Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
File: 1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa (raw, json)
Hash identifier: Om6Vtztmi5Ycsedp2wdQX0ZvG8OQ1kwLO3bR848Gmq0=
Subject key identifier: 66:F2:16:32:21:6E:FF:60:FD:15:B8:4D:A3:5A:A8:A2:EC:C6:10:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03BDB868BFBA2A5265C596B797BD9467355BA93B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
Signing time: Mon 11 May 2026 01:40:07 +0000
ROA not before: Mon 11 May 2026 01:40:07 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bd:b8:68:bf:ba:2a:52:65:c5:96:b7:97:bd:94:67:35:5b:a9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:40:07 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=a09e7215b89e0c8696fc6428fea4f11d8cf92c451573e3f1a4993e6140a3ff67, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:95:b6:a7:85:55:73:8d:e3:76:ca:e9:2d:
ed:02:c9:48:f4:12:8b:1d:9d:ff:a2:b9:21:86:18:
83:6c:86:7e:19:9e:f8:d1:e2:29:ef:98:04:3b:8d:
b3:0e:43:e3:fa:07:7c:67:3b:6a:71:2e:66:bf:1e:
58:c7:2e:a6:15:a1:cc:52:99:5d:70:94:e1:c9:f9:
ca:93:fd:37:da:26:80:1b:1d:89:88:64:e7:a3:98:
24:e3:5b:70:64:2b:8f:9c:1a:9f:90:ec:29:74:cd:
e1:d5:25:6e:e0:b3:09:a2:3b:67:ee:0e:ee:3b:97:
8a:f6:ad:f4:0e:4b:97:48:f5:01:88:cd:3e:48:91:
c0:e5:96:6c:14:fd:7e:2f:2f:32:24:1a:62:0a:33:
04:02:53:49:ce:c0:ba:8e:0c:89:7a:2a:82:df:0d:
7e:1d:a1:b1:64:ff:a7:97:bf:5a:da:32:2d:3f:df:
86:a1:cf:70:2b:8f:7d:9b:ed:b2:9e:55:c2:08:07:
2d:74:4c:46:d3:31:10:88:20:1c:64:13:a6:be:01:
f1:b2:67:78:fe:b6:d5:66:51:50:e0:57:e2:9a:47:
8d:59:bc:de:35:01:5e:21:8f:b7:1d:82:79:39:fd:
c7:58:b4:4d:01:3b:65:c7:ae:1f:9d:3d:41:45:56:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:16:32:21:6E:FF:60:FD:15:B8:4D:A3:5A:A8:A2:EC:C6:10:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:81:24:91:1e:0a:59:09:b8:29:68:97:c1:6f:8e:a9:c7:0d:
05:60:9c:50:de:69:bc:64:3c:92:5e:2c:ce:ef:65:70:d7:76:
e8:6b:32:82:ec:b0:e3:8e:44:62:0a:9c:eb:e6:c3:de:52:7b:
ae:bc:21:a8:aa:63:76:08:05:bc:cb:16:d9:c0:bc:fb:0b:18:
ca:6b:df:b7:e2:cb:62:95:cf:1b:ac:bc:b9:89:9b:8b:51:32:
cb:c7:e6:46:9b:f1:7a:f5:60:10:f1:01:5f:e4:ed:21:25:32:
65:04:df:60:e3:21:c1:66:3d:dc:dc:e5:3c:18:41:03:4f:7c:
93:92:d0:5b:56:dc:f4:2c:d5:0f:3c:71:b0:c1:35:12:2e:5f:
b4:23:90:41:38:39:67:e8:62:fd:40:52:f9:4e:8a:8d:10:0e:
75:d3:50:5b:ce:45:86:d4:bd:46:70:9d:82:6b:96:d7:80:7d:
7a:c0:37:33:ac:6f:70:01:d1:71:e7:24:d2:17:75:11:92:73:
24:c8:75:12:4d:56:cb:09:0c:2b:20:92:c9:bb:df:3a:3e:fc:
8f:72:01:ec:da:38:77:e1:e5:42:1b:46:80:c4:a1:2d:74:5e:
41:af:0b:01:9a:1a:9f:73:c4:8e:9d:e9:ad:6b:88:b1:8a:25:
15:ca:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:16:05 2026 by rpki-client