Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
File: c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa (raw, json)
Hash identifier: ASnQG9EIobxX9lszCax84OuasvArBfHile0BdAfo+4U=
Subject key identifier: 45:03:74:25:C0:2E:7B:1E:CE:8C:D7:B9:A4:F5:FC:01:D1:F4:2B:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BA7F2FA75FDA343ACDFA34CFE1201C44BC7FC0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
Signing time: Fri 08 May 2026 03:20:07 +0000
ROA not before: Fri 08 May 2026 03:20:07 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a7:f2:fa:75:fd:a3:43:ac:df:a3:4c:fe:12:01:c4:4b:c7:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:07 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=2e07dbf3069a34234cd7195585749085ccd38c27714b1b19fa6da34f738ff888, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:51:26:7e:de:b1:14:aa:c5:d7:58:4e:e4:
c0:ab:c8:2d:d7:28:44:d3:70:9b:ba:45:26:c3:72:
c9:7e:74:4c:9f:56:c9:b7:8f:88:35:98:51:e4:74:
7b:f1:ab:df:23:d5:f7:f0:06:99:0b:ad:b9:a1:42:
aa:d0:81:c4:de:40:0f:f7:96:73:d2:d1:6a:f4:9a:
9c:68:7e:12:5b:cb:04:48:3a:59:fe:81:36:38:77:
c7:15:d3:d5:dd:53:ed:0b:8b:32:44:17:e0:f2:54:
56:9c:49:d5:ec:28:31:5d:e1:7d:43:23:7f:42:52:
af:e5:8d:d9:1f:db:6e:35:68:df:3a:3a:bc:6a:91:
24:ee:77:72:4a:e7:dc:9b:72:54:ee:71:ad:e6:48:
57:f6:b7:4d:ad:89:4a:76:b2:5f:c3:7c:81:fc:8f:
ed:92:a4:04:bd:5f:f1:a5:5d:17:c0:b7:9a:ac:09:
45:4b:3a:0f:1d:70:fd:1f:74:d6:28:b0:db:00:fe:
44:f0:a1:f1:73:db:09:9c:00:0d:78:94:0c:ca:65:
9f:25:99:19:75:fb:32:02:a6:20:1a:43:67:e9:9e:
1d:21:56:4d:5c:0e:ca:7b:51:39:14:2a:24:a3:82:
87:4c:65:fb:66:62:61:5e:d3:c2:1b:7a:66:0e:f4:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:03:74:25:C0:2E:7B:1E:CE:8C:D7:B9:A4:F5:FC:01:D1:F4:2B:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
06:39:5e:ee:0c:76:7c:41:83:5b:6a:03:50:21:2d:49:7d:58:
69:14:81:46:68:43:fd:d0:0c:d3:9c:18:68:e7:77:8f:1c:73:
5c:6f:f7:76:bf:82:d3:17:88:12:f0:b7:26:77:c9:c4:1b:2f:
33:4c:82:57:31:d1:1b:12:f0:1a:84:a5:0f:10:e6:c2:a3:86:
bf:ce:5d:1f:b4:e2:4f:71:be:79:c1:b3:a3:7a:63:2a:a9:ea:
25:ec:fb:84:63:6f:83:c9:af:88:ac:0e:82:27:f6:3c:15:ba:
0a:fb:a0:9e:11:48:96:3c:a5:3b:25:ba:ae:a6:12:f1:d8:52:
53:02:f2:b2:f7:c8:f7:ac:e4:d9:f4:f7:c9:ce:62:35:da:38:
76:0c:9a:6b:08:e9:66:6c:a2:d7:56:7a:6a:62:a0:64:d6:de:
30:b3:8b:ec:f0:fd:20:3d:ee:9e:f8:d7:54:23:aa:4f:fe:c0:
d0:de:a8:79:5d:7d:7f:b3:1f:24:98:66:b9:9f:ea:4e:9f:2a:
ca:af:81:05:ac:c9:96:59:d1:ee:d1:2c:30:03:12:0f:c7:81:
f9:66:10:e3:d7:df:5e:fd:11:60:f7:81:1b:6a:b6:af:32:93:
ad:da:09:fe:f8:e8:9b:78:78:65:05:26:9a:62:3d:96:9d:d4:
c3:02:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:30 2026 by rpki-client