Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
File: adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa (raw, json)
Hash identifier: Ctd534elT1VKx7G67nwyMNgxQXHLbe9PW4Rw6prqm30=
Subject key identifier: 0C:DE:09:53:1E:D4:26:B1:D5:E6:26:4C:48:00:D6:16:B3:A3:32:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11C3F15A2DED32A00611A34E32BD16EE1EB51133
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
Signing time: Sat 02 May 2026 01:30:41 +0000
ROA not before: Sat 02 May 2026 01:30:41 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c3:f1:5a:2d:ed:32:a0:06:11:a3:4e:32:bd:16:ee:1e:b5:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:41 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=0a143e2159dd3c77c9d77db977de433edb3d563de020fd82d49d4ec0f5b62670, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:1d:0b:49:f2:40:a1:43:c6:d0:05:76:39:
4e:b9:6e:1f:4e:41:3c:ed:27:99:5d:bb:48:b6:15:
7d:2e:c1:ec:90:0c:53:77:b9:77:a8:a7:7a:eb:35:
f1:f6:f2:88:3f:51:2d:c1:db:a1:87:0a:b7:55:db:
d9:5d:de:d5:22:f0:16:c6:5e:42:d0:05:b1:be:c2:
0e:09:64:db:16:d1:f6:d4:69:52:5f:dc:31:36:ce:
b1:b3:8a:17:1e:6e:d9:57:8e:f3:a8:d0:c1:34:4f:
e6:f4:3c:98:9a:69:cc:5c:a9:a3:26:34:14:6e:16:
24:62:2e:da:2e:53:79:ab:e1:97:3d:68:0b:d2:8b:
57:13:7f:d3:7e:bb:96:83:f9:fa:c8:6b:7a:ee:0c:
37:c7:2b:59:a2:e3:53:29:d1:2f:6b:ab:31:9f:a8:
a8:e9:9b:19:cf:a2:bb:02:f3:87:d8:3b:40:f8:f5:
78:67:e7:73:33:70:6b:1d:3d:5c:0d:90:ae:df:2b:
9c:0a:dc:34:d6:50:b9:e3:81:73:a2:0b:53:d9:a7:
06:04:2e:70:4e:6b:05:61:09:48:38:a2:d5:77:29:
fa:cb:be:43:86:13:aa:d5:6d:40:72:16:18:da:af:
b0:0d:11:cd:fe:06:03:6a:3f:6c:f6:7b:1e:ff:e2:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:09:53:1E:D4:26:B1:D5:E6:26:4C:48:00:D6:16:B3:A3:32:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4020::/48
Signature Algorithm: sha256WithRSAEncryption
93:ba:24:5b:71:67:79:8d:40:54:e4:2f:47:bd:ed:47:06:18:
f9:e9:fb:e0:ae:c4:df:b1:20:0e:70:3c:99:f9:df:85:b7:9e:
51:54:95:48:b1:3a:b6:db:5b:2d:bb:d0:b8:79:84:4d:00:62:
bc:04:5c:6a:93:90:67:c5:b3:16:7c:28:f8:12:16:bb:f5:20:
ce:58:8e:65:1e:9c:01:d7:34:61:1d:05:89:16:c0:13:c5:6f:
17:76:05:fa:f9:9a:34:c5:51:ff:49:a2:3a:c4:83:74:6a:b1:
ed:11:9f:a1:87:83:94:b6:b5:ca:85:53:56:6c:d9:81:4c:23:
6f:6d:78:89:68:12:64:77:9a:a3:a1:d9:6b:54:0a:2c:63:15:
92:04:8c:9f:1d:a7:b9:42:44:05:7f:80:38:b6:92:0b:5f:cd:
ec:fd:8d:cf:93:b0:14:e2:8c:7f:ae:cd:4c:1b:a8:54:10:d5:
dd:1c:4d:bf:59:cd:44:80:64:51:72:3b:f4:de:9b:5c:19:b1:
0b:e4:e4:70:6a:cd:05:21:86:66:63:22:fd:a5:94:5d:e6:f3:
66:ce:02:94:85:41:13:c0:7c:45:57:6a:e1:87:29:b0:f1:49:
50:a6:f0:43:98:b0:6d:60:e0:80:cc:af:2d:d2:70:dc:04:db:
43:95:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:13:50 2026 by rpki-client