Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcde19c-85ea-4e4c-b31b-859be4055425.roa
File: 7dcde19c-85ea-4e4c-b31b-859be4055425.roa (raw, json)
Hash identifier: hGUuFNIm2WjQ3gk1Q9VVSsKJhcU20fhF5RIxYsrkGbk=
Subject key identifier: 2F:38:12:C0:4E:9A:10:C9:88:AD:FD:36:F8:FB:B6:E3:A5:76:67:37
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54622ABAEBF5759B5A0853C190E736CF01595762
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcde19c-85ea-4e4c-b31b-859be4055425.roa
Signing time: Sat 02 May 2026 01:30:24 +0000
ROA not before: Sat 02 May 2026 01:30:24 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:8800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:62:2a:ba:eb:f5:75:9b:5a:08:53:c1:90:e7:36:cf:01:59:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:24 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=8fccd843d83ba7dfed91696eb254bae2539d3a2c95e1826b7ac0079ff3ba903b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:b4:f5:96:0a:f1:85:c4:9f:20:33:ac:1c:
15:c0:99:e3:15:39:22:bd:cd:e3:0a:c3:3d:15:e4:
a2:a2:3a:52:12:14:ee:b2:66:13:09:58:c6:38:8e:
0d:ea:26:fd:e5:4d:73:13:98:6d:db:14:5b:51:74:
99:ab:6a:a2:4a:be:8e:8b:40:5d:05:ff:9f:26:d1:
47:b2:fc:86:af:bc:58:e1:df:c4:96:1d:dc:63:fc:
fb:b2:9e:e6:73:0c:27:88:f2:6c:79:ee:db:1a:b6:
79:a2:7f:5c:d4:0d:c8:86:4d:e1:d0:fa:f6:76:be:
dc:4f:e9:97:8f:f8:65:18:76:f9:1e:13:8c:b7:52:
7a:72:20:af:a4:ec:8f:07:a7:bd:59:3e:e4:80:6c:
34:76:86:a6:76:71:56:01:47:d9:c6:28:62:fd:2d:
74:63:cc:1d:4c:ef:54:5a:44:c7:c3:66:9a:1d:9c:
f0:a0:cf:32:05:54:b7:e0:95:23:15:8e:53:10:65:
83:c2:5d:81:10:66:ff:3c:83:c1:83:d6:ac:95:fd:
68:37:6d:6c:dd:9b:58:65:74:69:df:ac:7f:79:37:
07:19:a9:87:ed:43:90:fa:f7:7c:22:04:a3:ba:bd:
c7:41:92:cd:71:19:71:5a:92:89:98:d4:42:e6:37:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:12:C0:4E:9A:10:C9:88:AD:FD:36:F8:FB:B6:E3:A5:76:67:37
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcde19c-85ea-4e4c-b31b-859be4055425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:8800::/48
Signature Algorithm: sha256WithRSAEncryption
40:4b:af:7a:0d:4e:95:21:9a:1c:40:0e:8f:d5:2d:6f:c0:ed:
6d:8f:b7:4a:0f:f6:ac:34:94:3c:5f:1a:a3:a5:ca:44:e6:2d:
1e:91:4a:54:d3:07:c3:4b:51:5f:b6:bb:4d:03:30:e5:72:81:
b3:af:d0:4e:06:13:38:f1:d3:5d:72:3c:3f:61:3d:4b:4d:57:
06:5d:bd:92:67:60:dd:5b:9f:05:b2:6e:bd:9f:5c:7d:a0:04:
d9:53:b6:64:1b:e1:cd:1a:89:3d:10:93:3e:b2:09:d4:b4:7e:
28:57:a2:ad:9c:31:ed:71:c5:e0:03:2d:26:b9:03:c3:cd:de:
90:42:40:0e:7e:55:7c:ae:cc:9c:23:89:b4:d6:72:6a:ac:de:
cd:f0:ab:31:81:4f:98:0b:39:a1:26:6d:da:d6:4f:de:af:c9:
75:98:e7:46:c8:ba:e6:e4:41:60:18:fe:70:b3:64:b2:fa:09:
53:b3:94:cb:fa:66:3f:ae:9b:e6:98:83:26:69:54:18:b3:08:
e3:64:21:c7:03:a8:c0:85:ae:c6:39:36:14:5c:fe:7b:77:01:
41:d7:eb:e3:7a:20:68:48:e0:d2:95:ac:7b:55:29:0b:bc:f7:
e9:8e:49:df:68:6d:ab:c4:1f:63:4b:36:80:0f:3d:ea:9c:a9:
d9:49:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:13:03 2026 by rpki-client