Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e52a64ed-43e9-4417-8272-168df08a0f3d.roa
File: e52a64ed-43e9-4417-8272-168df08a0f3d.roa (raw, json)
Hash identifier: jxZKrELXbNcVt60o9h0fXP/xnsA/CTOd4kZTOu04h+w=
Subject key identifier: 2F:F0:90:47:18:9A:47:04:0C:20:D5:CD:51:AB:FC:11:79:DE:23:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BBB18C4332AEE79C1E34543FE592A8438D3C875
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e52a64ed-43e9-4417-8272-168df08a0f3d.roa
Signing time: Tue 18 Aug 2026 18:12:55 +0000
ROA not before: Tue 18 Aug 2026 18:12:55 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bb:18:c4:33:2a:ee:79:c1:e3:45:43:fe:59:2a:84:38:d3:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:12:55 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=91c6703a17334333841de8fa7e81b3c64fdcf67da6fa77ef60ab8e8b2bd0b533, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:8a:14:16:1b:5e:33:00:90:89:19:2f:55:
c3:d4:9d:71:da:df:ef:6c:f1:90:bb:5b:80:8b:3a:
87:f5:ca:33:4e:1c:d2:a9:72:6c:bb:6c:cd:07:a1:
52:37:76:48:25:4b:ce:80:d3:3a:c7:5c:1c:67:eb:
cd:66:81:e8:62:96:64:68:82:6a:14:26:74:2c:e8:
34:25:e6:17:7d:11:e5:6f:9d:48:26:cf:5d:70:94:
aa:2e:ed:53:dc:1f:80:20:aa:9a:74:23:69:92:0c:
67:e1:0b:ba:20:6e:45:44:d7:f3:46:1c:8c:7a:40:
10:2a:c4:b2:c7:97:45:6b:3a:7a:cd:b8:a1:02:5f:
dd:2c:7b:03:2d:aa:c9:0c:4f:ab:66:61:7a:24:28:
a4:62:9f:7f:b7:15:2a:b8:c4:58:39:70:19:bf:d9:
5a:59:19:c7:6a:30:8f:39:51:0f:17:b9:a8:eb:e9:
d6:bb:a3:98:9e:04:03:ea:20:1b:7c:1b:cb:77:79:
f0:73:e5:93:57:19:00:4b:6f:f8:70:41:6e:8b:4a:
77:04:d8:7d:e6:1f:46:57:a2:29:34:ee:f8:6b:a2:
c4:b2:41:f5:0e:e9:27:36:47:42:5f:50:d7:af:2b:
be:fe:9d:ee:a7:a4:af:59:81:67:f2:4f:62:56:f7:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:90:47:18:9A:47:04:0C:20:D5:CD:51:AB:FC:11:79:DE:23:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e52a64ed-43e9-4417-8272-168df08a0f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:57:9d:af:e8:19:a4:9a:1b:e9:7a:56:96:8d:40:b2:72:45:
95:a0:31:aa:ff:18:83:b8:7d:7d:a2:5d:69:1e:34:4e:1b:01:
35:24:71:7c:9d:9d:48:5c:bf:42:ca:94:24:b2:47:58:8e:25:
4a:ad:0c:ca:58:f2:1b:8d:c4:32:0f:64:08:c4:01:a4:d2:98:
7f:e2:8c:dc:7d:b0:ca:89:0c:32:57:a0:b2:7e:94:30:ed:ba:
1f:c1:ac:af:65:07:99:4b:68:e1:89:0c:2a:7b:f7:0b:d0:1d:
4f:95:cc:a7:34:bd:6b:f1:c1:6c:b6:f1:7e:83:e1:4f:f4:fe:
12:ad:f9:68:76:05:d1:77:be:25:ad:27:a9:7a:f1:04:84:50:
49:1c:e9:58:0a:e1:2d:91:af:e4:f0:2c:12:83:e5:b8:4b:81:
33:1a:07:06:95:b1:d2:a9:90:d1:f0:19:6b:4e:1a:42:0f:13:
00:dc:da:d3:57:c7:18:31:c0:36:80:0c:48:33:82:2e:72:2f:
26:41:c5:4f:de:f9:64:52:73:ba:31:6c:fa:04:1b:22:78:98:
3d:50:dd:78:7a:50:c2:d5:4b:7b:d9:bb:c5:51:79:c1:6b:c0:
ea:83:74:c0:e3:38:ff:7d:ca:a6:c3:b7:b1:61:c1:74:bd:ab:
d0:d3:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client