Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa
File: 5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa (raw, json)
Hash identifier: tUzAcimb8sxkrmlE0KxuUubROmXiRQkI/1PGXWvbTlo=
Subject key identifier: 52:EC:57:1C:9D:24:79:DE:B2:61:0B:DB:01:6F:D3:E8:27:45:2C:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F53218A1B3DE0C6FBE55BE67E30611551F78245
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa
Signing time: Mon 22 Jun 2026 02:40:26 +0000
ROA not before: Mon 22 Jun 2026 02:40:26 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:53:21:8a:1b:3d:e0:c6:fb:e5:5b:e6:7e:30:61:15:51:f7:82:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:26 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=ff8536b5e82ac5eacda6e70a1a8058500df4b464cb1d6e890072e1060da837e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:7a:96:af:54:c2:70:1c:58:18:1e:10:b4:
1b:40:89:56:0d:58:7d:96:15:c7:2d:3c:68:9d:9b:
c1:cd:f6:cc:94:77:79:fb:a8:fc:8f:d7:b0:6b:08:
2c:71:f3:a5:0c:b5:26:57:a8:1f:41:d8:73:82:19:
8e:a3:6b:2a:4f:e6:10:73:57:67:84:26:76:8b:03:
e5:a4:45:35:7f:d9:d1:06:a6:7a:5d:ac:63:67:a6:
43:f4:2d:76:0b:ba:1a:94:7e:77:49:a8:69:bd:79:
19:39:fe:9b:4c:84:57:3d:ab:c8:9b:2c:9d:75:01:
a5:c2:9f:8f:f0:3e:20:65:a9:be:dd:03:a8:b3:33:
64:d2:7b:47:b7:49:39:4d:c5:75:46:4a:9d:9e:de:
fd:5d:d6:a8:b7:28:a9:fe:7d:10:57:fc:86:b6:4a:
da:a2:e0:7c:56:e2:23:f1:e9:a0:6c:b3:2e:24:a2:
67:7c:6a:5b:5b:bc:db:4e:b1:96:52:5d:1b:14:fe:
fd:54:0e:dc:70:8b:06:2d:2b:5b:88:df:e6:27:9b:
54:41:34:f8:ee:ac:8e:82:92:11:4e:c8:20:ca:2b:
44:18:08:83:51:48:20:a6:fe:c8:d1:b3:d1:00:f5:
ec:cf:15:88:5a:e3:08:e4:b0:90:b0:48:f6:5b:6b:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:57:1C:9D:24:79:DE:B2:61:0B:DB:01:6F:D3:E8:27:45:2C:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:e080::/48
Signature Algorithm: sha256WithRSAEncryption
6b:07:26:23:ea:e6:1b:2c:c5:f8:4f:d2:cb:ae:2e:09:d9:50:
03:e7:a1:90:2e:09:e0:94:12:a3:f6:ad:05:65:22:95:d0:3a:
a8:26:3c:f7:51:35:78:ad:a0:e6:d7:ff:31:69:cb:be:49:2c:
b0:f3:c3:6e:80:8a:01:05:8e:cf:02:f6:0d:b2:06:1f:97:2b:
c9:c8:37:fc:da:ac:fd:ec:eb:31:13:e7:7c:cd:76:f9:f9:4f:
15:73:b7:29:56:3e:a0:47:86:02:4d:dd:af:46:a2:e9:23:9c:
cb:3c:84:c8:bf:c7:45:ad:34:b4:42:9b:73:66:9a:26:17:d2:
93:f1:7f:72:e6:03:e0:23:d5:dc:83:44:82:87:ed:6c:99:c9:
fa:e2:b7:6d:3e:a7:ba:98:cc:89:15:2b:c9:3a:86:e2:82:1a:
28:ca:ed:6c:60:ee:0d:3c:a8:10:a3:01:7a:aa:fd:41:ae:e9:
67:3d:78:8b:dd:99:4b:4b:23:26:21:29:49:b2:f8:ac:da:67:
df:e7:fd:fc:4d:78:53:e5:ca:ca:a0:46:d8:82:b2:b7:6b:bc:
f8:1e:9d:b5:77:26:20:f8:45:02:f9:d7:16:b8:59:a5:3d:69:
a5:66:a9:ef:42:d8:0c:6d:a1:e1:39:e8:5c:06:80:d5:2f:4f:
18:9f:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:34:19 2026 by rpki-client