Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa
File: 4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa (raw, json)
Hash identifier: rWBxvfJQqWfhGiIekz3rp6ssPqn1m5j9gzO9C9BSgkE=
Subject key identifier: DA:CF:7B:B9:59:85:37:C0:4A:CB:A6:99:B8:59:09:A9:C9:2D:54:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CDD95A0BC60CC2EA037336E884E1030988DD83A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa
Signing time: Sat 02 May 2026 01:30:09 +0000
ROA not before: Sat 02 May 2026 01:30:09 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dd:95:a0:bc:60:cc:2e:a0:37:33:6e:88:4e:10:30:98:8d:d8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:09 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=012dcf93596555aeb97f908a38fba1831430a3e3937f1d11020ff43de90256da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:ec:29:30:15:b8:59:be:98:26:4d:32:83:
02:af:e8:29:09:71:f0:b0:be:13:40:4a:b3:7c:8d:
2d:83:35:ac:81:b1:62:71:4e:de:ce:de:05:b8:fa:
62:7c:f3:7a:3c:3b:56:f1:b5:fa:0e:a8:ee:80:ed:
b3:d9:03:df:3b:ad:38:2e:2f:4f:0f:eb:dd:bf:e6:
61:b6:b2:29:53:0c:40:17:87:56:f0:9c:8c:25:70:
87:60:3b:5f:ef:34:9b:14:18:fd:34:15:be:0f:5e:
19:57:f9:94:08:91:ca:a9:fb:91:0d:1b:c6:8c:49:
40:1d:38:6e:a9:0f:03:01:ca:71:69:13:d9:d5:f7:
46:87:49:a5:bd:52:1d:81:fe:65:37:b5:f4:9c:65:
4c:58:c2:e7:e5:03:9e:bd:29:e9:8c:78:fc:06:4f:
c1:9b:b3:1c:91:c6:7a:33:12:30:93:f0:09:6e:e6:
6a:f8:41:52:a6:f4:4a:7e:2c:dd:80:86:fc:e5:81:
91:0f:ea:9a:2a:37:23:fb:d1:33:a4:ce:b7:b7:68:
fe:06:c0:4c:31:18:8e:f5:4e:35:c8:94:6d:5d:d0:
b1:63:ec:8d:6d:57:78:b4:e2:d4:ca:85:c0:96:fc:
d2:b7:e2:89:6d:3e:ff:bc:1c:ec:73:71:0e:3b:7a:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:7B:B9:59:85:37:C0:4A:CB:A6:99:B8:59:09:A9:C9:2D:54:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:2e:a4:8b:8a:ae:d3:44:6a:55:d6:ce:ce:70:11:cb:dc:a3:
c4:a6:9c:d2:02:0d:2c:77:ed:33:32:3a:c2:61:b9:e4:94:06:
c6:e6:fa:18:18:39:93:a1:53:d3:84:7b:6e:e5:fa:8e:46:8f:
f1:8e:ce:68:82:55:a0:dd:d1:d4:96:ad:e4:20:9a:e1:e3:ea:
41:04:f4:e0:4f:19:66:ea:9a:8d:42:8c:88:a6:3b:70:09:d1:
97:73:ca:9f:b4:87:33:67:ca:fd:81:5c:5a:ff:40:b5:f7:a5:
a4:4d:45:2f:f9:87:5d:ea:29:2d:6e:81:d7:4c:4b:41:fe:38:
86:2c:ef:7c:8a:af:1b:db:a3:fc:df:4d:d1:3c:fb:2c:fd:c5:
bd:86:4c:ef:c3:89:f7:0b:cf:b3:e8:f2:c6:94:aa:de:6c:d6:
23:0c:ef:00:15:26:1a:27:7d:bf:f1:aa:8b:ed:f3:d9:fa:a4:
08:19:c7:f3:6f:ad:e5:6f:8d:73:1c:d9:69:e7:bb:68:cb:14:
c7:ce:e8:4e:44:92:80:5c:a5:4c:fa:37:d2:51:84:b5:05:0f:
7e:53:9f:80:29:da:81:7c:cd:8c:24:b4:5a:2d:3c:49:46:89:
8b:74:8d:3c:cc:26:75:b7:37:ed:a3:2c:39:b3:d2:b8:8c:c5:
c0:62:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:33:14 2026 by rpki-client