Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa
File: f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa (raw, json)
Hash identifier: vLQ3wQ70T0t6GRabqBsJTz4uRCl3pz1Pc5ar3BfMHWo=
Subject key identifier: A0:39:D5:65:C6:6F:D4:38:81:E3:7E:BA:65:4A:A0:B4:FC:F1:E5:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08B6E160D0C9F40819FB68C2EBBE08CE08354111
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa
Signing time: Sun 31 May 2026 01:10:43 +0000
ROA not before: Sun 31 May 2026 01:10:43 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b6:e1:60:d0:c9:f4:08:19:fb:68:c2:eb:be:08:ce:08:35:41:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:43 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=f24386fa66c347fe06194eef20e2953a62b51b655179a8e17437c2860b296d2a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:06:49:f9:1f:be:ca:0a:d4:b6:97:34:cb:
3c:64:e6:60:43:ea:3d:5c:9c:d8:1c:4e:74:09:c6:
d5:2b:57:3f:f8:01:42:32:fe:53:a4:c6:ef:9a:b9:
58:b1:20:32:36:77:d9:13:17:f4:d1:9a:a8:09:99:
11:e5:75:3e:8b:a5:65:66:a4:27:7a:99:99:b5:f6:
c4:43:1c:13:1a:43:5d:7f:27:f6:51:21:6a:05:38:
d0:b7:fa:e3:c2:5f:a3:57:7a:66:21:47:04:f7:84:
96:f4:ad:06:0d:5a:1f:c3:e3:25:5f:0e:95:b1:9e:
1f:61:18:f3:ed:f4:37:e5:7b:21:07:43:ce:2b:00:
b5:2b:6e:b2:05:b3:73:78:9b:f7:34:ff:e7:3c:5e:
36:0f:a0:27:79:0c:c6:29:63:f1:59:d5:6f:af:a4:
03:d5:e2:9e:59:ca:f4:46:f4:00:2f:2d:80:8f:52:
90:31:77:c6:6a:9f:9b:d0:09:a1:36:94:5b:31:6e:
7f:22:c1:1a:3d:23:fd:fb:c7:ce:06:f0:f9:99:8a:
33:02:a9:1f:13:d2:d2:66:cc:e8:85:2c:17:b5:39:
0c:93:41:c1:23:26:0a:4a:2b:99:0a:a1:a3:a4:17:
6a:f8:f7:c7:87:fd:74:22:13:3e:23:90:fa:80:18:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:D5:65:C6:6F:D4:38:81:E3:7E:BA:65:4A:A0:B4:FC:F1:E5:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:2080::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e9:49:15:e5:c7:e1:e3:74:15:5a:6a:82:fb:ea:e7:e7:09:
2a:45:02:a6:a5:d3:06:ea:5d:e4:b1:6c:19:84:b4:f8:78:83:
da:45:02:8f:f1:1e:44:c5:b7:c9:26:88:4e:49:fb:cd:e3:2c:
c0:dc:ae:2c:87:af:27:43:a8:20:db:c5:f5:1d:43:f1:f3:ee:
e7:ef:ab:9a:10:3e:e4:bc:da:54:4e:e0:33:70:f3:03:fd:56:
ec:3f:cc:90:ac:31:fd:fc:2c:fa:d8:1a:61:9e:a5:66:0a:05:
ea:8c:43:17:b6:89:6a:7a:7a:69:f5:6e:d9:f1:75:a0:a0:dd:
03:30:79:98:b2:fb:ee:36:a5:78:74:f0:60:fc:da:97:ea:ed:
99:4e:d7:e9:74:52:a0:dd:eb:fb:79:1d:e0:fa:47:e9:8f:7d:
e1:9a:08:b8:be:99:78:34:86:50:90:51:60:2c:d0:67:98:82:
6c:09:3e:ee:99:77:9d:cd:3c:ff:ad:18:30:62:dd:5f:fc:32:
72:1c:de:df:cb:f5:73:cc:15:b4:58:93:0d:50:52:d3:f3:28:
db:50:fd:d3:58:ad:84:fe:d5:b9:d7:3f:28:94:78:51:a5:4c:
8b:17:8e:98:db:9d:27:85:d1:26:e0:e4:3b:0c:12:db:02:ac:
f2:cc:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:05 2026 by rpki-client