Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b53c419b-5535-410f-8f81-0c756943114b.roa
File: b53c419b-5535-410f-8f81-0c756943114b.roa (raw, json)
Hash identifier: 09nUG7+10uOlldsRTZNTFKAKe1cBrNcGpSbpQ/zxY+Q=
Subject key identifier: 57:11:9F:B1:D6:37:CA:75:77:C0:86:D9:9E:77:99:CC:C9:BA:5F:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F04EBE71F9BC6F84495EA5C5AB3CB0600EB301F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b53c419b-5535-410f-8f81-0c756943114b.roa
Signing time: Sun 31 May 2026 01:10:47 +0000
ROA not before: Sun 31 May 2026 01:10:47 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:04:eb:e7:1f:9b:c6:f8:44:95:ea:5c:5a:b3:cb:06:00:eb:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:47 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=c7f1a52f0b441cfb17355b93feaacde8b0b7c93e6e596d08e2e93c388c9ba9bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:72:d9:1e:17:46:68:30:5f:9d:70:2d:be:
59:e1:89:41:ca:65:26:fe:c6:06:e0:4f:0d:28:4e:
75:7a:02:5c:83:ec:8c:bb:df:4d:0d:04:e4:18:fb:
d6:76:a8:21:f1:94:e9:a5:e3:9b:78:83:88:d4:34:
1b:2d:30:ed:ea:59:3d:7a:f8:4f:37:8e:ac:d2:4b:
76:5e:7c:55:53:e0:a3:5a:e1:d5:bc:75:52:05:3c:
2d:5a:5e:15:3a:52:09:7d:2c:eb:25:d3:48:47:70:
d1:79:53:6b:52:56:70:1a:16:52:c9:25:9c:d4:d8:
29:22:bd:89:1c:24:02:d3:a7:32:84:e1:58:d1:78:
7e:bf:65:fe:c3:ba:ec:a5:0d:ec:ea:e3:26:0f:65:
6e:ab:78:85:95:0c:5d:fd:15:de:bf:72:db:54:96:
cd:22:81:cf:16:08:05:4e:ac:02:e7:33:b2:5c:ba:
2f:b6:f3:af:7b:e0:6d:91:bb:5e:a3:0b:77:6d:f0:
73:ae:32:06:dc:0e:a3:8d:2e:12:1c:b8:9a:40:ff:
d5:9a:cd:60:7d:1a:62:fd:23:5e:7c:0d:c8:91:7c:
f2:69:c9:47:d3:25:60:91:0a:26:89:46:7f:94:d7:
81:c8:e8:ec:04:6f:c5:3e:d0:28:ca:29:27:71:d8:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:9F:B1:D6:37:CA:75:77:C0:86:D9:9E:77:99:CC:C9:BA:5F:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b53c419b-5535-410f-8f81-0c756943114b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:1080::/48
Signature Algorithm: sha256WithRSAEncryption
35:71:81:47:92:65:29:cd:6a:aa:80:a4:fd:1d:85:c7:76:d5:
bb:4f:0c:fb:f0:ee:47:e3:e7:cf:15:cb:69:88:62:66:5a:8e:
44:e2:91:cf:5d:55:a2:e3:1d:58:21:b8:a3:d5:38:14:1d:0a:
b8:66:c7:7f:85:de:ea:dc:1d:2a:46:1f:ac:ae:20:39:0f:9b:
f8:45:ce:e8:3b:33:f9:2f:5d:f1:9d:5f:d4:ce:12:d7:6d:04:
3b:69:16:9a:75:3e:1f:d3:b2:b9:ca:18:7a:06:dc:d0:74:98:
12:61:2b:09:b4:5e:4f:cf:4f:db:a6:55:e0:a4:ae:65:cc:0f:
f6:f6:60:1e:7c:f6:17:89:e5:3f:eb:2a:6c:b6:c9:56:72:73:
1f:e5:55:fa:f6:cf:6a:5d:ce:36:da:ea:b5:7c:a3:5c:b7:d8:
70:aa:15:7a:67:f9:78:06:af:cd:fc:fc:f4:25:cb:49:a9:36:
7a:43:f6:d6:7d:78:ab:d7:64:d3:e0:3b:ea:a6:9a:66:ae:e6:
19:5e:0e:5f:3a:8c:33:9d:97:4a:30:f4:93:37:d7:0d:24:9d:
f5:16:4d:f6:59:2b:ce:cd:79:e6:ab:a5:94:1b:7e:c6:35:ce:
50:93:65:8d:a5:b4:f6:de:b7:f9:18:ea:33:30:6f:0c:8c:99:
7e:31:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:13 2026 by rpki-client