Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa
File: e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa (raw, json)
Hash identifier: QcE4ePw+ZKoKwg/UTXhWdh4tV5FRMKMWdvIo0ayr4A4=
Subject key identifier: 12:88:41:C4:68:5A:83:CB:DA:62:C9:0D:AA:93:00:FF:7E:13:FC:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7038EF61B3435E23DB828FF09F2AA004B0F03600
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa
Signing time: Thu 04 Jun 2026 00:00:02 +0000
ROA not before: Thu 04 Jun 2026 00:00:02 +0000
ROA not after: Wed 02 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:38:ef:61:b3:43:5e:23:db:82:8f:f0:9f:2a:a0:04:b0:f0:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 4 00:00:02 2026 GMT
Not After : Sep 2 23:59:59 2026 GMT
Subject: serialNumber=9ef7d289b8cad0fd45fcc2042002aee203d75f8a07bb4ad68425e4cdbfd9347d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:4d:d3:5d:81:a1:36:0e:9a:6e:56:86:98:
84:fb:f1:8f:e2:55:a0:ed:5e:eb:13:b6:2d:b8:c2:
97:14:61:66:ce:cf:34:a6:5a:a2:63:c2:c2:a3:3b:
1f:62:75:f1:8e:77:4c:4a:b4:72:6b:2e:b9:90:7d:
b7:dd:a5:b1:4d:47:9c:e4:40:fb:58:01:09:53:26:
5d:01:86:b9:68:e0:45:80:e1:a7:a9:64:ca:a6:30:
ab:dd:1e:96:ed:e2:26:d3:d1:fa:84:66:28:dc:c3:
c8:65:44:8d:02:3c:7c:b0:64:f8:ae:7e:6a:82:27:
51:a6:af:ab:92:59:12:1c:4e:be:d7:09:74:ed:8c:
a9:90:2e:9c:c4:64:cd:5a:8b:ad:a8:ed:bc:99:a0:
f4:35:b6:35:bd:98:20:60:23:a0:7a:75:87:a2:f2:
27:5f:f1:72:88:50:b6:df:77:b1:c1:3d:c8:7c:33:
8c:b4:dc:1e:f6:c7:ee:0d:f1:8c:46:26:9e:32:f9:
a1:51:1c:e2:bc:62:30:d8:88:99:89:7d:f6:ce:85:
26:37:c6:3d:56:0e:b3:83:56:6b:01:26:73:1e:6d:
34:ac:f5:65:41:a1:1d:48:44:72:5d:de:1a:27:3e:
9f:15:7c:d8:4b:d0:d4:f4:e1:1e:72:cf:cb:69:d1:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:41:C4:68:5A:83:CB:DA:62:C9:0D:AA:93:00:FF:7E:13:FC:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7fb9ce3-e814-4cb1-abaa-41df47ac8057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d::/32
Signature Algorithm: sha256WithRSAEncryption
92:17:28:5f:b5:33:72:cc:e8:f4:a4:52:e3:f8:a4:8a:53:76:
aa:f6:a1:33:59:89:76:40:53:b5:e6:bf:4a:b6:87:d2:50:9e:
f9:c9:ed:2e:f4:ff:ba:c4:cd:8a:85:3f:3c:32:23:bf:28:d5:
d5:d6:0b:24:6f:83:dc:0c:e4:77:2d:de:46:6f:ca:33:18:fd:
25:56:81:6b:08:ff:22:b0:86:50:7e:1d:87:57:a8:fa:74:68:
ac:b5:6c:62:71:a1:c7:69:c0:bb:bf:18:41:42:f1:ff:47:3c:
c6:80:c6:27:af:0c:d0:7b:46:2b:25:a0:13:1e:33:ec:57:67:
ad:06:e1:82:10:8f:b9:d3:b3:8c:18:69:a1:11:de:a9:9a:d3:
af:bb:98:cb:6d:70:5b:b7:f1:2d:68:95:eb:cd:c0:ac:19:ba:
7e:27:cf:f0:9e:e9:6d:d2:d5:c7:19:70:98:b1:a6:3a:e7:5e:
f7:19:0d:d9:81:f1:12:65:fa:89:6d:f7:1e:a7:f0:b4:b5:70:
dc:62:fc:41:20:2e:40:d3:0d:cf:4c:e3:70:55:45:51:b1:5c:
64:da:d0:84:79:59:01:ea:37:86:4e:03:14:dc:34:4c:69:49:
4d:d3:95:c0:19:5b:7f:c5:d6:9b:af:2a:e3:2d:31:87:69:28:
bd:89:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:48 2026 by rpki-client