95:cc:d8:d1:0a:b3:55:33:
1d:25:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:59 2026 by rpki-client