Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier: SvofSaRcjcTpZoiMApSfNWWqPp8yja5VqUIjCK4neb0=
Subject key identifier: D4:08:0D:AD:6C:CF:3D:2E:E9:FF:11:8E:17:4A:7F:38:B2:68:CE:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20F810192A30D88D1B28CBD333A48A2B780A3A6E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time: Mon 04 May 2026 15:20:56 +0000
ROA not before: Mon 04 May 2026 15:20:56 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f8:10:19:2a:30:d8:8d:1b:28:cb:d3:33:a4:8a:2b:78:0a:3a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:20:56 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=170fa582cfc9f1b12506ac26a119278d5b830dc3075a42fb4c707fae11d844d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:47:7e:65:3f:2d:72:23:ff:e1:ec:70:2e:
9c:bc:7b:0f:b8:39:d5:3b:85:0d:de:cf:05:ef:ec:
25:45:e5:52:a0:54:d1:7e:46:ce:25:5c:4e:32:be:
06:8b:f0:0c:ff:ae:3f:a3:16:72:15:5c:d1:12:95:
b8:cc:94:d1:5d:29:89:80:32:c6:ea:b3:18:91:3c:
48:0b:e8:35:9d:ef:b7:c0:67:ad:1e:22:37:d5:da:
d7:71:36:52:27:5a:15:0f:ca:1d:f1:e0:0a:2b:f3:
fe:22:19:f0:81:01:86:15:53:8b:6e:e2:71:a2:02:
50:be:de:21:4a:9b:ac:aa:4d:eb:3e:97:9a:56:d3:
2a:03:66:10:23:e3:7a:d4:86:b1:5e:fd:b1:52:8e:
44:34:35:af:fb:7d:f1:99:6f:86:eb:0e:3a:08:a2:
14:e0:4e:e7:0a:60:3c:c6:9e:12:83:1d:aa:9d:e7:
d8:c7:3c:82:92:f5:23:64:7b:7f:35:7a:d1:b5:09:
eb:4a:35:84:51:4e:98:22:4e:fb:5c:c2:c0:2b:79:
f3:8b:f3:b6:00:f4:dd:ac:1d:f9:c8:6e:6e:c9:f7:
7f:12:63:be:27:34:3e:33:d9:fa:70:4f:46:5f:54:
a1:d4:80:0a:7e:25:69:68:47:04:3c:a3:14:a3:d3:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:0D:AD:6C:CF:3D:2E:E9:FF:11:8E:17:4A:7F:38:B2:68:CE:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
94:84:41:19:7c:2f:aa:df:a0:0c:5e:22:e1:fd:fc:db:0e:26:
7e:11:2a:71:6c:43:70:4e:55:53:2b:6d:9d:08:be:e3:94:9b:
0f:24:19:c3:1f:34:4b:b2:29:53:5c:2c:f8:67:48:a0:25:a3:
f6:77:89:48:90:df:37:fe:cc:1b:63:59:bd:a8:d6:c7:f0:ff:
34:7b:88:40:d2:fc:02:eb:14:0f:2c:bf:2a:dd:b8:8d:3e:95:
5b:60:ff:b3:8c:82:98:e0:d5:45:63:60:43:ac:ca:52:8a:1e:
1a:82:82:db:66:df:10:c4:82:7d:8f:90:92:0e:0a:fd:f0:c4:
e7:8f:8e:4c:07:18:51:49:3d:a8:73:63:e8:05:98:26:a6:22:
26:8e:2e:b9:5e:9b:19:45:b8:25:c7:b3:94:28:21:c8:77:fb:
f5:51:fe:45:ca:e4:01:77:f0:e6:f4:75:c6:ab:62:f0:bf:cd:
1c:b8:54:80:14:2a:d0:e4:7d:d4:db:60:e7:79:a3:9d:90:51:
d1:66:89:07:b5:45:3d:5a:97:ec:37:60:49:ea:50:6c:d1:98:
2a:33:af:5e:03:e3:37:b4:0a:f0:cd:54:f3:6b:49:42:0c:56:
16:b2:5a:7f:02:8f:53:f5:b1:50:6a:f3:37:f1:e7:cd:6d:37:
02:c5:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:08 2026 by rpki-client