Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
File: 07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa (raw, json)
Hash identifier: ulb9fV8i4bk0sZ6qojKy3o9/RdJvfK3uSxOZZYWOTdo=
Subject key identifier: 41:48:39:86:0B:C0:25:96:AB:62:CE:64:E8:DF:B7:23:BB:A1:25:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50CBA0585515CB0E4E2716FFA4A236689FA5BE1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
Signing time: Sat 02 May 2026 01:20:08 +0000
ROA not before: Sat 02 May 2026 01:20:08 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cb:a0:58:55:15:cb:0e:4e:27:16:ff:a4:a2:36:68:9f:a5:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:08 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=358ac9103fd21521989cde6d61b4fb28e5909002de48963d0481bba2af25b703, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:63:de:4c:e5:52:a5:a5:e3:fb:8e:fe:e3:
3b:0d:25:d0:58:13:cb:02:ca:73:f1:8d:82:53:10:
ec:84:81:26:dc:b3:10:9c:e7:f2:a1:8b:4f:ed:26:
5b:e1:bd:0b:27:61:bb:12:9e:aa:8a:da:4f:ef:b1:
82:28:7b:b1:2b:03:ac:90:a9:ba:6f:54:19:ef:c4:
f3:12:9e:1b:36:fa:0e:5e:5c:13:a1:fb:b8:ce:42:
be:a5:3b:ca:33:b3:cb:33:bf:89:7a:f6:0e:65:27:
c7:2f:41:f6:f8:be:5b:7b:07:eb:39:af:91:7d:b5:
23:27:ba:e6:c7:84:00:b3:b4:27:d0:2a:3e:47:75:
71:3d:1b:ed:b1:fd:b0:73:70:c3:00:71:0c:9b:18:
87:d0:ca:62:07:bb:33:69:c9:03:f0:3f:7e:d4:c6:
2f:fc:5e:c5:67:2c:95:d0:89:89:90:19:c8:85:20:
eb:7c:c1:14:0b:46:4a:06:34:dd:c4:ea:da:fb:62:
07:0e:47:7b:cb:66:f4:7d:fd:2f:eb:a1:40:fe:9e:
64:2c:e4:69:f5:25:9e:f7:01:28:59:38:7d:1e:c4:
2f:a1:d1:ee:eb:55:f9:50:28:5d:b2:04:97:1f:87:
47:e6:ad:7b:dd:21:fd:54:2f:28:6a:8b:d2:56:b5:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:39:86:0B:C0:25:96:AB:62:CE:64:E8:DF:B7:23:BB:A1:25:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:5040::/48
Signature Algorithm: sha256WithRSAEncryption
1d:88:4c:76:d2:5c:f4:3e:b8:af:60:16:62:af:86:2d:d5:ea:
10:92:5b:3a:0a:8c:3f:f6:76:d0:fa:61:b2:bd:03:b1:15:da:
a3:e4:e6:fb:e1:3e:ce:f9:32:fe:f1:43:1c:62:9a:3d:3c:24:
83:bb:68:7a:f9:55:53:46:d8:37:64:5b:a5:ba:ad:6a:29:1c:
74:37:2b:ae:51:9e:b7:c8:03:5a:30:90:d8:3f:a2:c8:26:3e:
09:79:7e:c3:57:7b:ff:b0:5b:fa:52:0b:be:20:cd:fe:f4:ec:
c5:25:11:ec:80:0d:55:7a:40:5d:72:1d:16:9e:62:27:3a:36:
d6:21:f4:f1:6d:b3:eb:b4:6c:72:b5:10:49:de:4d:4d:96:1b:
a0:62:bd:48:2b:29:c4:fb:2f:f5:a7:c0:5a:44:c8:2f:63:38:
94:42:c6:cb:52:25:c5:fc:f4:7d:5b:6a:fe:92:dc:01:30:57:
70:a8:2b:bf:fd:14:05:14:a4:6c:5c:e9:fa:3c:38:1f:de:0d:
fe:10:a9:93:4f:7b:66:0b:f7:cd:55:a7:9f:b9:85:e7:78:a5:
a2:f2:71:be:ef:84:bc:12:78:91:1b:e7:15:02:9f:7d:89:41:
19:a5:5d:bd:00:6f:c3:32:ca:6c:9c:f0:70:86:82:fe:8e:29:
93:5f:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:54 2026 by rpki-client