Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
File: fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa (raw, json)
Hash identifier: NENLW31EwnMMQLVLM5sAyzwnO3m13Cz8aMhNg5+/WkA=
Subject key identifier: 37:01:F3:11:7C:9E:60:28:3E:24:DB:74:06:B0:96:B7:F7:31:5D:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BC56001921248561907C75867E298CE874B7A00
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
Signing time: Tue 19 May 2026 04:40:56 +0000
ROA not before: Tue 19 May 2026 04:40:56 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c5:60:01:92:12:48:56:19:07:c7:58:67:e2:98:ce:87:4b:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:56 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b66aef53af7c22b77ddd8809492ab56936915559013682d1f2b76e9a1fb41efb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:13:39:76:62:16:9b:50:11:24:85:22:e1:
45:45:8a:a7:61:38:b9:2d:46:c3:6d:99:0a:a5:d9:
a4:46:07:82:84:01:6f:f3:0a:5d:2e:48:c1:57:f9:
d8:63:24:d8:ef:9f:c9:08:d8:a1:33:c5:af:eb:8a:
64:3f:97:7f:27:af:5a:aa:54:fe:40:0a:0b:08:ae:
b3:82:60:94:e3:00:12:4c:cc:e7:e4:f9:4d:b5:31:
b6:65:48:17:c5:af:31:b9:cd:00:f0:dc:1f:a5:12:
8b:dd:63:e5:6c:32:3d:34:d0:6a:60:9f:ae:45:0b:
fa:6a:ee:01:73:13:88:d7:29:20:e3:dc:25:6b:60:
5b:84:47:1a:85:c6:e6:f4:76:70:b0:32:b2:1c:cf:
9a:7e:cc:f0:5e:56:e5:cf:d5:74:50:c8:70:17:6b:
7b:80:d8:35:43:87:7a:a1:09:b8:2c:ce:41:38:84:
ed:48:ad:e3:f6:f1:d2:fa:fe:38:f5:3e:76:af:90:
92:1e:39:c8:72:d3:4e:b1:ac:7a:ad:53:2c:23:bb:
86:91:c9:8d:c4:29:66:b9:9d:80:61:0d:32:06:df:
f6:87:70:63:3b:df:09:c7:67:27:26:69:20:83:6b:
96:7a:11:2d:87:5a:da:8b:4e:97:8d:77:1a:3f:7d:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:F3:11:7C:9E:60:28:3E:24:DB:74:06:B0:96:B7:F7:31:5D:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
6f:45:85:16:be:d5:ea:ce:da:33:0f:08:b4:4e:73:31:2e:48:
c8:1f:69:ec:bf:89:0b:e5:37:d3:a5:b6:7e:9a:8a:23:e2:27:
a5:3c:a9:5c:7f:32:d2:07:2a:f8:92:ff:3d:30:62:ac:04:b3:
79:71:de:e9:35:7b:5d:8a:18:72:58:75:9b:6b:b5:f2:38:de:
57:31:dd:d6:c7:11:1e:2f:3b:9b:3b:13:f0:7d:8d:2e:04:75:
29:2b:57:ed:72:f2:73:8e:a6:a5:c9:f2:84:3c:7a:36:f4:44:
61:ce:0f:59:5c:16:0f:e7:93:8d:26:e8:ab:2c:d4:b6:0a:54:
08:6f:35:bd:c7:af:17:19:c3:1d:56:56:f3:56:d5:af:1c:04:
a3:27:47:ff:5b:d7:2f:0d:33:03:76:3c:50:00:4c:2a:0b:d6:
e7:25:88:9b:13:6d:a4:e5:9b:5d:11:f0:45:51:7a:11:fa:7e:
04:55:90:20:b7:03:dd:37:53:97:78:62:b1:34:24:d8:bd:07:
fb:9f:fa:8d:33:28:41:10:4f:1a:8e:8a:84:73:32:a5:e4:7d:
77:b4:33:0e:cb:82:ce:85:1a:e7:1f:f1:b1:45:47:ca:c7:7d:
30:b2:ef:cb:23:dc:86:66:65:9f:aa:d9:56:6b:ed:05:55:d7:
12:2c:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:39 2026 by rpki-client