Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa
File: e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa (raw, json)
Hash identifier: zzBUOUnTjFU1Zy/ElmTGX0zDXN0iO70qhSO7In7b9cM=
Subject key identifier: 15:01:39:B5:FB:4F:99:58:05:1F:7F:9C:77:1E:03:75:DD:CF:E6:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 43603D135B1A23331E3E0DAD47A80C672AB7CEFD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa
Signing time: Sun 31 May 2026 01:10:42 +0000
ROA not before: Sun 31 May 2026 01:10:42 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:60:3d:13:5b:1a:23:33:1e:3e:0d:ad:47:a8:0c:67:2a:b7:ce:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:42 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=cb640f260c2b77096371d92d8e89033564907bf7c20b42295df2436ed38ec500, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:28:60:da:9a:53:1d:cc:eb:29:c1:ec:e4:
0f:84:91:36:37:b0:73:23:bc:7b:07:43:d7:9e:18:
3b:ce:b6:3b:d2:78:6c:13:a5:c1:5b:c1:38:bd:29:
55:30:34:59:24:09:58:5e:ab:03:7b:50:8f:13:51:
88:50:3e:e2:9a:f9:23:35:57:ee:18:1e:3f:21:62:
82:60:0f:87:90:26:92:a9:75:da:f4:e5:1c:a1:e5:
7c:05:2e:72:e0:0c:a0:26:64:12:cb:f8:a2:b1:0b:
a3:c5:28:ae:7f:8c:1e:95:da:6d:a5:39:55:83:1a:
a6:47:d3:64:dc:b6:b5:6c:e7:59:fc:0f:1d:47:2a:
b8:d3:cd:52:75:2d:f8:45:1a:ac:5e:5f:09:4d:76:
1e:4a:25:56:77:9b:51:a3:21:a7:ca:9b:3d:8b:4a:
b3:4a:4a:eb:dd:62:4f:76:24:9b:7c:07:16:91:63:
00:3f:95:8f:6c:09:6d:bb:3e:4f:cd:90:84:e2:25:
cb:28:c2:c1:38:e9:cb:90:2f:57:db:60:32:65:43:
a7:d7:9d:66:8c:6a:55:88:45:ae:85:92:a6:38:da:
33:d2:80:19:c0:0b:e6:68:8a:d8:04:7b:0b:d5:da:
53:04:32:7c:b1:ea:61:d6:96:48:7b:00:16:e1:93:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:39:B5:FB:4F:99:58:05:1F:7F:9C:77:1E:03:75:DD:CF:E6:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:880::/48
Signature Algorithm: sha256WithRSAEncryption
1d:14:5b:79:32:ca:f8:0c:2e:d1:69:0c:54:af:dc:66:9f:e3:
bf:20:e3:6b:f9:bc:5c:da:19:4f:4b:af:8b:52:b7:ae:c9:87:
3e:b6:2e:6b:62:e1:95:dc:2e:1f:d8:ab:b2:82:b2:5d:46:4d:
64:64:c4:9c:25:b4:d8:d9:c1:85:5c:84:ee:2e:82:2b:67:e2:
12:0f:de:e8:4b:2b:1e:3a:42:bb:47:d4:68:ea:eb:10:b0:2f:
1b:0f:69:b4:2c:ac:58:0c:78:06:cb:e4:95:cf:7d:17:93:b3:
5a:3f:86:29:53:f5:6e:31:18:09:97:19:64:5a:ec:25:bc:82:
4a:c2:49:65:42:b2:77:c6:3f:48:d7:63:82:c4:a1:d6:71:a6:
31:61:4e:ed:5a:2a:13:39:f0:bf:38:4b:0b:10:43:61:5f:7d:
f9:06:cb:49:8e:27:f2:b3:b0:9b:7a:97:86:da:a7:d0:8b:b5:
6e:c6:e2:9c:53:5b:4d:1f:19:b7:3d:b2:33:e0:16:e9:9e:b9:
80:0e:46:65:35:65:3b:96:f9:57:af:aa:79:2c:e4:72:24:c4:
cf:58:7d:96:10:78:b1:33:01:f9:9c:47:3a:fe:2d:89:50:bb:
be:dd:b2:10:00:1f:ab:fd:44:a5:00:fd:d7:4c:c4:f8:a6:a3:
14:fb:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:10 2026 by rpki-client