Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
File: b176a187-5863-4413-a001-74ccc0321be5.roa (raw, json)
Hash identifier: gDW5L5XzESbZp3FwZMvMkWVe8SENcmUPx0SmwcwfnJk=
Subject key identifier: 76:7F:05:FC:43:C2:8C:3D:6D:6D:21:7C:58:0E:B9:23:D5:C2:3A:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E06060C01EDFE4F8C79BB4AD2A5881ACC01F3A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
Signing time: Tue 19 May 2026 04:30:12 +0000
ROA not before: Tue 19 May 2026 04:30:12 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02c::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:06:06:0c:01:ed:fe:4f:8c:79:bb:4a:d2:a5:88:1a:cc:01:f3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:30:12 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=54899c738709e3b0eec5ee3752db8eb718b6bfaf769433d52c8cdf8934fdfad4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:93:a7:38:9e:29:cb:5b:59:26:ba:81:de:
b0:5c:52:69:3f:e5:29:c3:fb:49:8c:18:da:95:2a:
b7:88:c9:7b:1f:a2:c8:6c:35:50:6a:5d:66:eb:a8:
00:7a:f5:37:a6:61:1d:0e:64:8e:ba:17:70:f8:04:
d5:99:b2:aa:67:92:86:54:85:99:f3:42:0b:d2:a6:
61:c7:c7:ca:3d:ab:fa:33:d6:d5:66:ed:5f:43:d3:
dd:46:79:2c:4d:f8:75:58:cb:07:3a:e1:58:5c:16:
22:28:c1:79:7f:c4:33:3a:ed:68:e7:a0:cb:4e:be:
cf:fe:5d:b6:d6:ff:94:32:f4:80:9a:32:3f:71:13:
4b:fb:80:1d:07:2e:c0:e7:07:72:05:bf:d4:43:4e:
6c:8b:a1:6b:7a:dc:ef:60:cb:03:dd:18:d4:d1:ab:
bf:2c:db:38:1b:55:59:96:7e:63:1a:98:a3:ec:df:
f5:d0:f8:a8:95:7a:34:45:06:04:8e:90:9f:df:9e:
6b:38:70:8b:28:30:c1:27:e1:f3:cc:0d:19:eb:35:
68:fa:e5:3e:7e:92:46:be:a8:c4:5e:7e:94:06:e9:
77:e1:a0:60:1d:b7:62:70:65:df:cd:58:4d:b3:91:
b5:5d:43:de:66:f8:e5:66:33:9b:bd:58:ab:8c:b8:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:05:FC:43:C2:8C:3D:6D:6D:21:7C:58:0E:B9:23:D5:C2:3A:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02c::/36
Signature Algorithm: sha256WithRSAEncryption
43:ad:bd:74:7f:fe:be:a0:07:85:ae:8d:3e:03:f2:59:4e:9a:
c4:e6:02:35:26:f6:ef:e0:3d:bd:b2:a9:c4:0f:6f:b3:cb:7c:
f9:97:7b:5a:24:36:68:eb:0f:1f:08:ea:a7:b6:be:8f:49:97:
4d:61:ef:1f:16:c9:7c:81:94:05:61:2f:0d:bc:8b:7f:04:e5:
6f:16:28:39:69:8e:f0:4b:56:0b:ab:e8:47:70:d8:4e:7b:52:
df:4c:0e:bb:0d:5d:09:28:ac:52:ba:35:bc:24:87:20:92:6b:
0a:10:18:c8:88:16:1e:0c:ab:c0:ed:13:a8:2f:83:61:ea:4a:
ae:96:cf:9c:52:5f:37:69:62:ae:cb:c3:fb:3e:79:45:55:9c:
e7:bd:bc:28:4d:0d:8f:13:d4:10:d0:f5:23:66:3f:b0:cf:c4:
6e:1e:ed:ed:bc:7c:08:58:82:03:2e:e0:e5:53:ad:7b:a2:ce:
07:7d:6d:cc:de:50:b9:9f:ed:1f:0e:ad:35:01:6c:45:9d:5c:
28:79:0e:93:ee:73:39:82:bf:06:d9:8c:ca:95:77:91:c0:7e:
28:60:5f:5f:34:bb:a2:ee:93:90:4f:f6:09:0d:5f:e2:80:92:
45:7e:55:eb:a0:af:d4:48:46:ff:e6:94:e4:45:e2:13:84:7e:
54:38:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:25 2026 by rpki-client