Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
File: cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa (raw, json)
Hash identifier: PVKCWAwTNyMp2649hG12UlMGSgpZjp4nfAIlvh38XYk=
Subject key identifier: 4A:8A:B4:41:68:53:B4:45:C6:7A:92:FB:56:E4:2A:26:C6:32:EB:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7156D4FEAC8E1E68CC1D0670FE651A626BD6D7DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
Signing time: Sat 02 May 2026 01:30:36 +0000
ROA not before: Sat 02 May 2026 01:30:36 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:56:d4:fe:ac:8e:1e:68:cc:1d:06:70:fe:65:1a:62:6b:d6:d7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:36 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=0214fce9d339486035ef49cd9a2fd145f42be5e755443203c8b7a7f188040081, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:d3:1f:31:e2:45:4c:b2:aa:ba:69:52:82:
1e:6b:db:6b:c7:bf:d9:40:25:c8:30:9b:16:56:9d:
e8:4c:55:ac:e2:c8:c6:1c:ec:54:6a:4b:4b:c8:8d:
47:90:cb:63:2c:f0:c3:46:c9:64:b2:f0:ba:2d:4b:
90:e3:b3:68:f8:77:98:ab:80:10:ac:4d:96:30:5e:
52:93:e5:41:10:42:46:5a:7b:8c:72:9a:5a:3b:3d:
e4:f7:0e:8b:a3:de:a8:7b:8b:39:42:c0:19:61:d6:
2b:6e:aa:99:54:c0:24:4f:26:2a:49:16:f2:41:b5:
21:cf:54:40:9e:b7:74:b0:97:84:89:ba:9e:5f:4a:
ae:84:3e:e7:2a:6e:cb:cc:52:ae:57:76:f0:46:ab:
b5:99:4b:e8:9f:e5:9a:e0:ef:31:8d:07:a6:b9:cf:
77:f1:fe:e9:ba:51:4d:bc:10:c4:b8:0c:0c:7d:3d:
25:4c:9b:62:76:fd:2b:46:ad:5e:35:b1:8c:17:2c:
b4:dd:c4:f8:d3:97:e1:af:2d:a8:fe:01:45:4c:87:
ae:84:bc:3f:4b:53:fb:aa:9e:01:b1:ca:8d:67:7e:
5f:91:6d:43:67:27:b5:e9:3a:61:70:b9:55:2a:17:
fe:5f:ec:eb:29:32:40:28:07:5d:b7:69:57:04:8d:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:B4:41:68:53:B4:45:C6:7A:92:FB:56:E4:2A:26:C6:32:EB:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c020::/48
Signature Algorithm: sha256WithRSAEncryption
07:8d:ef:77:7d:78:15:b7:cf:6a:6f:58:02:22:ab:21:fa:35:
e8:34:7c:8b:09:9c:d5:55:80:2b:d2:5c:09:a7:92:b8:8b:6b:
90:0e:10:d3:75:88:d0:c2:cf:d2:5a:e6:df:a3:bf:49:00:3e:
70:5c:7f:54:c0:a7:e4:ff:52:06:21:4b:4f:2d:6c:a3:80:82:
12:0a:f9:57:52:5f:d4:c8:e2:30:91:f8:26:44:d1:b2:ba:20:
0e:b2:cd:3b:d0:37:73:c5:c2:b6:81:2d:d0:a8:c7:83:ae:f5:
b2:86:f8:16:f0:a4:c3:bc:6f:a8:be:45:4c:18:e0:8d:d3:38:
8d:a9:6d:a8:64:06:04:d6:e8:95:22:43:60:e4:76:6d:fa:53:
fa:75:64:b5:9a:40:72:7b:3f:6f:3c:b4:55:93:bc:98:7e:49:
16:86:46:a4:4a:b4:f0:5f:7e:ce:3f:53:0f:a5:9a:27:7a:7c:
9c:d3:3a:7d:91:67:7f:a6:db:ee:ca:bc:80:29:6b:e0:89:0e:
5d:75:71:25:b4:6d:c0:5e:0c:69:83:2f:78:47:93:96:63:34:
7b:bc:8d:28:60:db:e2:07:6d:db:0c:81:1a:be:a5:fa:c1:c7:
0a:ce:07:e1:0e:d4:6f:2b:c0:24:45:4f:a3:47:e4:ee:f7:ee:
2c:b2:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:36:22 2026 by rpki-client