Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/096f7a1a-16f8-43a9-9924-45031719c04f.roa
File: 096f7a1a-16f8-43a9-9924-45031719c04f.roa (raw, json)
Hash identifier: t27ZPFQfzx35+ZpN99rzvw7luU+48v/83+onuQg4F68=
Subject key identifier: D1:DA:CF:BC:9C:8D:62:88:3D:B9:C0:19:5D:A1:04:C9:EE:F0:10:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76EA326847112B5F7FDEBE16D73D6AD66211F575
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/096f7a1a-16f8-43a9-9924-45031719c04f.roa
Signing time: Sun 31 May 2026 00:30:16 +0000
ROA not before: Sun 31 May 2026 00:30:16 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 13:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ea:32:68:47:11:2b:5f:7f:de:be:16:d7:3d:6a:d6:62:11:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 00:30:16 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=a4eb386b9b1818249fb96d4a4d3344f17557e0c3a9b2198a0b06a196f61dc9ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:29:61:12:2d:fc:9a:33:e5:ff:77:7e:aa:
ce:07:a8:15:08:3b:8f:c7:94:d2:58:45:64:24:72:
23:20:e7:66:51:f6:5e:f1:70:a8:76:4b:0b:70:6d:
6a:77:82:7c:84:1d:ea:9f:aa:1b:9b:c6:d7:b4:a4:
38:77:e3:3f:58:d1:30:8b:6f:e8:63:65:8a:fc:08:
c2:c3:c6:98:77:f7:f2:5a:48:f6:72:1a:67:ab:27:
6e:bc:a5:32:d6:da:c4:a7:a8:ba:33:91:bf:7f:a9:
aa:49:42:cd:75:09:37:74:75:47:28:56:4a:38:fb:
f3:77:bc:4b:d1:f8:22:09:b5:f6:d1:5f:17:12:92:
ef:b5:71:30:84:1c:33:db:bd:d9:d5:3e:e2:56:72:
cc:0d:b0:8d:45:21:2c:9d:ba:4a:2a:9c:d2:74:87:
38:8e:76:ed:32:04:ca:b0:bc:d7:03:eb:83:9b:e4:
3f:38:51:91:bc:d7:58:a9:8d:7b:00:cc:30:d1:90:
e7:61:8d:1b:e5:47:ac:41:6b:c0:0c:9e:d7:69:e0:
fc:d3:18:7a:88:58:26:c4:7d:58:35:ab:21:31:33:
96:92:84:8a:55:88:2c:59:68:0f:38:de:71:ca:cd:
09:58:f7:cc:33:3e:e1:37:89:c9:23:90:a5:3e:39:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:CF:BC:9C:8D:62:88:3D:B9:C0:19:5D:A1:04:C9:EE:F0:10:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/096f7a1a-16f8-43a9-9924-45031719c04f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:2d:d2:10:6a:2e:02:80:47:4f:2d:a5:56:6b:c7:65:46:d6:
4c:83:85:03:e0:ef:5a:47:ba:8b:c4:73:be:44:de:25:f1:5d:
40:eb:e7:1e:ad:d1:9b:5b:45:ac:9d:0b:21:a2:a4:81:56:d5:
00:f9:e8:f4:2e:32:d6:32:71:ba:df:5e:1a:fa:4c:a2:28:8e:
a1:e8:13:11:ee:20:f8:b7:9c:80:60:7f:30:ff:b8:14:ab:44:
f0:e0:6d:61:ba:df:b5:a4:ba:ab:1a:08:82:8b:e2:a9:98:f8:
7e:f9:6e:ac:40:7d:0b:54:6c:fc:31:51:20:bd:20:1a:49:19:
a7:40:06:27:d9:81:35:8a:8d:71:c0:88:34:54:d7:1e:5e:a6:
04:f2:ed:ec:b3:aa:7e:24:85:92:4b:ff:14:d8:56:0a:a4:ba:
f1:8a:b2:66:a7:01:2c:6a:2d:27:80:8f:4e:54:2e:8e:77:c9:
cd:35:ea:fe:dc:6e:64:8b:68:be:6a:59:9d:28:14:a5:89:0c:
f4:71:04:f1:7b:5f:2e:dd:8b:b1:fd:9f:9c:11:99:75:62:10:
cc:f0:d7:ac:ef:dd:fc:63:e6:11:63:95:c0:eb:24:2a:0e:00:
62:46:1b:b0:06:a6:9c:01:60:af:4d:08:a3:54:95:0f:37:52:
cd:4c:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 17:49:21 2026 by rpki-client