Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
File: 275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa (raw, json)
Hash identifier: 3nOfiv8qzLQ2TGVStmN69Gqctjk0PWQcvzDbackYAeI=
Subject key identifier: 76:71:4B:33:1C:16:4D:B8:29:5C:76:24:A1:7A:7B:34:44:73:85:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 514C1633CB898F3F508C800C75494303B98F0BA0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
Signing time: Sat 02 May 2026 01:30:08 +0000
ROA not before: Sat 02 May 2026 01:30:08 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4c:16:33:cb:89:8f:3f:50:8c:80:0c:75:49:43:03:b9:8f:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:08 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=c9a726b7141e919044cf262087efc2ba8d4b1cd0630cebadca286594df941825, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:fe:f5:25:74:44:62:52:81:74:c3:f5:f1:
18:c1:74:38:06:2a:cd:61:4a:63:51:b5:74:ad:d4:
55:78:69:17:e1:8b:0f:e3:d2:91:4d:40:5c:cb:be:
02:72:46:bd:53:c0:08:fa:02:c7:00:98:01:e3:af:
ed:be:da:00:fb:09:aa:d6:b3:6e:54:c0:90:41:10:
c7:cb:76:c3:18:37:19:f2:5b:2a:35:ee:07:2d:b0:
2d:3b:2b:ab:8b:e9:7c:17:c5:90:e1:6a:fd:2a:1b:
cc:05:b6:0e:10:72:3e:8f:b4:b4:cb:0e:5c:73:67:
a1:b4:2a:82:ed:5f:b0:7f:b8:7f:5e:b7:42:d9:55:
1d:f3:95:dd:e4:23:11:a5:0a:18:44:51:ec:dc:c4:
ae:21:4b:aa:5f:3c:3d:7a:e3:19:07:07:51:e1:8d:
4a:c4:d5:56:cf:97:8e:22:d3:fe:ae:8e:d4:d0:23:
f6:0c:9c:a4:25:8f:ee:3d:a5:4b:de:c9:b9:ad:63:
60:a0:53:be:14:52:24:5e:ae:79:c0:b4:5b:91:97:
66:a2:24:96:99:98:df:16:e4:90:80:83:79:ab:65:
ae:33:b7:89:aa:c2:7d:42:3c:38:3e:b7:dd:40:bd:
40:67:8c:7c:25:0f:a4:41:b7:0a:93:df:4a:51:56:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:4B:33:1C:16:4D:B8:29:5C:76:24:A1:7A:7B:34:44:73:85:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4040::/48
Signature Algorithm: sha256WithRSAEncryption
b9:05:00:04:fe:4e:28:35:e2:33:8c:47:4d:c3:0f:af:30:36:
83:cc:58:dd:b4:e6:a7:28:b7:54:cd:84:b0:34:93:16:75:4b:
20:b3:88:6e:38:4c:0e:e8:21:d7:e4:b3:69:f7:34:14:d2:cc:
1e:de:f7:87:3e:65:a7:58:3c:ae:4e:a0:18:66:38:4e:9e:3a:
ef:0e:a6:e9:fc:78:85:a2:21:2d:b7:50:e1:06:7b:d4:6c:cb:
c5:3e:83:77:a2:33:48:3d:8c:39:7b:47:3c:5c:8e:31:55:1a:
5a:58:fb:5e:cb:92:e3:4f:ea:9e:59:6c:71:c2:3e:5f:8f:80:
2f:e5:26:a5:9b:24:77:13:34:9b:a7:61:1f:b6:40:6d:f8:9f:
48:5e:6f:eb:c4:a9:b2:46:dd:8b:42:53:32:bd:32:8d:8d:72:
50:37:3b:f4:51:38:48:c1:c6:c5:46:9c:32:bd:10:9f:aa:68:
d1:17:43:77:c7:8a:d1:e2:f6:6b:75:c7:73:dc:85:54:88:2a:
88:41:f1:df:34:18:bb:e0:7f:8f:56:b7:31:1f:5a:63:27:21:
ef:e8:3b:40:e9:d2:75:9a:c3:ec:45:9e:7a:ee:70:1e:51:f8:
27:67:35:f0:e8:72:94:9c:4d:d6:9d:c2:dd:c1:ca:40:0f:13:
48:d0:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:25:36 2026 by rpki-client