Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa
File: 8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa (raw, json)
Hash identifier: Qm0p26bQfgb7NYKEKNMdnp9WmJkGk9rBSAeKlkbSw1M=
Subject key identifier: A4:85:8B:52:B4:19:B4:0D:07:8B:13:54:CB:55:45:4F:E1:19:10:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76444FCD58E7FFB5F41CF952908EDF3E07B96AA6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa
Signing time: Mon 11 May 2026 01:50:35 +0000
ROA not before: Mon 11 May 2026 01:50:35 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:44:4f:cd:58:e7:ff:b5:f4:1c:f9:52:90:8e:df:3e:07:b9:6a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:50:35 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=a59371ecd562898dd96fef3a000725952544415b7e6c34deba45f1dd8f4c0633, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:87:b7:e8:c0:56:7c:4f:e2:42:b8:ad:f7:
10:d3:73:a4:47:9a:ae:a0:ba:b5:c3:13:2e:ba:bb:
c3:8b:16:97:71:7e:65:e3:fa:2d:6e:88:c6:ef:19:
8e:9c:00:2f:80:c6:21:d2:d2:09:2a:9b:9f:a0:ef:
28:50:91:d1:a0:97:34:42:28:ca:88:3e:4e:8d:a0:
aa:5c:1d:0f:61:02:62:36:79:93:e6:58:7d:37:1d:
12:46:83:75:27:b0:d2:df:a9:17:0c:c3:c0:84:dd:
98:71:c2:ed:3c:12:10:49:94:c0:af:e9:a0:df:9b:
d2:72:fc:12:56:86:17:91:df:48:02:2a:a6:0c:13:
23:92:82:81:6b:00:f8:6b:0e:2f:22:83:a9:ab:22:
f1:52:0f:7b:94:c1:24:ba:a5:63:36:34:9d:a3:08:
b4:f6:24:eb:87:fc:34:ff:02:77:0e:99:40:fc:26:
f0:6c:83:03:63:2c:cc:40:6d:f9:c9:38:05:3b:83:
1b:35:39:a1:d8:08:e4:b9:a7:97:2f:47:46:6b:d2:
41:a7:12:ec:45:68:40:f0:9b:31:33:23:de:77:7c:
c3:dc:af:91:bd:6b:2d:06:fd:3f:f5:79:f7:3b:98:
6c:32:e1:92:e5:c1:86:3d:7a:ea:3f:28:06:f1:8f:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:8B:52:B4:19:B4:0D:07:8B:13:54:CB:55:45:4F:E1:19:10:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:1000::/40
Signature Algorithm: sha256WithRSAEncryption
18:1b:2b:a4:60:39:d3:60:3e:44:6c:8f:16:94:08:38:66:2c:
49:12:9c:37:c0:7a:db:10:0b:02:8c:52:8a:d1:76:32:11:ce:
33:e0:5e:3e:2c:d2:66:4b:7a:28:bb:08:0c:1e:3b:72:54:3b:
71:80:6b:16:c5:cc:3b:75:0c:f1:fe:0c:52:12:e4:3f:b3:01:
41:69:0f:97:6a:f0:2d:8b:30:09:9f:85:9a:4c:2a:fd:d7:18:
01:6a:18:21:9b:35:70:17:dd:ed:7f:5e:b2:fd:bd:d2:5f:9e:
4b:f6:7d:d4:01:df:5a:cb:69:47:7c:14:23:1f:c3:d0:9a:df:
76:c7:5a:3a:b5:51:52:33:37:50:34:02:69:7b:ec:e9:d1:d5:
d0:db:d6:00:f0:e7:4d:4a:62:51:3b:35:14:6b:e4:4c:bf:f2:
a7:d1:c0:d7:aa:5d:8c:96:9b:84:eb:81:c0:9e:b2:e0:68:09:
05:4f:07:64:75:9e:f4:76:ce:69:61:c4:87:c9:bf:7b:e5:db:
03:07:58:c4:ed:20:d5:8d:87:89:33:b3:8e:37:39:b2:83:7d:
38:44:26:50:c0:a2:c5:52:ee:3d:2b:49:48:ff:be:5f:fe:1b:
93:d0:27:3e:9b:cb:0f:c1:68:dd:cd:eb:a2:d8:70:ec:b7:ee:
03:ac:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:43:27 2026 by rpki-client