Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
File: c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa (raw, json)
Hash identifier: dFSPIEtODBa8ffu8DWsDlxLWJxDyc4/9fvuwHh9W6JE=
Subject key identifier: 31:6D:3B:AA:F6:F5:E3:88:67:7A:EA:C9:31:C2:EB:92:23:8D:97:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FB872276560DF7D6BE1CFCC16E1AB21B0569AA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
Signing time: Tue 19 May 2026 04:50:26 +0000
ROA not before: Tue 19 May 2026 04:50:26 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b8:72:27:65:60:df:7d:6b:e1:cf:cc:16:e1:ab:21:b0:56:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:50:26 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=aed7ce1a57a0457edda3b96b4346f08687e0552babf5c83fcdc2e15b42b56472, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:a3:0e:57:06:bd:69:14:9b:a0:82:2c:f3:
95:b4:74:56:e5:37:c3:0e:e0:cf:51:bb:04:6e:b8:
dd:1b:33:0b:2d:23:9f:a6:16:47:b3:cf:bd:9b:de:
8f:cb:70:f7:71:ed:bd:28:49:f9:ee:1d:27:b4:27:
87:27:a4:cd:f9:33:d3:b1:fc:ee:31:d9:da:ef:62:
03:e1:08:6e:2d:f0:4b:9c:9d:9f:66:ae:b1:ad:63:
a1:53:08:eb:52:9c:cf:8a:f0:6e:91:45:70:86:12:
a6:33:74:1c:dc:68:2c:10:50:9d:cf:0e:8b:6b:b3:
ef:32:0c:8c:40:ac:93:5b:ae:a0:f8:6f:ee:fb:92:
36:a5:c5:8d:4b:47:b9:82:71:1d:b4:26:30:a4:66:
a4:bf:65:09:e6:54:e2:f8:da:81:14:e7:28:59:48:
d9:b5:3f:4f:41:58:74:47:2e:68:51:94:27:1c:cd:
ab:f8:3f:ec:3f:ce:73:d3:44:73:68:f7:fc:5c:a6:
74:ac:08:69:81:a1:47:f8:b1:d1:05:b4:12:21:93:
e1:4e:fe:65:8b:76:49:6e:db:b1:5a:96:48:44:68:
a1:fa:ac:4e:c3:2b:fd:4a:8c:b7:c1:04:6e:3e:02:
ac:fb:7e:9b:ac:4f:70:dc:4f:ab:bf:11:40:c1:4c:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6D:3B:AA:F6:F5:E3:88:67:7A:EA:C9:31:C2:EB:92:23:8D:97:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
86:41:d2:3b:09:b1:d6:94:c7:52:78:1b:0b:76:d4:b3:a2:bf:
dd:4d:ab:86:00:cd:7e:dc:e0:9a:90:85:0a:a5:4f:d2:60:64:
2b:6e:2f:24:f6:a7:47:25:c4:9a:a2:b7:d5:a6:03:d2:ce:58:
fd:05:80:15:6f:3d:9b:05:84:db:54:f7:b8:c2:2b:54:99:48:
cc:c4:b3:29:5f:47:23:d5:8a:35:7e:02:fd:f4:3a:d1:c5:58:
e3:1f:c7:78:a3:03:7e:8d:6a:af:96:ec:63:be:cb:b5:e1:83:
71:79:44:44:80:b4:81:ae:81:c0:87:79:a1:6b:34:65:d8:49:
64:48:dd:22:70:1f:a9:bd:76:a8:12:e7:e5:22:a3:0b:ab:5c:
c3:2a:8b:e5:eb:fa:58:93:68:81:b8:f2:e4:43:67:ae:d3:5a:
09:9b:3d:7d:d5:e4:8a:a7:86:ef:93:9f:2c:d9:4a:7e:60:49:
4d:5b:12:dd:ee:2e:70:6f:8a:63:98:3e:ef:36:aa:0a:c8:ad:
d3:6d:c9:44:66:65:ef:58:79:a0:49:12:6f:eb:7d:b8:92:8f:
0f:99:d8:22:05:83:6e:26:96:dc:85:d5:ab:80:b2:81:92:06:
20:2b:a8:58:f2:65:75:48:59:f0:98:1e:8a:2e:d9:83:4e:82:
de:6d:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:19 2026 by rpki-client