Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
File: dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa (raw, json)
Hash identifier: Bsg3fZ9cefc5qV+qgMIuV1VZV626FxIm1197RMu/QHY=
Subject key identifier: F0:D8:F9:07:B1:25:D5:26:70:9B:06:83:51:AA:47:D8:35:63:5A:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CDB0650287BD55FA830902A16712E6DFD63E4B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
Signing time: Tue 19 May 2026 05:00:54 +0000
ROA not before: Tue 19 May 2026 05:00:54 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:db:06:50:28:7b:d5:5f:a8:30:90:2a:16:71:2e:6d:fd:63:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:54 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=f3ea02386359770ecd1cb247e8a007335c8b100d7532372432f3657744c5e24f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:bb:cd:be:64:c4:10:e9:3c:84:3a:f8:8e:
8c:a1:b5:cb:fc:ae:e0:5c:4e:d2:14:74:97:75:25:
81:6e:95:53:37:9a:6f:ea:97:0f:6f:4d:73:92:cf:
27:1c:58:27:16:4b:49:4c:32:74:a6:5a:f6:48:19:
64:a5:7f:cf:a9:5f:36:13:e7:4f:cc:bc:7e:cd:53:
2b:27:bd:ad:b7:9f:08:ff:ad:03:c6:f3:8a:9c:8e:
21:4c:86:b1:78:d9:db:37:b9:ca:93:99:e6:0c:0b:
7c:bb:01:bd:b3:83:97:10:b4:95:04:16:27:b4:55:
32:73:c9:77:94:2d:50:96:d9:0b:3f:14:1e:29:77:
4c:5f:c1:d6:ac:d5:5a:8c:8f:d1:93:b6:cd:7b:74:
84:7b:6a:d0:a9:f7:c3:6c:58:26:94:02:26:b5:38:
ed:c3:d5:d7:2d:be:3f:ee:89:ac:8f:76:88:7f:98:
66:7b:4f:bf:26:54:e5:2a:b0:ec:ef:bf:e2:17:9f:
f2:67:a5:a0:81:0c:08:dd:00:75:f9:7e:5c:bc:3d:
6c:fc:82:d4:7e:d4:80:68:99:a1:9a:e2:c9:cd:7b:
5a:cc:7c:f1:82:f6:21:3e:c2:e0:a9:67:8a:e8:7e:
1b:6c:8e:60:1d:5f:55:6b:5e:c3:f6:12:19:f3:05:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D8:F9:07:B1:25:D5:26:70:9B:06:83:51:AA:47:D8:35:63:5A:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a9:65:71:f9:f1:20:5c:eb:04:6f:df:72:b3:f7:0a:ea:34:02:
fe:b5:78:39:3e:78:e4:c8:3a:2d:39:fd:34:ce:1d:f8:07:e7:
de:44:15:f5:46:ae:20:6a:15:58:2c:1a:36:69:d6:fb:26:f4:
da:ce:28:a0:ac:d9:0a:1a:0c:d5:7d:32:65:e6:6a:b5:15:e5:
bb:79:38:79:b2:69:5d:b5:22:17:ae:ab:53:1d:bd:2e:01:49:
72:f1:a5:79:de:f0:00:f7:0d:09:fe:c6:64:12:a5:a6:20:21:
e2:5c:e3:38:25:17:cb:a1:61:75:46:c6:0c:41:2e:a6:0d:9d:
9b:a4:6b:ff:cd:96:10:b6:d1:f2:0f:1a:55:84:ed:bf:e3:66:
41:e4:f7:43:65:e6:80:14:5c:58:45:07:c2:ff:47:2a:52:42:
12:c3:e6:49:ab:14:cf:46:a1:40:0d:0b:a6:17:8b:cf:6a:82:
c4:5f:a7:88:76:89:7f:7b:2a:04:a2:a8:1f:c5:45:8e:48:a7:
8b:9b:e1:b4:da:16:82:99:d7:f5:84:b2:dc:f6:31:3d:27:fe:
c7:3b:e3:07:ab:9f:e7:a1:3c:74:95:04:14:29:b6:0c:66:9f:
b0:b8:c5:0b:56:39:18:f5:84:36:c8:62:25:ba:30:86:dd:a5:
f1:c3:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:33:31 2026 by rpki-client