Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: mTSDQ3c0BO7t8CLqO68tG2W5r2an/rLKbBsdKf2F7k0=
Subject key identifier: DC:08:EE:3D:9C:39:C7:DB:98:60:A0:64:B8:51:CA:4F:E0:AE:B6:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 126ADB29203F8E15F9BFBA7181935CF22FFDFB58
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Tue 19 May 2026 04:40:21 +0000
ROA not before: Tue 19 May 2026 04:40:21 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6a:db:29:20:3f:8e:15:f9:bf:ba:71:81:93:5c:f2:2f:fd:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:21 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=5813a43a653eab82e9c6255f2ad9ecdeef0ba332f6eeca84cc0a5158a142c057, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:4d:d9:cc:d8:61:d8:5e:b5:2b:9d:32:a4:
5c:47:c6:06:8d:8a:84:f8:76:c6:8b:38:68:cb:ee:
84:ef:6d:83:a4:51:d5:94:af:f8:5b:cc:5f:5b:cb:
21:9d:66:43:69:40:36:67:4b:76:83:79:e8:b2:4c:
20:83:5b:56:aa:79:0c:41:bf:25:38:12:56:e4:cf:
e8:ea:5f:0d:11:44:9f:e3:d9:5a:11:52:dd:66:ee:
0d:6c:4c:7e:ef:a6:9b:7d:e9:b4:a1:74:0c:49:c0:
34:b5:30:1c:dc:f8:67:49:1c:00:17:7b:c6:ec:ae:
a5:31:0f:f7:30:99:7a:7e:4e:15:fb:bd:7e:ff:da:
cb:e5:55:fd:17:a9:26:8c:ca:fb:b1:bc:ae:3b:2b:
87:34:0d:41:6a:5b:26:41:e6:4d:55:f5:d3:29:60:
3b:73:89:2b:c4:c6:a8:42:6b:9f:1d:a1:44:c5:7a:
58:ab:2b:1c:11:02:22:0a:57:c5:66:fa:5b:1c:90:
81:5b:b2:a6:6a:d8:81:5d:cb:aa:ee:da:6e:54:62:
5e:b7:d8:2b:ee:c0:c7:ae:c4:63:55:5d:c3:b8:91:
98:8a:f0:62:f8:4e:83:a6:e1:e3:b8:1c:0e:99:80:
b1:30:bd:f5:33:56:f2:49:33:e1:f8:54:72:10:f0:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:EE:3D:9C:39:C7:DB:98:60:A0:64:B8:51:CA:4F:E0:AE:B6:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
c5:e6:68:e6:5f:d3:2f:cd:f3:50:92:08:3b:47:0c:c1:f7:5f:
fc:41:b6:06:7b:a5:8b:39:1e:14:cf:23:2f:85:e8:a2:da:39:
64:30:e7:f5:3c:e6:ef:64:38:b0:c0:d1:d3:cf:b1:94:6b:e2:
03:58:aa:fe:04:69:d9:92:a2:c6:dd:e2:1b:a5:f5:06:70:86:
fb:44:27:f6:2d:a8:f1:b5:31:f5:ad:20:7f:15:1e:cb:97:dd:
5b:fc:bb:78:a4:41:51:e5:a6:31:dc:77:e3:df:9b:95:d2:74:
31:41:e4:a4:3b:e5:9d:09:5a:8a:40:78:7d:25:03:47:b8:87:
c2:91:15:f9:60:40:ea:c4:25:be:f3:e9:7c:28:5d:c6:cf:22:
57:a1:bf:cf:a0:6c:0c:c7:85:41:af:32:84:13:ab:69:d6:29:
02:18:cf:32:71:b6:4e:e2:26:58:8d:1b:f6:bc:18:dc:08:75:
12:51:eb:a1:ab:b7:7c:72:d9:fc:b7:d2:b8:c6:f9:ad:1c:ee:
a3:78:13:b4:d0:a7:4a:cf:14:d9:e7:7d:41:c0:f9:11:3e:6d:
b5:be:62:e9:3c:e0:be:8c:6c:b9:b7:ef:eb:53:14:bf:1d:ff:
f1:a1:c0:df:9c:a5:bc:a5:5c:8e:30:1c:ff:1a:07:4c:6e:2e:
bd:bc:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:21 2026 by rpki-client