Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4ff81e2-fb63-4665-b6cb-d00b12a8c729.roa
File: b4ff81e2-fb63-4665-b6cb-d00b12a8c729.roa (raw, json)
Hash identifier: Ta3Ns/IvK7IXamUaSiNGha4eOJrDrpjeUgajju7PWo0=
Subject key identifier: 9A:68:C4:0D:A7:15:EE:8E:38:B7:D5:73:77:AF:6B:AD:FD:E0:D7:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5915145013B70558CB19C4180330FD83682A5AC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4ff81e2-fb63-4665-b6cb-d00b12a8c729.roa
Signing time: Sun 31 May 2026 00:30:20 +0000
ROA not before: Sun 31 May 2026 00:30:20 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:15:14:50:13:b7:05:58:cb:19:c4:18:03:30:fd:83:68:2a:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 00:30:20 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=7955a922fb8a6f24e02ddacdc3b8eebc7c327285b104b9c9da5b66f62ce77f0d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:c0:e6:25:67:d3:80:97:43:11:fc:96:c5:
17:b7:2b:95:f8:0c:06:08:aa:9d:36:92:ed:d0:ee:
1e:08:4e:f2:d3:29:96:33:c1:0d:a4:79:21:b4:a9:
be:94:0c:63:c5:ac:7a:1c:6d:ad:11:22:7c:a3:3e:
f0:7a:54:f7:3e:69:fe:2b:93:8c:9c:08:88:63:8b:
9f:e4:d4:c9:d4:3a:b6:a3:02:53:50:67:95:21:2c:
88:df:69:7a:68:ad:ad:53:50:e8:53:72:c0:98:9d:
c3:e0:e6:cb:2f:a9:0a:bd:4e:b7:89:43:7f:d8:80:
4a:4e:34:91:97:ef:37:88:bb:5a:e5:de:17:c1:24:
e6:e5:b4:4f:45:da:47:10:00:e9:ef:f9:8d:7b:0f:
4a:8b:df:7e:a0:52:f0:7a:98:87:bc:76:0d:ce:42:
60:38:f8:7e:b4:26:a7:fa:54:4a:4f:da:55:4a:70:
4e:4e:13:e6:29:08:69:a5:bc:63:b5:ac:b7:0e:51:
06:8d:cf:a0:53:7b:7b:aa:90:b1:3c:33:d7:fc:8a:
ea:00:19:62:ff:b6:0d:b8:6b:89:1f:f7:19:a6:89:
ff:39:33:e6:97:66:92:28:70:9f:2b:ed:c1:5d:c5:
42:bc:c7:2f:53:64:29:18:a3:cb:54:89:40:ac:43:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:C4:0D:A7:15:EE:8E:38:B7:D5:73:77:AF:6B:AD:FD:E0:D7:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4ff81e2-fb63-4665-b6cb-d00b12a8c729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:800::/40
Signature Algorithm: sha256WithRSAEncryption
37:c9:73:5e:a6:c0:aa:eb:37:7a:46:13:94:0a:5b:79:56:1c:
62:66:55:f3:e5:10:e1:fa:90:7b:c3:ce:82:4b:3f:75:77:5f:
2c:13:9c:17:5e:60:10:5f:56:49:fd:94:11:78:55:a0:f6:53:
4f:44:fa:d3:ad:8c:0e:44:38:2f:40:a9:14:76:d5:8b:27:5f:
96:6b:6b:0e:7c:57:68:c7:c1:6a:c4:ae:e5:3f:17:6c:aa:4e:
fd:43:19:6e:e5:1f:b3:7a:a2:c9:9e:c8:ac:8a:e9:51:06:5c:
4b:81:58:eb:34:0d:ce:45:64:61:ed:dc:cc:16:c0:70:1f:af:
8b:3a:c5:02:9e:80:22:2d:a7:f0:4f:5c:3e:ad:d1:13:04:14:
da:fc:18:36:08:f7:da:6e:e1:dc:30:d3:35:7f:f2:71:da:49:
25:8d:e4:de:05:d8:e0:a4:38:ec:14:43:33:64:58:93:60:03:
b0:7a:00:dc:c9:39:3f:a2:cc:9a:79:df:c4:c6:af:0d:e8:f8:
60:42:c3:ba:0b:8a:77:12:3c:7a:9c:24:16:49:7b:f0:66:cc:
9a:3d:e3:73:d4:a9:b3:b1:a0:98:48:ed:63:5d:45:08:2f:00:
49:d9:b5:6e:1b:ec:71:ab:de:7a:0e:c3:13:99:e4:9c:7d:c2:
d6:75:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:34:06 2026 by rpki-client