Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
File: 8bc6184b-4b16-4844-96e2-71541ff10974.roa (raw, json)
Hash identifier: pEZBxH1Img/VOODv2Weem2s9Y8+CIW3xQOkZw3e9W+E=
Subject key identifier: E3:B2:CA:EE:C7:B3:74:A1:28:D1:08:C9:AF:F1:BF:44:07:34:9E:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 58F5251FFED1445D8DE72CA8EA39E0CE218E7F28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
Signing time: Fri 08 May 2026 03:21:10 +0000
ROA not before: Fri 08 May 2026 03:21:10 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f5:25:1f:fe:d1:44:5d:8d:e7:2c:a8:ea:39:e0:ce:21:8e:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:21:10 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=12814231947ceb5031020aa06ad4765336fdb36bb9065381c03d1ead89f59e49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:f1:19:e6:2e:57:e3:e6:82:8c:97:6d:b0:
c5:30:a5:2a:49:d9:87:43:a9:7b:9f:bf:77:f5:d7:
d9:2f:61:a3:76:dd:a2:90:dd:40:b7:76:14:b0:6f:
0f:e9:d6:e4:c1:c0:0e:43:70:58:83:34:bf:4b:ed:
84:93:fd:af:e4:ef:41:86:02:a7:1f:35:d7:50:6b:
bf:b3:aa:78:26:1a:11:be:f7:6b:b5:96:2a:d3:39:
cb:5c:7d:ba:1e:eb:7d:d9:88:6c:e1:9b:33:02:dc:
f8:1a:2a:9a:6f:39:00:51:49:09:66:ae:d2:b0:3d:
1d:fe:c0:cb:f1:5e:f8:44:8e:df:cc:40:14:00:b8:
82:55:2d:73:b8:e6:c1:67:d6:28:0d:73:28:23:0f:
cd:94:b2:d0:dd:0a:9b:e9:ca:45:e0:92:c1:93:56:
bc:64:b5:ac:22:e5:d2:ad:f8:d4:b8:27:0e:b2:0b:
5a:cf:e5:2c:9f:0a:f9:9c:81:bd:03:d7:ce:08:51:
34:c9:bf:96:dc:5d:a3:82:88:2a:c2:81:12:33:99:
d1:35:c2:0b:75:83:82:c8:88:67:ae:ec:2a:db:e9:
0b:e9:e6:d2:1d:42:db:1e:32:b6:ac:ca:df:84:eb:
49:0b:4d:b0:03:a3:15:a1:c1:0b:01:3f:66:40:86:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:CA:EE:C7:B3:74:A1:28:D1:08:C9:AF:F1:BF:44:07:34:9E:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c000::/40
Signature Algorithm: sha256WithRSAEncryption
b6:9d:e8:6b:83:8e:58:a2:24:65:69:fc:12:25:89:b9:a6:c2:
f1:88:ba:4f:2d:82:ea:f0:54:87:8d:4e:2a:fa:14:5c:24:fd:
b7:02:79:10:63:e8:28:f1:b5:28:cc:b2:2c:ee:24:1e:fc:f5:
d9:6e:87:ee:b0:70:59:a2:8a:bc:12:ec:31:7b:0b:56:02:ac:
5f:79:c8:ea:86:d3:17:b5:5f:90:49:d1:c4:3f:83:c3:7e:4b:
43:b2:d0:7e:a7:3d:a2:db:60:9a:e8:c7:ce:b1:a9:3a:2b:45:
25:9c:d4:ef:03:e2:30:11:8a:e7:1b:ee:17:e2:fb:85:b9:5b:
fa:7b:26:ba:9d:9e:66:f8:5a:a6:66:38:8f:2b:ed:e0:72:6c:
1f:37:17:4c:f2:0c:27:75:3e:7e:b4:79:e0:56:73:af:d4:bb:
e4:a0:b2:64:cb:03:0a:db:6e:cc:b3:b4:3b:28:d6:6e:1c:94:
e5:a3:12:f9:65:54:65:06:7a:24:2e:1d:37:e0:5a:03:79:c4:
f2:16:5b:33:e7:e0:67:71:c6:f2:52:d7:7c:8a:9b:66:61:a5:
8c:91:61:04:ad:7a:c2:bc:be:00:79:47:ff:fa:b8:45:5c:ee:
b1:42:99:18:ba:ff:27:f4:fa:c2:01:c9:8d:0b:08:27:5c:a4:
a3:23:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:23:46 2026 by rpki-client