Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
File: a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json)
Hash identifier: CTp7HHErrU2hJx3UcDWi/GG71NmaesDnvm7qPpovnPU=
Subject key identifier: EA:64:36:2D:8C:E6:EE:73:17:44:32:2E:16:D5:3A:BB:E2:28:CA:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26B35EFAEC9A434C162BFD63977A4FE8F8B75CBE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
Signing time: Tue 19 May 2026 04:40:47 +0000
ROA not before: Tue 19 May 2026 04:40:47 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b3:5e:fa:ec:9a:43:4c:16:2b:fd:63:97:7a:4f:e8:f8:b7:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:47 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=0dd8078657268cf8738a2405e5ed6f1a02f86921800fc1e7d5145f84e427b5a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:3e:fa:7d:ad:e6:0c:54:16:e5:79:ad:76:
04:83:b8:25:10:b1:67:dd:3b:d6:84:71:23:e9:b6:
c6:7f:bf:80:6a:76:42:5d:05:a5:2e:99:bb:ed:55:
bb:fa:fc:29:3d:68:11:46:a6:51:1f:bd:73:cd:be:
ba:0e:a4:80:c6:02:b2:c8:84:65:8d:fa:63:14:89:
d7:b2:93:bd:ab:0e:7d:fe:ef:63:68:e4:3b:68:be:
5a:95:21:6e:e5:76:94:84:7f:55:95:7d:61:2b:ca:
86:3c:7f:be:93:95:eb:9f:3b:f6:1e:bd:19:0d:ae:
63:96:28:0e:e8:de:ba:1c:bd:e7:ff:29:e1:7d:25:
9d:d2:c5:80:66:86:f7:08:96:08:e6:6f:c0:95:69:
53:aa:34:56:59:e0:5f:55:44:9b:67:32:c7:48:b8:
4a:26:96:3e:b7:ac:d0:e7:c5:23:e9:1f:0f:c5:8d:
7d:fa:cc:ed:1e:84:61:ff:02:f8:e1:e2:aa:45:bd:
fd:bb:8f:ea:b3:fb:06:8e:53:52:3a:3d:d9:9b:b6:
a3:76:8a:75:90:c1:b7:ad:44:d0:d0:87:43:2b:04:
b7:56:ac:36:a9:32:d9:cc:9a:fa:db:62:c4:5a:00:
9f:f6:96:1e:84:e2:67:4b:57:ab:a1:b3:cb:a2:4c:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:36:2D:8C:E6:EE:73:17:44:32:2E:16:D5:3A:BB:E2:28:CA:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
29:f8:2a:a6:12:53:ed:ea:b5:20:55:2e:07:35:6b:af:bc:94:
00:72:4c:1e:65:08:ba:f7:d1:7d:73:69:51:fb:37:96:67:42:
f6:2d:64:62:f2:42:34:68:31:be:87:27:e4:44:6b:b1:e6:ab:
74:86:90:0f:b5:27:80:96:90:de:97:18:cf:b6:ab:b4:bb:ca:
37:18:64:b9:70:69:1b:1a:8b:3c:8d:dc:14:9d:fd:c2:31:8a:
97:b2:ec:52:51:34:86:d7:1d:a3:07:ef:3a:71:ba:e3:3e:b5:
0f:f0:66:43:d3:52:d8:98:80:16:f5:40:36:37:1f:00:8c:60:
17:28:7a:3c:24:34:b2:b9:76:f7:5d:25:77:2d:d5:d5:78:6e:
9e:2e:28:e7:44:34:36:29:9c:48:a6:9a:1b:b2:76:ef:fe:9b:
81:f8:2c:f6:c1:45:8e:c2:02:db:dd:33:af:cd:67:63:b8:99:
6f:7d:80:a4:72:8c:28:aa:62:9c:4d:d0:51:ac:be:56:0c:4a:
c0:86:b7:c8:52:44:91:2a:b8:57:6c:41:4e:da:6a:6a:8e:e8:
0a:f6:d5:ed:6a:0d:c7:71:f1:ce:b4:ca:e9:96:d4:89:c8:98:
40:f5:06:bf:97:dd:b1:fe:cc:3c:31:e2:22:04:c4:33:a8:33:
ce:42:7c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:43 2026 by rpki-client