Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
File: 5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa (raw, json)
Hash identifier: mBoeGmjLbyjUp9OGeut0JyfBRg6eMO0FqThcJVRN1Fs=
Subject key identifier: CB:31:F9:AE:F8:3C:39:2C:8A:FF:1B:38:B9:F4:D3:21:DB:EE:3D:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51D02B80AD16B78248A9C3768A51C1355E47A12A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
Signing time: Sat 02 May 2026 01:20:05 +0000
ROA not before: Sat 02 May 2026 01:20:05 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d0:2b:80:ad:16:b7:82:48:a9:c3:76:8a:51:c1:35:5e:47:a1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:05 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=7d36c23942334b2684e0b98e90dff9531b78eb4777295feb44249b0d0b30cfe5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:69:1e:50:ba:77:b5:5c:fc:a3:29:2b:ce:
bf:42:bc:b9:8e:29:70:8a:8c:e2:ec:89:d7:38:21:
9f:37:ff:90:32:98:70:ef:e8:e4:a5:ba:ff:f0:41:
58:70:3c:61:18:e4:02:7a:74:f1:87:a2:8f:8a:02:
7e:1a:02:09:74:46:1e:b6:3e:c8:9a:a7:df:27:a5:
8b:b5:eb:52:0b:1b:71:85:8f:d7:cb:9c:f1:31:62:
a6:51:84:81:de:0c:04:12:b8:22:e2:aa:da:8b:b0:
69:8f:7a:c1:b6:a4:86:23:36:9f:1e:bb:be:2f:43:
3e:eb:ad:fc:3e:e1:43:6f:02:50:92:2a:e0:4f:ab:
50:f9:bf:98:c8:b7:f3:d9:fd:e6:24:71:9d:1a:42:
ba:e3:48:2c:f3:5d:45:a3:09:5f:d6:dc:f7:cf:89:
de:30:4e:95:dd:b4:77:4a:71:05:09:ea:48:21:43:
2d:b5:96:35:6d:5d:e1:4f:01:e5:f8:ac:47:18:ad:
94:4f:cb:68:da:66:a8:78:b1:99:a7:bb:91:a3:e7:
c4:bb:7c:86:7e:5a:21:cb:af:48:2c:bd:9c:9d:69:
43:ea:a1:e2:1a:af:49:80:df:7f:60:86:35:fe:d7:
ec:dd:97:30:44:c7:fa:91:c4:91:59:04:60:fc:ce:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:F9:AE:F8:3C:39:2C:8A:FF:1B:38:B9:F4:D3:21:DB:EE:3D:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:19:bc:eb:9b:43:10:34:0d:3e:bb:36:6a:11:b1:25:89:6f:
0b:a3:0b:48:cc:c1:a4:0f:e6:ba:4f:77:99:c5:99:ef:8d:d5:
46:be:45:22:10:2b:fe:cd:f3:b7:40:c1:41:e1:a7:36:2c:1a:
54:fc:44:9a:2e:48:fb:42:b2:08:23:ee:fa:9a:36:d7:4e:f9:
d2:04:51:8c:a9:e1:6e:20:5a:e5:01:95:c3:59:05:11:f7:5c:
5c:5d:5a:fe:35:8d:7d:8a:bb:17:bd:a1:9b:2d:a7:6f:39:86:
a3:5d:cf:97:e4:44:dd:fb:7a:96:05:78:74:d6:60:f9:4c:99:
e6:71:9a:56:e5:26:19:39:fc:a8:f3:5b:e3:07:42:84:3e:3c:
24:40:37:0a:53:a3:a0:51:21:27:8a:84:a3:1f:66:a6:7e:d4:
d4:9b:45:6d:02:89:2d:99:c9:a3:48:67:23:ae:d7:1d:2c:0a:
5a:20:e4:53:92:55:0f:c3:2b:1a:61:17:e5:33:4f:c0:f8:b7:
16:27:5b:e3:91:7b:67:7a:38:5d:4c:fd:33:7d:4b:01:ed:5a:
a6:ee:f3:a0:55:b5:69:34:28:b5:a0:7e:80:6f:24:16:6c:a4:
c5:ec:60:a2:b4:18:0d:c2:96:06:d5:28:4d:cb:7c:eb:f4:54:
20:57:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:14:01 2026 by rpki-client