Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
File: d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa (raw, json)
Hash identifier: 3Y8S3BpHfVZ0oBZEyG1e3gHjRoIYcgzfKLVIxPYcUf4=
Subject key identifier: 77:48:2C:3B:9E:77:1C:5F:16:78:58:A3:D2:D9:95:29:59:32:25:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 66AEF7B2119A8244E69CB24F920D4B01CF5400C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
Signing time: Wed 20 May 2026 00:00:08 +0000
ROA not before: Wed 20 May 2026 00:00:08 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ae:f7:b2:11:9a:82:44:e6:9c:b2:4f:92:0d:4b:01:cf:54:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:08 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=fe78b96cd64f3b23b95481daba3aa7919ad9aeb995e8551d5e3057f909938ff0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:5d:a4:c7:34:b3:b4:47:b7:49:8c:6b:95:
50:af:84:d0:fc:45:ee:4e:bf:58:a6:7c:0a:73:2e:
f4:c5:00:88:55:76:d4:cb:f2:58:92:6e:09:01:1d:
cf:34:68:40:4b:d6:1b:9e:a1:4b:cb:58:11:03:b0:
8c:5d:90:e8:f8:9d:54:4b:d3:1b:ea:95:d2:24:b7:
bb:f3:fa:7d:61:06:43:9f:1c:ce:92:ec:38:52:c3:
ce:0d:db:52:65:c5:ae:6d:a3:d6:78:03:37:52:2f:
7a:ac:2a:4f:af:ef:65:c3:73:45:fd:72:9e:08:9c:
10:c8:74:5e:27:9c:05:39:c1:3e:de:ae:d3:1a:88:
b9:2e:b4:9d:11:e1:ff:d6:67:9e:e6:7c:49:22:1f:
05:f2:4c:9c:3a:5f:97:05:0b:22:e7:3d:7c:b5:4b:
1e:65:5f:15:da:a4:79:25:a1:9a:6f:fc:8e:aa:14:
44:42:4e:ba:c2:c2:c6:e8:05:2e:96:b7:0d:73:6c:
91:df:11:76:a8:09:e9:d6:0f:99:54:f4:24:ec:d1:
0d:7f:66:4a:3d:c4:57:1c:ef:fb:ef:f2:5d:59:31:
00:9c:f4:dc:19:62:f4:ce:0a:af:2a:42:f6:21:9d:
fe:80:db:16:8e:7b:3f:09:89:19:ce:3c:8d:e3:40:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:48:2C:3B:9E:77:1C:5F:16:78:58:A3:D2:D9:95:29:59:32:25:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1800::/38
Signature Algorithm: sha256WithRSAEncryption
82:11:4f:67:2d:58:db:b3:a9:5c:17:ce:b7:09:58:d2:b9:fb:
e6:ea:99:6b:75:94:e6:32:79:e8:b8:f2:75:ce:ef:22:a7:cd:
72:10:85:55:b5:47:96:b9:a5:71:5e:0a:b2:2d:59:5a:8b:12:
88:e1:21:83:16:22:ee:0a:37:50:41:11:f6:c9:cf:b8:77:99:
59:a5:1b:65:00:38:ae:8a:30:ce:6b:51:3a:a8:02:35:23:1c:
a7:ce:be:ee:cb:61:7c:70:54:a8:fc:42:ed:42:0f:41:4b:8f:
47:f9:c1:36:c6:df:80:0b:ee:16:c1:d0:1c:4b:40:93:61:f5:
be:7b:3a:b7:c6:58:de:01:17:00:28:ab:03:e2:3f:55:fe:1d:
b2:15:62:65:5a:af:13:aa:56:6d:98:c8:83:ee:6a:64:ef:36:
c0:1c:81:15:3c:c2:57:07:aa:e2:3f:33:bd:53:c2:34:ae:89:
e6:c4:5b:15:28:3d:c7:04:0d:44:b6:0c:4b:ef:e5:88:3a:39:
28:2b:dc:a9:d2:9e:3b:8b:0e:fd:69:a8:8a:d1:db:55:e6:b0:
d9:58:2b:02:73:95:bc:c9:82:fe:03:2d:a2:2f:85:0d:9b:e4:
04:9f:36:9b:d7:89:1c:27:10:4d:36:b7:90:72:ab:4e:9c:14:
24:65:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:18 2026 by rpki-client