Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26edcf2c-2157-4412-a725-5f726d1db93b.roa
File: 26edcf2c-2157-4412-a725-5f726d1db93b.roa (raw, json)
Hash identifier: wruzwJtZKcT1YLogZTFOUCBLVKNXYqNqoC6b/X+bKkY=
Subject key identifier: F7:A8:FB:25:A0:5B:BC:74:B1:F6:59:9A:B9:38:1B:A4:87:1C:B0:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11E0164E42ABF18E5A5A4F3D117A05322582E0B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26edcf2c-2157-4412-a725-5f726d1db93b.roa
Signing time: Sat 02 May 2026 01:20:06 +0000
ROA not before: Sat 02 May 2026 01:20:06 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e0:16:4e:42:ab:f1:8e:5a:5a:4f:3d:11:7a:05:32:25:82:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:06 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=1971c5683e333a887c81d9834e2aa7ab190533e486481e00224d44b572cfda6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:9e:a1:9e:5d:53:27:55:af:6a:c3:2d:2d:
4b:82:32:c1:19:7b:d9:23:4a:0f:41:13:cf:62:22:
a6:6b:13:c1:d1:ff:54:43:c0:d7:ef:62:7b:8c:53:
24:80:90:d8:c0:62:8c:7d:09:92:75:42:9b:e5:30:
7a:54:7c:b6:5a:04:64:04:be:b8:46:22:96:79:e3:
02:99:c2:c8:50:74:bc:6f:a5:93:1b:6e:4a:fc:85:
c5:0b:65:4e:eb:d1:9a:b8:27:c0:94:3b:e9:fb:2f:
28:e0:a4:52:d7:ca:63:c4:2e:ff:f6:9a:b7:44:34:
c4:e7:e2:8e:43:f8:f9:ce:be:b1:8b:6e:b6:d1:b3:
7c:3f:f5:30:97:6a:a3:a4:a2:74:dd:65:e8:32:9c:
61:20:2b:e7:bf:a5:73:bb:30:eb:70:51:83:5b:28:
d0:3f:5b:d8:76:8e:4b:01:de:21:4d:0a:73:bf:f3:
1c:f1:5f:d1:17:51:4b:dd:0b:2f:eb:d5:4f:de:cb:
af:88:28:59:89:36:1b:30:08:93:dd:fa:50:dd:9a:
55:cf:02:25:4b:3b:2a:23:ff:e8:07:9a:4c:0a:f7:
f7:f4:66:ba:da:1e:ce:64:70:64:d7:fc:11:6a:20:
d8:4e:fd:2a:4f:46:7d:e0:54:b2:14:e5:3d:1e:a3:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:FB:25:A0:5B:BC:74:B1:F6:59:9A:B9:38:1B:A4:87:1C:B0:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26edcf2c-2157-4412-a725-5f726d1db93b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:a2:29:6d:7f:4b:1c:1c:03:bc:a3:34:2c:bd:ec:b0:6a:21:
7e:12:54:c0:ac:c4:56:e6:9e:01:18:68:aa:20:88:b1:21:aa:
d6:e2:13:7d:55:66:3b:5f:41:5a:eb:23:d8:a4:64:af:14:63:
58:f8:09:81:12:90:00:94:f5:67:34:76:fe:e6:44:0e:97:ae:
bb:ad:16:18:4a:05:e3:5b:d4:98:71:e5:a3:87:58:50:eb:8d:
8e:76:b9:2a:9a:b4:42:39:b1:5c:ac:9f:f9:7c:c1:51:c9:c9:
1f:cc:f5:fe:a7:7b:21:2c:e9:c2:1b:1d:6c:2b:0a:d9:db:c8:
58:0a:be:98:12:74:bf:61:d4:c4:d1:e6:13:55:32:04:ea:1a:
fc:69:4f:ef:48:16:c1:6b:57:a1:a7:fb:27:f0:f1:7e:de:4b:
5d:25:d9:9a:74:4a:19:20:40:c3:ed:34:8d:b7:21:5b:dc:64:
4b:d9:01:ee:b4:ca:1b:41:12:97:c6:51:7e:7c:a7:23:fb:aa:
55:f9:03:e1:9b:a7:dc:21:8f:9c:fc:c1:16:0a:d2:d6:03:65:
a1:32:93:bf:5a:fa:dd:6b:47:c9:37:40:32:5a:05:96:ed:ec:
7d:3c:4d:c8:c6:ff:9a:27:c9:34:a4:a8:d5:22:eb:c4:bc:4b:
2e:40:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:33:14 2026 by rpki-client