Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
File: f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa (raw, json)
Hash identifier: 08nGhPTFGU5aMi+Aqz5AYwNA6d4G6KaQ3EWgV3sSgX4=
Subject key identifier: 88:C3:33:9B:71:CC:F2:23:0C:ED:B2:70:20:E2:4D:16:9B:14:0B:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FC2137B13DBB966F226BD3089D4C637BB19930E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
Signing time: Tue 19 May 2026 05:10:07 +0000
ROA not before: Tue 19 May 2026 05:10:07 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c2:13:7b:13:db:b9:66:f2:26:bd:30:89:d4:c6:37:bb:19:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:10:07 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=8703950fb0e92a1ef32010264cf89718a0cf76bbc9c46e8b4d19f8c1a935b93a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:8d:ea:ea:78:05:66:a6:72:49:88:d2:27:
7f:05:a5:a5:73:ce:8a:57:41:68:93:6e:fe:de:bc:
bc:16:cb:e2:7e:c1:a4:c6:b9:66:de:f8:76:35:ff:
75:61:0d:31:a5:43:37:c2:5f:04:39:39:82:37:96:
26:03:c6:87:0e:fe:54:91:66:be:d9:e1:92:85:04:
94:57:b1:d9:f2:7f:16:14:11:4e:f2:e2:14:98:ba:
55:f6:f1:11:1a:a3:48:93:dd:ff:61:c4:88:f3:55:
80:75:e8:cf:71:e5:ec:82:cf:e7:83:56:61:85:ec:
f3:47:e0:46:fa:ad:5a:9e:87:04:7b:85:aa:92:da:
2e:e7:f5:00:ca:10:25:80:73:81:4a:38:1e:92:f6:
66:21:ee:f3:11:2c:8b:74:c8:20:6b:56:59:8c:bf:
6c:a2:c4:3b:7e:35:a3:fa:52:cb:2e:cf:9c:dd:af:
bb:49:52:ff:65:3a:81:e1:6b:49:0f:0d:22:53:19:
ce:b6:be:1c:4e:4b:a7:e0:13:cf:21:0f:4d:8f:cc:
c9:89:2a:97:3e:3c:79:b0:7c:d7:ad:77:d9:ac:cc:
7f:5c:b6:49:59:a5:e4:2c:f3:f3:d3:42:c5:92:0f:
01:88:97:63:d7:f3:46:fc:6b:56:a5:de:68:51:81:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:33:9B:71:CC:F2:23:0C:ED:B2:70:20:E2:4D:16:9B:14:0B:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5080::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9f:16:15:53:cf:df:d4:3c:a7:b0:bd:ca:89:42:a5:c9:9d:
76:39:e4:52:b0:03:91:94:98:9c:72:d1:36:68:d3:52:53:27:
62:88:6b:d4:ae:28:c3:e9:cd:e1:4d:d5:3a:57:f5:c9:54:b8:
59:1c:be:6d:dd:1e:df:05:82:05:95:ce:51:0b:60:ad:16:88:
9f:d5:8e:a7:c3:5e:05:b3:bf:b9:c2:1f:d8:08:0d:b9:27:6d:
6c:ea:37:40:d9:85:e6:8c:07:f1:67:93:e0:47:34:70:b4:00:
cd:03:34:11:20:13:35:aa:23:0e:dd:37:71:e5:f5:f5:3f:d8:
9c:42:fa:0a:80:ce:13:0f:28:2d:48:e4:85:9d:bb:e0:38:60:
d4:5f:d5:b8:f2:92:47:a2:ed:ce:fb:56:9d:bd:dd:85:fb:c6:
40:c6:a9:bc:62:3a:39:e3:78:15:f2:8b:46:82:53:c2:ab:3c:
5f:3b:7e:0e:27:2f:98:0e:a4:dc:a5:12:d4:e1:ca:87:47:69:
c3:7d:e9:fa:21:dd:70:fe:4a:5f:9f:51:f4:a2:22:13:40:60:
c6:90:25:d9:90:c5:a2:c3:7e:99:79:19:3f:2a:7a:3c:38:ec:
6c:ce:e0:b3:f9:73:44:de:3d:c0:35:50:c7:ab:5d:26:ed:e0:
cd:85:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:33:07 2026 by rpki-client