Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
File: dd7649a8-cae4-4d67-90f1-f01144285a2f.roa (raw, json)
Hash identifier: SzYuV0LyvrIe97IKrKCRJ9KmmRC/OnOFScM4I3ULB74=
Subject key identifier: BA:75:9A:F3:95:53:8E:15:D5:76:D6:C5:CF:DE:3D:8C:92:54:56:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A5B6AFE5C9C0C032E38E2BAA0190F54DDCCACEA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
Signing time: Tue 19 May 2026 04:40:10 +0000
ROA not before: Tue 19 May 2026 04:40:10 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 13:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5b:6a:fe:5c:9c:0c:03:2e:38:e2:ba:a0:19:0f:54:dd:cc:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:10 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=398f24b63ee06945d94362eee0c1d0564b501421125653f30c4db7966d9365ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:10:2d:3a:a5:3b:2f:12:c3:af:69:08:6f:
b4:ed:31:b4:46:b7:93:cd:d9:c8:0a:26:e3:cd:5c:
5d:72:a5:bd:ca:42:7e:ac:ee:a9:70:fd:eb:df:ce:
78:0c:62:48:25:1b:36:b7:93:6a:88:9d:50:99:4c:
44:c1:08:b1:d5:41:5a:0d:0b:c4:67:8a:62:62:a7:
8f:67:65:cd:6d:d2:fa:66:9c:f7:5f:57:43:83:61:
be:db:a2:5d:91:5b:7d:57:83:96:8d:36:94:ca:7d:
2f:ab:a5:b6:94:bb:0c:2b:a1:d2:85:b0:c0:1b:4a:
1d:b5:e9:37:1b:d7:6d:44:80:c8:05:54:b8:53:d4:
40:b8:a5:00:06:4e:3a:bc:db:39:8d:8f:9e:bf:1e:
93:20:80:68:31:19:93:78:a8:c8:10:57:fb:34:48:
66:6f:2e:de:1e:8d:98:36:9d:8d:f5:d3:91:44:c2:
f8:b0:1a:8c:36:b2:bc:55:6e:8a:4d:7c:7c:64:7d:
27:6c:83:f3:47:e5:25:07:44:b3:8f:28:9c:60:f7:
7a:4b:4d:cd:1a:4c:11:cc:ab:3d:62:b8:da:9f:01:
e1:98:9d:46:4b:9c:5b:0d:85:1a:4b:c2:d4:5f:8e:
b0:48:57:34:d1:35:20:95:be:ee:a0:3a:65:e3:b6:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:9A:F3:95:53:8E:15:D5:76:D6:C5:CF:DE:3D:8C:92:54:56:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4040::/48
Signature Algorithm: sha256WithRSAEncryption
68:69:45:8f:69:11:2f:9a:7f:85:a1:b5:01:77:69:eb:f1:50:
61:83:fd:5b:da:7c:00:68:a7:0f:55:67:15:91:4e:63:a6:0a:
eb:0c:70:71:57:bc:bd:77:24:0d:a9:c4:40:0c:12:7d:be:94:
38:a5:3a:b5:c8:e6:5d:7e:e7:97:5b:ce:c6:9a:8c:29:85:97:
dc:ec:60:9f:02:e2:7b:0c:24:c4:00:26:77:eb:1e:10:ec:ef:
6d:7a:18:7b:5c:84:c2:90:a9:70:40:fb:21:cf:e7:d5:14:ac:
10:11:3f:8e:85:3e:71:ad:9b:76:3b:15:c4:8a:57:53:7e:75:
a4:4c:13:aa:0f:72:64:ae:8b:56:35:e8:ca:8d:ef:d6:33:57:
86:89:99:3b:5f:c9:39:ae:60:47:4d:f5:f9:64:5c:99:f9:1f:
d2:39:6e:6a:5c:21:95:40:d8:96:84:39:15:ba:0c:20:95:26:
3e:aa:3e:61:a9:7a:d3:6c:76:bf:88:37:6d:af:25:b4:5a:dc:
25:03:46:7d:80:ee:33:39:27:63:81:36:bf:98:94:b0:55:f5:
b2:dc:de:27:f0:48:d4:d7:3d:3f:8d:49:3a:5c:77:c0:df:9f:
6c:75:32:a5:8c:5a:e5:1e:a1:25:5f:03:72:f3:f8:6e:a3:05:
89:f8:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 17:49:21 2026 by rpki-client