Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6b6ad0a-4421-4d1e-97dc-9ac638c3ee31.roa
File: f6b6ad0a-4421-4d1e-97dc-9ac638c3ee31.roa (raw, json)
Hash identifier: +JWKxSbm3/W9LGtpSvIPsxUjmrs2mLgFZUc7yfcJMTM=
Subject key identifier: 21:26:8B:B4:DE:B6:51:A0:2D:40:36:5C:14:B7:1B:8E:19:62:77:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51517174320748F9B3B2CF3FF9252E13570FBDED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6b6ad0a-4421-4d1e-97dc-9ac638c3ee31.roa
Signing time: Sun 31 May 2026 01:00:35 +0000
ROA not before: Sun 31 May 2026 01:00:35 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:51:71:74:32:07:48:f9:b3:b2:cf:3f:f9:25:2e:13:57:0f:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:35 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=9a3b735ba1300914906d6ff579645387923f81c9c02510fa029cc10254665a4f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:8d:a6:cc:e1:e7:e0:fa:8e:6e:5d:da:9b:
42:b6:ed:cc:bf:10:3b:1b:26:cb:d3:03:d1:1c:0e:
c0:85:34:93:ec:bf:78:e7:f0:21:4c:c6:6c:4b:50:
1e:76:50:10:52:b7:05:4d:88:cf:a1:cf:c9:91:b6:
60:0d:7c:37:24:43:e7:5e:3f:07:ed:50:36:5a:fc:
81:b2:78:38:c0:bb:76:02:20:0a:6e:13:77:aa:3c:
26:0c:8e:2c:ef:be:ef:cc:e4:72:d4:cd:44:50:4e:
1b:4b:e4:1e:d1:52:4e:98:63:1b:57:3a:10:e0:6b:
3c:2d:36:02:dc:e7:83:ca:76:4d:b2:e1:ec:1d:54:
31:8c:98:5f:05:7c:d2:e9:76:5b:29:10:ae:5a:8a:
88:11:28:1b:da:63:ae:90:e3:c5:a6:55:05:66:05:
22:b0:7d:92:fd:39:00:32:c3:c7:87:22:40:54:07:
01:2c:cf:56:5e:26:e9:df:29:4b:52:b5:cb:1a:5e:
5c:43:64:58:e9:92:09:a4:84:22:bc:ff:eb:f1:d4:
09:ed:00:52:10:42:2b:c1:6f:3f:f8:61:65:8f:57:
d4:83:46:d9:b7:c1:ee:31:d6:69:71:86:28:6e:a5:
8c:93:e8:f1:a2:27:8b:c4:48:fe:44:57:60:b5:d4:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:8B:B4:DE:B6:51:A0:2D:40:36:5C:14:B7:1B:8E:19:62:77:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6b6ad0a-4421-4d1e-97dc-9ac638c3ee31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:e040::/48
Signature Algorithm: sha256WithRSAEncryption
6f:26:47:fb:f0:c5:f5:48:0c:9b:6a:93:54:97:65:e0:e1:c8:
3c:98:b3:2c:aa:a6:13:86:8c:e2:13:27:fe:b7:ea:57:1e:c9:
1d:95:5c:3d:71:3f:8c:e1:2e:a5:1c:b6:ca:46:0a:4b:9f:f6:
fd:59:18:57:5f:ea:ee:23:63:55:16:2b:13:c2:47:85:68:e2:
db:3d:0d:d1:a7:cc:c0:28:8a:f9:88:64:38:8d:9c:61:59:09:
d4:8a:1a:44:1d:0f:a2:06:4c:63:5a:f3:d3:9e:3b:98:dd:16:
7d:1f:14:3b:9a:f4:b4:d4:08:a6:c0:34:ad:6d:68:61:2e:fb:
c9:49:6c:73:b7:18:d2:e0:98:d4:22:85:b4:54:2d:d7:6d:c9:
c8:cc:73:9a:26:7e:76:47:0e:12:0c:a6:5c:5b:97:d1:0b:ab:
21:28:c4:78:e4:11:04:c7:3a:ce:24:ac:c9:fb:d4:b1:c7:f8:
07:66:17:1f:5f:90:c0:d4:e8:08:5c:e1:8d:5e:99:95:c6:d9:
5d:59:f9:d0:11:05:eb:35:d9:91:0e:f1:e1:28:7e:91:48:6d:
d1:a8:ee:84:bc:28:0a:9a:8a:1e:9f:70:90:2c:98:5b:dc:25:
60:70:03:14:dc:f1:69:bf:7f:31:b1:85:42:ed:49:f5:5d:9f:
b6:66:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:15 2026 by rpki-client