Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea520cf2-1d99-4122-828b-8b7044eb56af.roa
File: ea520cf2-1d99-4122-828b-8b7044eb56af.roa (raw, json)
Hash identifier: X+A+C1dEiB7uzBlcMAblCDlPenX1C5S7cHqRD1Q6vNg=
Subject key identifier: 53:C6:2E:11:53:76:95:DC:D7:B9:21:23:F4:54:08:1A:9F:9A:6A:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06AD93FCD0C06BDB825098E3A6A18A8896D5FEBD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea520cf2-1d99-4122-828b-8b7044eb56af.roa
Signing time: Sun 31 May 2026 01:10:59 +0000
ROA not before: Sun 31 May 2026 01:10:59 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ad:93:fc:d0:c0:6b:db:82:50:98:e3:a6:a1:8a:88:96:d5:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:59 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=8bdc1971e6c72279d61c31f2691c29b5afa9b808fa204b771c575616026b969a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:62:07:22:aa:68:29:42:ca:02:2a:19:00:
4e:55:f5:6b:c6:0f:e1:a7:29:93:a0:eb:5b:18:8f:
36:7c:69:39:7f:29:1c:e0:72:eb:09:c8:8f:fc:90:
cc:cc:e3:e0:72:d3:3d:6f:6e:a9:29:42:95:51:91:
71:d1:91:27:93:1b:c5:07:64:59:45:25:e0:c9:f8:
69:3f:f2:ca:2e:85:8e:5d:0c:5b:39:11:70:fb:40:
2a:27:49:e4:4c:83:18:78:d7:4b:83:18:4e:7f:eb:
b4:7f:11:9a:40:83:58:f9:6e:01:43:c8:a8:b5:f8:
81:a8:94:b3:7b:2b:e9:10:51:1d:e1:03:91:91:4f:
82:cd:05:92:d0:6c:f8:73:bd:cd:01:8f:ee:8c:df:
76:af:b0:24:55:a1:af:0d:49:5d:5a:42:71:cd:d2:
c8:d6:c8:8d:a4:b4:36:55:cb:21:14:96:84:df:1a:
56:ce:fa:b7:ce:e7:b2:01:4a:46:67:0a:7d:df:aa:
a4:bc:56:a6:5b:ef:64:c7:7c:87:69:63:56:6e:8f:
07:6c:eb:8c:ff:fc:a6:3e:ca:c3:5a:80:d6:e5:20:
61:05:ae:c4:9d:54:1c:12:3e:6d:0e:51:36:44:2d:
32:8a:a5:5a:ff:2b:1c:c6:2d:45:7f:7d:84:82:91:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:2E:11:53:76:95:DC:D7:B9:21:23:F4:54:08:1A:9F:9A:6A:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea520cf2-1d99-4122-828b-8b7044eb56af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:1000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:c4:44:9c:82:b3:e4:97:b3:bd:95:20:20:64:04:2f:73:ae:
e8:bc:b4:83:ec:9c:69:58:f4:0a:de:4f:d3:a9:fb:0e:af:a4:
5b:56:26:f0:bf:19:e5:2d:38:6d:d6:df:16:be:5a:f9:59:64:
82:2d:3b:48:c8:6e:e6:67:75:be:e0:0e:e3:3c:33:d4:6b:8b:
91:5e:b3:78:34:d9:c3:e4:df:09:23:0c:2d:cd:75:62:cc:ba:
97:a9:15:6b:59:d0:4d:d0:72:f4:c3:95:ea:34:34:ed:bb:08:
95:a2:19:6d:62:3e:19:60:74:c7:44:01:c3:c0:44:23:fe:97:
af:c8:39:0a:88:ff:09:19:9a:8e:da:40:60:6c:13:39:90:56:
33:59:03:bb:99:11:62:2a:da:2d:fe:ff:d2:56:99:62:40:a1:
1a:c3:0b:09:b7:ff:a1:a1:1d:5f:a1:97:04:2f:88:e9:51:c8:
fb:e2:44:7f:23:2e:3d:89:b3:49:96:97:f9:2c:cf:c1:57:47:
c7:b9:5e:54:f7:0d:ac:65:ca:dd:77:c8:88:ac:65:43:d0:a6:
b6:2d:df:96:64:07:23:1c:96:b2:e8:5c:14:34:0d:71:09:90:
77:ea:ed:44:a6:6c:6c:56:d6:d9:4a:0e:57:7c:f8:d8:9c:1c:
b5:43:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:16 2026 by rpki-client