Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa
File: c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa (raw, json)
Hash identifier: mdkmecVvzwacAeAm9fDXUE6drff9zj1wCpNYuag+JvM=
Subject key identifier: 92:04:14:FF:B9:43:71:6E:83:95:00:F5:A8:D0:85:5F:24:6B:01:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 163429ED8B42B39CD9382904510407A6FAD33EA5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa
Signing time: Sat 02 May 2026 01:30:22 +0000
ROA not before: Sat 02 May 2026 01:30:22 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:34:29:ed:8b:42:b3:9c:d9:38:29:04:51:04:07:a6:fa:d3:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:22 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=ba0819450dfa0fb861f9d54e7e479e5c17077a7476c83d77aa9c36e670477556, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:30:0d:6e:24:de:cd:dd:29:c1:c0:c7:aa:
55:10:d4:13:0d:d6:75:cc:1c:a0:50:9c:b9:8c:66:
b6:2d:0b:7c:a6:82:fa:2c:26:ee:51:5f:43:b1:84:
9d:21:d1:07:3d:0b:b8:7a:41:69:d6:a1:a4:db:cc:
05:13:9a:38:1e:e7:cb:93:99:27:ca:27:af:89:78:
b9:c2:14:43:fd:f1:51:c9:d3:ed:24:97:c3:48:73:
4d:d8:3c:d7:89:78:b8:d4:2c:a6:a7:2c:45:81:ad:
78:aa:84:4d:7b:09:a6:7c:27:18:e5:44:f7:20:24:
3d:e0:e9:27:23:d5:58:e5:d1:a7:29:9e:ac:8d:1e:
c3:fd:f7:d0:71:c2:2b:4c:c0:fe:9c:9d:4e:e0:a7:
1a:dc:c2:95:60:11:b9:05:c1:d6:ee:d3:cb:39:69:
e6:d5:9c:f1:3b:24:e8:93:bf:93:66:7c:9f:0a:ce:
01:ae:01:dc:ab:94:90:31:37:2b:56:31:4d:53:c1:
1a:79:d4:76:8d:46:83:d2:be:c4:ad:bf:2a:4a:75:
77:b1:00:f9:fb:7d:8f:fd:ea:ef:5f:63:d7:f7:06:
4e:b8:26:cc:ea:a7:2b:21:4c:95:01:f9:3c:e0:aa:
59:ef:f3:31:2e:4e:cd:c5:8f:24:28:01:cd:d0:80:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:04:14:FF:B9:43:71:6E:83:95:00:F5:A8:D0:85:5F:24:6B:01:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:6080::/48
Signature Algorithm: sha256WithRSAEncryption
3c:38:3f:31:20:6f:39:6f:79:dd:95:fb:af:90:4d:ac:24:ce:
1c:e8:f9:4b:c8:88:5b:4e:35:50:18:a3:42:67:49:93:d8:b7:
f1:3b:ab:c2:21:17:e0:16:9c:90:9b:34:76:f2:9a:40:84:70:
f6:60:fa:02:9d:18:e3:a1:98:aa:fd:fa:1f:6d:1a:b3:e2:1f:
6b:3b:42:e0:54:07:49:17:10:2d:63:e4:18:f3:93:65:a9:ac:
3a:ae:71:cb:a4:a2:f6:73:2e:1a:7b:47:e0:a5:26:f9:18:18:
6a:d5:d4:af:85:dc:ca:95:a3:66:13:c1:f5:b6:74:19:9b:84:
59:4b:25:68:2e:0d:0d:e8:a3:80:8b:c9:fd:fd:98:e4:47:87:
8c:03:d4:40:27:de:dd:b5:3d:d9:7e:c2:fd:b6:de:b9:ed:67:
15:39:9a:04:17:a2:e0:99:95:b5:2f:21:44:1e:13:4f:a0:a1:
b6:91:72:b6:f3:b8:92:f3:b2:ae:a7:bf:27:38:38:a3:fb:82:
df:86:8c:f0:f8:79:ce:a3:a8:48:ad:89:0e:07:e8:c1:7f:f4:
55:c4:20:8f:91:98:12:06:e9:96:27:5e:15:12:f9:0f:ae:51:
87:91:90:05:ab:51:b3:a0:c8:72:0c:0b:28:fc:4a:93:1d:0d:
3d:fc:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:35:56 2026 by rpki-client