Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa
File: a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa (raw, json)
Hash identifier: 7oBSW+WGrADKlDmq8+I4KXbYhl4qLhM/9qyHO6bGVHM=
Subject key identifier: BA:35:C7:50:BC:98:ED:C5:32:2C:A3:56:13:54:5D:4F:7B:DD:F2:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E2D4515E9586594B68A7E38F4B8C5487C4DE36D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa
Signing time: Fri 08 May 2026 03:30:13 +0000
ROA not before: Fri 08 May 2026 03:30:13 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2d:45:15:e9:58:65:94:b6:8a:7e:38:f4:b8:c5:48:7c:4d:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:30:13 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=5ab13470d298690e9b0fd5ac7c4cf98b21d6bc8a0f709de0dab749326e629a6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:7c:9c:53:14:cc:94:05:ee:56:2d:db:b7:
ab:9d:0a:b5:d9:b1:6d:61:7b:ed:3a:ce:2f:6b:bf:
17:91:2e:aa:7b:0f:30:a3:10:1d:6d:6f:f4:9b:05:
89:9c:52:3e:12:59:a2:65:f1:76:6e:16:48:b2:cf:
f6:3b:0d:6e:17:01:3c:ec:d4:2c:d4:6f:9e:cc:50:
a9:0a:29:79:85:2d:cb:1d:cd:98:be:65:01:94:19:
85:4f:86:36:2f:83:b7:dd:40:00:08:1e:8b:84:16:
87:e6:d2:d6:37:87:eb:9d:5a:ab:1c:ad:46:84:31:
44:c9:16:4f:ce:cd:80:01:59:3a:09:dc:07:9b:50:
33:f3:3a:73:aa:d5:7e:6f:51:2b:8a:4d:f5:dc:d9:
90:3f:4d:7f:13:d4:ea:12:ce:a6:ba:83:d9:0e:6f:
93:59:9a:03:8a:b7:be:7b:04:7e:40:bb:df:fa:0d:
23:d7:07:b4:83:d3:fe:73:1d:1b:cb:70:3a:8b:56:
08:aa:5a:dd:a4:ed:da:0b:19:82:38:ab:81:a9:30:
95:ab:a7:79:da:74:ee:07:da:c5:40:f2:66:f6:67:
e9:dc:cc:74:ea:0a:bf:20:cb:25:e3:ab:c4:8d:df:
b7:e4:68:29:26:d0:81:1e:aa:e8:ce:81:e8:e4:be:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:35:C7:50:BC:98:ED:C5:32:2C:A3:56:13:54:5D:4F:7B:DD:F2:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e::/32
Signature Algorithm: sha256WithRSAEncryption
20:66:a8:be:54:fe:a9:3d:cc:6c:40:07:1e:63:91:81:d9:b6:
68:b0:f9:e1:bf:2d:c2:a6:26:5c:8b:ae:2e:8b:aa:e8:46:4b:
65:f3:05:76:a2:4c:28:38:12:81:55:85:85:02:57:ff:e3:fc:
03:a5:0a:ab:f5:c1:95:ef:16:d4:f8:10:9e:73:8e:ed:ec:62:
55:c9:85:73:4c:91:93:35:14:75:47:1f:9f:14:71:df:6a:8c:
56:a0:df:e1:11:20:21:cc:a4:37:13:2b:58:b6:c6:bf:c0:d4:
05:03:36:8e:77:ed:44:8a:86:6c:b5:c6:e1:c7:70:fd:62:61:
59:75:af:19:01:4d:b5:ac:ee:24:b3:f3:eb:cb:0a:3a:e1:fc:
ce:2f:63:08:bd:cc:cd:85:30:eb:4f:89:42:f7:f7:d8:b8:f4:
63:c2:f0:40:c7:04:7f:7a:72:61:fc:84:fa:d2:7d:05:b2:64:
77:5f:df:07:a6:a9:2f:ed:73:e8:d4:bd:6b:d2:33:f4:47:c9:
d7:28:ff:22:93:50:d9:b7:53:73:59:c7:e9:3d:a6:1a:76:ed:
a1:01:85:89:53:8b:3f:3f:ea:97:d1:4e:33:53:d9:91:1b:d6:
91:2c:d3:f1:bd:79:49:b7:a8:cf:1e:4e:c1:6c:02:e5:11:36:
87:c5:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:36:20 2026 by rpki-client