Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
File: 119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json)
Hash identifier: uSGzQPHAsUz0Rui7X3M9STTvFUyLojWbkqsXx42on30=
Subject key identifier: 45:FE:0A:12:0D:14:DA:60:8A:EE:6D:39:C3:4F:02:B8:E9:87:40:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49EBE99DB1D664EE66B5030728403D09DAF0FD4B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
Signing time: Mon 04 May 2026 15:20:44 +0000
ROA not before: Mon 04 May 2026 15:20:44 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:eb:e9:9d:b1:d6:64:ee:66:b5:03:07:28:40:3d:09:da:f0:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:20:44 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=e41e3cd9e74b7f27826b52c15095142ccf4ab34460bd9671dc98b6e20f5304b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:49:44:02:c1:f2:80:18:e6:f6:37:8d:c5:
88:ef:7b:64:c1:97:67:1a:66:fa:92:e5:62:aa:5e:
4d:e8:f6:31:c0:a1:9b:b4:7c:bc:c4:54:1a:44:38:
d1:f0:ed:d5:8e:20:18:0e:f9:83:b5:9e:36:8b:78:
77:d3:61:ea:6f:fa:cf:e2:1f:8a:e3:f6:6e:c9:52:
73:90:2b:d1:51:ac:12:cd:e0:a5:20:8f:9e:ec:9c:
ad:85:d6:7b:f0:a5:01:1c:5a:54:4e:13:fb:88:ba:
b5:7c:3b:79:35:01:37:cf:61:10:7d:3d:d1:ba:fe:
c6:98:ee:a7:83:25:19:67:22:90:c7:ad:db:3f:d9:
9c:31:4f:ab:16:03:29:fa:e6:ef:48:2b:5e:57:24:
f3:a5:22:d6:e9:cd:38:a1:16:18:9a:1b:e5:5c:87:
12:13:df:8c:53:6a:7e:a9:b4:9f:f3:97:ed:c9:a3:
b8:24:89:64:6d:0b:c2:22:83:f2:80:c8:cd:00:c3:
6d:8c:d7:37:61:67:c4:27:c9:54:4b:93:30:ce:c3:
2d:7e:07:9b:65:d5:85:72:25:86:b1:3e:bc:7a:10:
43:8a:03:85:c4:c5:90:e2:b0:01:88:d0:27:2b:e2:
65:fa:a7:8d:0a:e3:04:3b:41:d7:d6:a1:9b:11:54:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FE:0A:12:0D:14:DA:60:8A:EE:6D:39:C3:4F:02:B8:E9:87:40:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4000::/40
Signature Algorithm: sha256WithRSAEncryption
48:41:c1:a5:58:35:b7:a5:cc:53:26:a9:1b:fa:96:f2:d6:b1:
fd:5c:fd:47:d0:e6:63:87:0a:35:0d:61:73:70:38:3c:b4:90:
ae:18:e5:76:05:39:62:b0:db:7b:ce:e3:19:99:54:ea:f2:ec:
a3:3c:96:36:2a:a0:c9:7a:44:e1:89:2a:7c:1f:b0:d3:d0:a1:
fe:84:40:8e:a7:14:5b:f7:56:8f:0d:b2:2c:29:07:e7:b9:d6:
de:93:33:57:d7:f5:34:40:9a:53:6d:ce:77:1f:f5:5a:bd:d4:
52:77:29:65:d5:5c:50:00:bf:fe:b0:57:9c:bd:cf:bf:24:ce:
2b:4a:a9:a9:6d:90:bc:15:fd:be:27:d3:56:37:9e:43:80:7b:
3a:19:49:4f:c8:51:42:6d:15:98:ea:db:20:be:05:57:c6:28:
ea:a8:a4:e0:9e:26:c7:41:2b:fd:03:84:6e:ac:76:77:02:ef:
11:2d:2f:1c:c4:0f:79:14:8f:d0:a4:87:59:a2:a6:a6:df:10:
e5:f1:1b:c3:8f:40:8d:19:a3:2e:a6:9e:0c:d7:bf:5a:df:b0:
24:c7:86:ad:18:be:42:2a:71:02:b4:ad:b5:c4:69:8d:a3:6d:
f7:4f:2b:81:0a:e4:a5:03:66:c1:06:04:9b:7c:35:3e:cb:ef:
7c:7a:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:14:21 2026 by rpki-client