Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
File: 4581b00e-602d-4a4b-b191-1af16885c541.roa (raw, json)
Hash identifier: iJEFxwOpIjqYj5cqh+AqLeKSwnXkGffWkV1TiV2hVDY=
Subject key identifier: 40:50:FE:CA:C0:75:6A:DF:0F:1B:05:5C:ED:FD:93:0D:E7:27:7A:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DA525ECEA4CAECE4C4EC36ACF320C2DB54B51EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
Signing time: Mon 04 May 2026 15:20:47 +0000
ROA not before: Mon 04 May 2026 15:20:47 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a5:25:ec:ea:4c:ae:ce:4c:4e:c3:6a:cf:32:0c:2d:b5:4b:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:20:47 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=6e77c06571713a0f8568cf771a347b63ea9ecc6d586f2c7300c1f661ec11e0c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:83:15:18:23:78:2b:94:49:93:50:0c:3a:
29:1a:35:dc:1f:bc:c1:f6:32:f9:8e:6b:33:80:7a:
10:4e:4c:ba:1f:52:6a:38:b9:f1:61:98:51:70:da:
10:b8:fc:30:e6:54:3e:53:17:7f:dc:d6:46:cf:14:
16:33:38:63:d6:3a:8c:4d:97:77:9f:59:0f:a6:53:
73:00:53:ce:e9:d4:70:00:36:5b:1b:2c:81:be:95:
92:40:9c:a5:9a:24:0c:fe:35:8d:8c:27:47:7d:52:
8b:f2:5f:3f:47:c1:c4:ca:38:0f:a6:dd:20:09:90:
68:1d:89:e4:f6:8a:d6:f3:00:84:86:91:e0:21:77:
5d:76:25:b2:f9:bb:ca:10:1f:05:35:21:5a:dc:6c:
3e:6d:61:50:cd:e7:d6:61:56:c0:e0:11:c8:cb:87:
8e:b8:d3:33:ba:2e:9e:76:dc:7c:60:bf:a0:36:3d:
1c:f3:c2:3a:c1:a2:d8:c9:58:63:a8:96:de:a9:54:
b2:21:6c:3a:1f:48:82:8a:06:8d:46:06:12:d7:82:
cb:8d:08:9b:ac:32:ca:2d:82:7e:57:2b:0f:3c:41:
17:4e:18:cc:57:77:07:8f:ae:1a:39:97:f4:b8:f7:
0d:c7:da:73:87:02:1a:ef:56:76:1a:10:8d:db:15:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:FE:CA:C0:75:6A:DF:0F:1B:05:5C:ED:FD:93:0D:E7:27:7A:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5000::/40
Signature Algorithm: sha256WithRSAEncryption
68:35:ee:64:dd:8f:2f:3b:7d:74:f1:19:ee:21:e7:b3:37:a0:
14:98:a6:1f:f2:71:0a:ef:4d:9f:26:86:40:3b:19:c6:dc:40:
17:fe:78:ed:46:0d:31:0c:34:41:44:85:b2:e6:e3:b5:a3:59:
3f:24:3e:c6:eb:fd:bf:46:94:70:03:fb:91:d5:ae:60:ec:6f:
04:2a:42:52:24:70:78:4b:1c:0e:24:86:ea:f9:f7:86:c2:ec:
dc:c4:b8:41:fb:11:72:28:27:b8:76:c7:bf:57:2f:c3:6e:8f:
73:6f:a2:e2:6b:64:57:06:18:49:3a:8b:87:a2:d7:f3:a3:a4:
fb:35:54:ab:87:84:44:84:3f:29:d0:86:82:ea:6e:f9:38:49:
48:06:4d:cd:17:e0:38:fe:70:e4:ed:c4:7d:e0:9a:9b:3d:0f:
1f:09:f6:8e:c1:87:66:0c:3f:2a:55:96:78:17:d5:9a:d5:43:
2a:83:d7:97:5b:ad:34:2d:f6:ea:4a:d8:77:88:e8:e1:38:e9:
c5:68:f6:9e:cc:7e:0b:78:5b:9c:4d:2e:84:7b:cf:e1:52:04:
df:e5:86:3b:a1:57:85:0e:75:1f:90:15:a4:e7:3f:b7:d5:73:
2e:64:28:02:a3:04:8d:24:b2:3a:8b:1e:5d:fe:a7:49:7d:e9:
49:18:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:58 2026 by rpki-client