Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
File: da60d3f0-c039-4ca6-acc9-9f7139145100.roa (raw, json)
Hash identifier: P1uYxQ4P4+WH3iHs0e4xCO/ui1r6eJPM8gxgahu4PA0=
Subject key identifier: 8A:EB:CD:4B:36:53:D0:23:AE:3A:83:53:89:2D:F5:16:B8:0C:E7:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42E30997F973A5033DD4A6DC805167275F44F9EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
Signing time: Mon 27 Apr 2026 00:40:05 +0000
ROA not before: Mon 27 Apr 2026 00:40:05 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e3:09:97:f9:73:a5:03:3d:d4:a6:dc:80:51:67:27:5f:44:f9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 27 00:40:05 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=487811b5901111a64aa57e8184d1e3eb8afe7909a65e46ca53afa86a50e7b2bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:80:51:88:ea:54:e0:8c:f0:f0:98:6e:50:
7a:19:7d:b5:22:2a:5a:68:13:20:6b:c6:9d:39:4c:
fb:70:a4:90:9a:5c:6c:fc:54:32:c0:e3:49:b5:9d:
c8:be:33:0c:1c:cb:f8:18:69:89:ca:27:65:4b:01:
3b:11:71:db:c0:97:fe:83:46:c3:61:44:40:cd:2c:
41:97:e8:36:b0:32:44:f2:3c:71:ba:cc:d3:4f:6f:
d4:c7:6a:ff:c6:f6:1f:13:4b:f7:57:4f:02:de:c8:
26:cc:62:07:38:c5:d1:ef:9a:c5:2d:01:70:21:3d:
d5:c1:17:3e:89:38:77:8d:cd:ae:81:23:12:01:ac:
b8:97:8a:ca:a9:83:6f:6d:d5:bb:c0:7c:98:61:1a:
7c:81:e6:b1:e2:7b:ff:a9:b6:ff:44:4c:e9:e2:85:
44:97:7e:51:68:52:9c:9a:7d:d1:93:c9:82:a8:89:
b9:a2:0f:3e:f1:1d:5a:e1:4f:dd:a3:53:10:10:8b:
3d:47:b0:73:fb:9c:4e:0e:dd:fc:9b:ac:31:89:f8:
d0:6c:63:45:2d:5d:3b:4a:d1:d4:f9:81:22:97:df:
29:64:5f:5e:74:31:b5:ff:7d:ea:b6:d1:b4:6f:18:
98:21:e2:b0:77:46:98:6a:26:80:94:c2:e2:06:bf:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:CD:4B:36:53:D0:23:AE:3A:83:53:89:2D:F5:16:B8:0C:E7:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8080::/46
Signature Algorithm: sha256WithRSAEncryption
0a:b9:c7:f7:ff:32:36:7d:e1:05:be:17:54:52:93:04:88:86:
39:19:4c:5b:39:ff:6c:39:47:9a:64:93:1c:a6:ee:d4:e5:c9:
b1:67:5b:97:94:43:df:4a:99:cf:5f:0e:f3:06:9e:cf:b6:1b:
d3:14:ea:c8:8b:26:1f:79:bf:a3:29:e3:f2:f1:a2:9f:79:8a:
ca:78:53:80:49:db:18:c6:72:93:88:06:27:41:fb:a9:a3:69:
f2:91:a5:74:40:c5:fc:29:0d:a4:49:a7:e2:22:75:4e:6f:a3:
c9:8c:58:57:da:54:93:ae:50:70:5d:b9:d4:d5:3b:72:5d:e4:
81:5a:2c:cd:d4:88:d0:32:06:2f:a0:45:3a:32:45:a1:74:96:
94:7d:74:6a:15:82:42:8b:e5:f6:f1:aa:8b:6c:fa:09:ee:cd:
88:c6:10:ed:57:1b:7f:00:76:1d:a1:e6:b4:64:07:d2:0d:b3:
ea:e2:f3:d5:30:70:2a:9f:16:cc:e4:34:f7:3c:d8:13:29:f5:
c3:b5:e3:eb:d1:08:a8:b2:2b:02:0f:46:dd:0b:fe:2b:3a:16:
2c:b0:5e:6f:71:41:f0:4b:0e:c2:25:26:2b:58:d3:d1:70:e9:
a9:4f:17:dd:7b:89:90:f7:a9:78:65:ec:a8:ad:c6:91:16:cf:
07:67:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 19:35:12 2026 by rpki-client