Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
File: fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa (raw, json)
Hash identifier: hP4QT70GWCYucSBLcFrf5qk2DY13KD6IulM8HR08lko=
Subject key identifier: 34:6A:3D:3E:D9:20:D3:B7:C6:78:57:5C:12:18:9E:2E:A4:87:45:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 753929D61D4E5194BBCC542C62C3341F9BA598CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
Signing time: Tue 19 May 2026 05:00:36 +0000
ROA not before: Tue 19 May 2026 05:00:36 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:39:29:d6:1d:4e:51:94:bb:cc:54:2c:62:c3:34:1f:9b:a5:98:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:36 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=6306123759e66bb1f5574071c555ffac867f3ab1e61561b511e193288c065efb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:87:95:f5:c9:b5:78:fa:f5:9c:00:1e:10:
69:b4:d1:3f:49:f8:7c:ed:51:36:62:f7:9e:22:0f:
61:1e:c0:10:bd:97:80:6b:7d:62:c0:26:20:66:cb:
6b:7b:b3:3d:ad:00:29:ea:eb:8c:cf:39:3c:62:c4:
37:12:9f:ae:86:6b:95:47:74:a4:3e:33:4f:b2:d1:
8e:69:4f:89:b1:f8:75:ce:93:12:dd:84:4d:a9:18:
5a:5e:7d:39:b5:69:31:17:b2:30:1d:ef:35:da:69:
1e:c7:e8:51:81:78:11:9d:f6:72:1b:be:08:22:1a:
9b:d5:06:c1:9e:2f:41:7e:7d:23:89:0a:9c:6a:8d:
a4:2d:0c:3a:e5:33:d5:f9:32:e7:6f:18:88:e2:b8:
72:c9:ac:36:70:38:cb:65:0c:8d:2a:1c:f2:96:a3:
89:8a:99:05:00:1f:24:b6:e5:45:41:ff:ef:6b:2c:
8c:d6:ea:24:64:c4:f9:99:ab:12:96:63:c6:16:84:
6a:b9:b7:ca:9e:30:b0:7d:35:25:98:9d:05:2d:91:
46:6a:87:85:3c:9c:a2:d1:18:7f:fd:b7:42:6a:3b:
9e:93:22:37:5d:af:3a:15:fb:fd:97:91:e1:36:f7:
4b:f2:01:da:e2:02:06:15:99:a7:46:55:d1:c9:7c:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:3D:3E:D9:20:D3:B7:C6:78:57:5C:12:18:9E:2E:A4:87:45:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:c000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:5d:da:a0:05:d1:f4:11:ba:2a:a3:0e:87:c1:64:3a:21:cc:
58:af:67:cb:93:a3:97:70:8d:6d:a6:a8:11:6f:3f:cf:70:c7:
05:40:1e:78:ba:b6:a5:df:c6:de:47:15:7a:a6:b6:59:67:4d:
85:17:3e:d1:53:ef:68:b8:2d:86:87:75:0e:e3:eb:8d:78:8c:
70:85:25:b0:a7:2e:bd:35:10:5d:c2:35:6d:b9:23:d2:db:54:
35:55:cf:17:a1:1f:61:e2:9d:15:c3:f5:5d:c6:75:95:d1:36:
ca:ea:c9:ae:28:83:58:e4:38:fc:14:9f:87:e1:57:8f:e8:62:
8e:95:71:d6:ec:e8:09:3e:9f:3c:18:62:be:f9:f6:63:0d:00:
84:5d:e8:63:d9:ff:00:e8:92:98:54:ab:9a:bc:66:f3:94:5d:
65:ad:1a:27:9f:7f:7b:68:a7:eb:a8:c7:65:90:9f:b5:0c:90:
1a:1d:f5:5a:6a:16:6f:81:12:7e:a7:82:87:7c:7a:d1:e2:af:
a2:48:a1:de:40:c6:dd:4b:7e:be:97:8e:cb:fe:40:76:b7:dc:
4c:e2:07:91:3e:82:85:85:65:9e:04:e8:bb:5a:93:db:11:34:
60:6e:66:dc:f9:e9:4c:a2:81:fa:2c:f4:8c:cf:de:b5:7c:95:
1f:c6:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:42 2026 by rpki-client