Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
File: 07c3de07-a359-4dee-93cb-30a6dab1215d.roa (raw, json)
Hash identifier: 2H0UGEplo2vs+Y7xVokkeb/FSTrj0NEr6IfM++CAoyo=
Subject key identifier: 0E:42:54:C5:B5:64:81:65:ED:86:B5:93:C7:DE:B9:23:84:12:DA:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76292A148B9E1A005E2C99663A14257196173C0D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
Signing time: Mon 04 May 2026 15:30:06 +0000
ROA not before: Mon 04 May 2026 15:30:06 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:29:2a:14:8b:9e:1a:00:5e:2c:99:66:3a:14:25:71:96:17:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:30:06 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=916b12989b5343556a85fa26d4d99f7de18a2299e6459b32250d918a45007d86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:11:9c:aa:27:86:13:2c:ca:7c:3a:1f:16:
22:11:02:3c:5f:48:6a:5d:8b:8f:a1:1c:93:e4:72:
37:19:94:b2:9b:c5:fc:06:aa:13:ca:3f:54:cb:41:
3d:8f:b9:70:f2:a0:50:1d:85:14:49:34:5d:f4:e1:
d4:1e:85:83:b2:c8:08:dd:a6:c3:f2:67:65:1f:ff:
1f:66:3e:0f:57:bf:f6:b6:ab:47:2a:0e:b5:6c:35:
0d:9e:89:d9:8b:19:53:ad:53:a0:20:a3:67:f9:bf:
be:0b:89:ca:e2:b9:9c:a7:cc:13:2d:30:46:4b:7c:
6c:01:7c:f2:4f:33:56:b0:dc:43:d2:61:9a:bf:74:
36:40:44:83:90:ed:3f:04:9c:d5:55:a8:1c:b9:06:
3e:64:e8:e7:f7:5f:08:12:52:4d:bc:ec:f0:b9:4f:
02:bd:3a:23:6c:1b:e1:cd:34:88:e2:6a:39:4a:cc:
46:46:1d:dd:93:e6:e0:bf:a2:e2:68:c6:4b:62:9c:
86:cf:71:45:2e:1a:c7:ca:a0:72:8a:02:31:cd:4d:
3b:bc:a0:c8:ca:b0:20:c5:16:60:1e:4b:21:6e:d8:
24:50:12:f9:e4:db:af:33:31:fb:fe:23:46:7f:94:
34:41:bc:82:10:95:5d:54:38:85:93:c5:dd:5a:30:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:42:54:C5:B5:64:81:65:ED:86:B5:93:C7:DE:B9:23:84:12:DA:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
b1:9a:0c:3c:6a:21:f1:54:38:91:4a:2f:ea:ce:3c:c9:0f:d6:
b9:48:e2:be:17:38:b6:a8:2b:97:5f:65:0f:bb:f6:a2:99:9a:
7a:ca:5b:54:c7:14:8a:e2:cb:d6:94:12:02:be:03:68:79:3e:
01:a9:0b:11:62:cd:07:bf:4a:c8:15:7d:2b:23:18:ca:25:82:
8c:4f:d1:68:9a:64:27:d7:2a:3f:2e:5d:f8:00:36:85:d1:7e:
4c:de:b0:f0:ab:a7:ab:83:6c:76:da:b8:34:58:d3:27:bb:29:
fc:8f:be:9b:90:9f:c2:e5:44:57:a6:51:b0:52:a3:ce:c7:d3:
4f:58:66:60:74:c8:9e:fa:65:dc:de:5b:5d:11:b1:7a:26:d2:
98:cb:9c:49:ce:55:41:29:29:13:0e:27:0c:4c:9b:a0:3b:14:
5e:f8:49:2a:06:39:b1:9e:8a:4f:7d:9d:b6:2b:1e:55:5d:bf:
48:84:5d:4c:ff:ed:9c:78:cd:01:f1:c8:c9:f0:c1:1c:70:18:
dc:a7:bb:29:a5:dd:67:df:39:1b:ff:82:7e:d8:15:e0:90:33:
50:56:b1:ed:b0:f6:55:c2:85:ea:b1:81:30:32:24:f8:ac:20:
d8:4f:c4:a0:b4:85:5b:a3:f1:a0:03:1d:87:bb:a5:87:40:39:
05:19:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:28:59 2026 by rpki-client