Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
File: 436b2ee4-1cd1-477a-83f9-e45d118e5574.roa (raw, json)
Hash identifier: ypDLVgLabY37yu3fJ+TktlAITVJAQBFH6exK/3OhHN0=
Subject key identifier: 61:10:1C:9B:8E:70:F6:1F:AB:7E:68:6C:DB:E6:4F:82:C2:46:59:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4026FFB2CD4B32A20566879B416EB0481A814008
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
Signing time: Tue 17 Mar 2026 22:36:37 +0000
ROA not before: Tue 17 Mar 2026 22:36:37 +0000
ROA not after: Mon 15 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:26:ff:b2:cd:4b:32:a2:05:66:87:9b:41:6e:b0:48:1a:81:40:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 17 22:36:37 2026 GMT
Not After : Jun 15 23:59:59 2026 GMT
Subject: serialNumber=835a9b2a1a151e77e1e7b612737386b9ede315a9502eaa99d718bf9864e92a7c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:ce:bf:1b:83:0a:ea:99:37:85:31:a9:01:
53:bc:84:dc:3d:27:3b:7d:dc:52:88:e8:c1:a9:00:
f9:b2:14:7d:b6:5c:03:d6:fa:00:f1:bd:6a:6b:c5:
19:78:d9:3a:17:6e:82:8f:e7:f7:f2:4f:ce:cc:67:
91:c8:aa:83:79:2f:29:f2:df:fa:1b:77:33:79:76:
0f:e1:55:0e:77:5d:53:dc:a7:98:9d:36:ae:0f:e8:
43:ec:85:ea:dd:7b:93:dd:c6:33:e7:e5:e3:76:b3:
4a:f0:ee:40:97:ca:10:2a:0f:49:2d:6a:48:24:64:
83:51:72:6e:08:c3:2b:3d:d3:4c:ac:96:50:f4:9d:
b4:01:0d:87:99:cc:c0:f8:a0:b7:dd:24:eb:77:e1:
14:e9:de:33:e3:c7:c0:29:de:7b:33:54:7a:12:ce:
62:e1:ed:b0:7e:0a:c9:b2:c8:38:8a:5a:20:0d:19:
25:00:db:c9:ec:22:0c:35:0c:73:8b:2b:2a:00:f4:
7c:96:29:c5:99:93:cc:61:aa:f9:91:8c:6c:01:06:
4d:97:52:ed:77:40:06:06:d3:65:90:ef:ec:df:63:
e1:9d:79:88:81:6c:b4:b0:56:56:47:09:31:1e:4d:
6d:c7:74:6d:17:3a:e6:8b:18:7e:23:1f:60:a8:81:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:1C:9B:8E:70:F6:1F:AB:7E:68:6C:DB:E6:4F:82:C2:46:59:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/48
Signature Algorithm: sha256WithRSAEncryption
7e:6e:dc:4a:82:b6:45:81:89:de:3f:e2:fe:e1:75:b0:3b:09:
a9:5a:85:09:15:3b:a3:02:98:30:26:0a:93:19:77:99:3d:82:
60:08:a2:1f:6c:69:eb:a3:77:c7:5e:7e:7f:a4:47:e7:7a:db:
87:cd:c7:1d:0d:ec:60:bd:e9:8a:14:cf:aa:cc:b6:cd:0b:dc:
d0:73:41:8e:15:ea:cc:a6:2f:1a:f7:5b:d6:4d:53:d7:07:5b:
e7:37:74:0f:09:c1:09:d7:c5:7e:f7:4e:74:f9:9e:8d:f4:0f:
56:f0:bb:db:9a:75:c1:aa:c1:75:a3:2e:30:64:d4:e2:05:0f:
6a:a3:99:0d:be:82:72:fe:b1:d9:a5:e3:3b:97:32:86:ec:32:
97:d2:b8:f0:8a:0d:a9:44:e0:fc:a8:6f:e5:a2:37:e3:9e:33:
c4:b3:7d:e2:97:3a:43:3e:9c:ef:0b:94:e5:15:ef:14:d1:64:
a6:b4:2d:82:ab:75:d1:1e:64:6e:76:c1:69:6e:5e:10:f5:4f:
a1:98:fe:56:2a:78:44:21:51:9a:c4:0f:4e:9a:d1:3c:dc:41:
0e:0d:d6:de:de:3a:79:b7:b8:9e:f0:68:ea:e1:c5:57:03:e6:
71:3d:83:ba:25:8c:7b:43:da:a3:ae:d0:24:19:61:f3:48:5c:
41:71:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:28:08 2026 by rpki-client