Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6c7ad71c-0538-426b-89e3-bf167e9b2077.roa
File: 6c7ad71c-0538-426b-89e3-bf167e9b2077.roa (raw, json)
Hash identifier: QpW9PIhO0RH6pSuYhJadVCTsYTrB6CyljYzRa6EnW+8=
Subject key identifier: AC:8B:B7:CC:03:A0:0C:93:36:5B:20:41:3E:FE:31:E6:8F:56:AA:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 118E47FA02A470A4DFAFE8CF06AE3FB72B5B6981
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6c7ad71c-0538-426b-89e3-bf167e9b2077.roa
Signing time: Thu 12 Mar 2026 15:38:30 +0000
ROA not before: Thu 12 Mar 2026 15:38:30 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8e:47:fa:02:a4:70:a4:df:af:e8:cf:06:ae:3f:b7:2b:5b:69:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:30 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=31fb1318c288153f34fb8f0473e52e1840686caffb7f12b5371bea04e941414a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:44:3c:ff:d8:3e:b9:5f:63:e7:23:84:19:
d2:46:f9:fe:7c:b5:4f:68:d4:66:70:34:8e:9a:c5:
41:88:d0:1a:8c:01:f1:67:74:f0:8d:95:fc:5c:a3:
65:42:d7:d5:e1:33:83:a1:5e:33:06:bd:56:c0:6e:
3a:23:49:97:42:c8:eb:a0:cb:89:be:8f:c2:3e:a5:
cc:df:8b:06:e4:bb:b8:bb:0e:ec:4f:a8:8d:f0:14:
1e:65:c9:7b:25:b1:46:fd:3a:5a:e9:cf:68:4a:65:
05:36:80:42:85:ac:85:ad:9e:4a:26:7d:55:88:6d:
2d:02:d3:b4:74:42:a8:22:eb:a5:fa:2d:de:a8:50:
02:85:c1:a6:e2:50:91:c5:a2:0a:39:8a:d4:97:06:
dd:81:38:69:93:56:b4:a0:01:27:f5:ef:2b:6c:12:
2f:01:63:68:5b:d5:73:88:37:12:88:fc:09:b1:2a:
82:fe:ba:56:7f:33:93:0e:74:6b:4e:22:fb:5c:c3:
96:47:f5:93:16:e2:e5:4d:9e:a9:63:10:97:e2:f5:
e1:c0:6d:b6:1c:b5:3e:d6:2a:c0:ce:6e:8b:7b:73:
af:5d:91:ea:87:c6:7a:95:18:72:ac:1a:9a:24:71:
f8:78:9b:aa:18:93:1f:83:73:ec:d3:95:f4:20:1d:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:B7:CC:03:A0:0C:93:36:5B:20:41:3E:FE:31:E6:8F:56:AA:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6c7ad71c-0538-426b-89e3-bf167e9b2077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5080::/48
Signature Algorithm: sha256WithRSAEncryption
10:b3:fc:a8:a3:87:ea:8b:3e:9a:6d:3e:16:0b:e4:b6:b8:e5:
a8:85:74:40:c8:1f:4e:11:9f:d2:f0:26:67:ff:2c:42:6f:2e:
65:a8:bc:3a:c5:ba:e8:44:e3:f7:22:59:3b:9a:e8:5d:a5:6b:
45:4c:39:c1:76:b9:4c:b1:68:6d:3d:91:34:53:ac:b7:ee:94:
ea:60:d1:1d:83:85:8a:fd:76:95:a6:9b:fc:3a:48:92:48:fa:
4a:cd:e2:2f:eb:de:5d:4e:d4:ad:52:06:80:12:d2:37:ba:b3:
c4:e1:99:c3:a0:32:9d:9e:12:10:92:3d:6f:8e:f1:3d:27:a8:
ba:ec:c5:34:1b:2a:0a:de:e8:0e:b1:9d:14:4f:1d:13:38:99:
38:bb:32:5f:c2:e9:ee:1b:e3:d2:f2:81:ec:0c:d3:37:c1:02:
80:4d:c0:d5:83:b4:72:b2:d3:26:c1:74:a6:64:32:79:7c:06:
c5:38:ac:56:01:23:00:bf:aa:2d:b1:bd:8f:47:8a:2e:5b:95:
f2:3b:58:aa:ac:f9:2f:43:43:f4:f4:a9:e8:8a:32:db:bf:e8:
ef:a2:c3:5d:ed:d8:98:85:35:d6:2a:45:3a:98:8f:b8:9b:51:
b2:6a:31:75:7f:24:27:3b:d6:82:07:1f:fc:36:70:c3:14:7d:
fe:57:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:17 2026 by rpki-client