Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa
File: db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa (raw, json)
Hash identifier: 9AMei51/o77EdmleWMEuvN3RLYgDHaHXuFIQL+h5Jfo=
Subject key identifier: 42:B1:1E:80:97:58:E9:D0:AC:ED:77:37:C2:E5:2A:B6:17:E6:D7:DD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E10DADB03619DE91E485F17BE4CA563EBA4D20D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa
Signing time: Mon 22 Jun 2026 02:40:25 +0000
ROA not before: Mon 22 Jun 2026 02:40:25 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:10:da:db:03:61:9d:e9:1e:48:5f:17:be:4c:a5:63:eb:a4:d2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:25 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=fdf7331dcbc77c16bb553185d11f81f399c8af9351aedb8cf8670384fcaa82b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:d3:16:dd:a1:88:12:ab:99:d4:01:5c:5f:
3e:04:91:2f:a3:95:07:5c:05:ef:3d:1d:40:4b:3c:
aa:e4:65:78:63:c8:32:6b:2e:d9:15:22:a1:39:2b:
09:44:80:ab:57:1e:f2:f8:9c:4a:8f:6f:51:23:40:
5a:ec:29:a1:56:5c:29:30:2c:5d:8e:e4:3e:47:78:
67:48:df:de:c6:a5:8f:d4:64:13:08:5e:59:b2:3f:
e3:12:2f:e3:42:fd:5e:71:e1:f6:f6:3e:c2:65:ee:
1b:e4:88:0e:c5:d3:53:a9:d7:02:9a:f5:a8:94:e1:
f3:ab:fd:94:b7:23:84:e7:c0:21:17:01:68:93:39:
43:15:f4:a2:b3:89:f5:b1:f4:63:77:e0:f1:fc:fb:
97:8e:85:bc:87:e5:27:5b:7b:42:56:3a:b8:41:dc:
12:fd:ff:ee:6c:24:c7:92:d1:f7:aa:58:d1:b4:40:
ca:44:d3:e6:3f:a6:3a:02:b6:8d:dc:41:7c:0d:16:
ab:46:73:1c:f3:c4:9e:46:0b:50:11:17:da:3b:70:
f8:1c:5b:10:45:63:15:7f:3f:0c:e9:9d:b3:df:18:
8c:f8:85:28:f5:ec:08:ab:3e:d8:e5:80:87:3a:49:
59:26:0b:66:59:d4:ce:83:34:9c:92:d1:06:21:38:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:1E:80:97:58:E9:D0:AC:ED:77:37:C2:E5:2A:B6:17:E6:D7:DD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:880::/48
Signature Algorithm: sha256WithRSAEncryption
b5:18:49:74:ad:ae:3f:b1:f8:93:cd:a8:90:37:1a:67:84:41:
30:af:6c:b4:5e:76:42:ff:a5:4a:3a:f7:d4:fc:1d:31:8e:4d:
11:60:17:0c:fc:ff:a3:8b:6a:60:4c:24:b4:1b:d6:9a:3e:21:
98:77:2a:23:fd:5e:46:05:ff:0c:18:13:3d:62:7d:c3:55:00:
db:0c:31:c1:2f:1f:54:38:c0:d7:3c:d8:1a:a6:87:c9:9c:1d:
14:60:6b:8b:62:63:de:38:aa:18:ac:72:bc:9c:c4:6a:9a:92:
fe:66:06:c7:4a:ca:27:93:17:4f:52:33:d6:f8:9e:94:05:90:
a7:86:99:46:13:51:99:90:3e:fa:b0:2c:1c:3f:31:af:40:ac:
32:ec:b3:f3:ba:07:42:8a:24:7e:c2:5a:bc:0f:4b:3d:e2:e8:
34:7c:54:b3:fb:e4:98:0b:a7:50:4a:09:b7:f1:f2:3c:aa:1b:
51:c7:d5:6a:5e:0a:76:ef:af:fb:cf:99:e5:1e:3b:ed:36:0d:
7f:d2:51:40:ab:8e:79:1b:a0:cf:db:5b:86:75:c5:6c:62:a7:
34:c4:99:8d:ec:be:b9:c3:fd:b8:75:64:91:39:7a:ea:54:67:
07:74:2f:91:5d:e0:1f:ae:ef:f7:05:cb:24:c0:f5:82:22:26:
62:db:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:38 2026 by rpki-client