Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa
File: f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa (raw, json)
Hash identifier: e99/CrtwNOAiuD+PNH04HOhP/OdO7+jLqnjZ/jitEyc=
Subject key identifier: 60:82:A2:43:F0:01:2A:6C:34:95:E5:76:51:01:3D:0A:9E:8C:11:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32E1D6052CB43841104EF0FE720E41B20AFB646B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa
Signing time: Thu 12 Mar 2026 15:36:39 +0000
ROA not before: Thu 12 Mar 2026 15:36:39 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e1:d6:05:2c:b4:38:41:10:4e:f0:fe:72:0e:41:b2:0a:fb:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:36:39 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=82146c37eb64a568d57d844a5643bff6db4af801535a186a7b621821a5204d20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:36:91:a3:9d:e5:3b:5e:e3:fb:34:a4:40:
6e:7a:f1:37:e0:6d:6a:28:f0:64:f1:1c:2e:be:b1:
7e:7c:f2:0d:58:29:55:5a:6f:f9:71:2a:f0:19:70:
a1:b0:64:80:11:bd:e0:b0:d7:c5:21:07:5e:8b:b5:
6b:ee:76:dd:8e:a4:25:c7:f5:f9:78:4d:30:23:1f:
f2:cd:d5:df:cd:41:ba:23:49:fb:f3:21:3e:f7:54:
76:10:93:ee:4d:d8:b3:19:8b:5a:0e:bb:89:26:6b:
c5:27:6e:f2:3f:c2:ba:ed:f1:05:d7:db:26:55:9e:
92:54:cf:fb:df:f6:59:eb:15:9b:45:bf:64:38:7a:
28:5e:be:2e:f7:62:be:f6:b2:eb:db:14:1b:78:43:
c7:08:fa:a9:69:82:6b:c9:ab:0f:fe:69:d4:fb:61:
15:ac:fa:0b:dc:1e:36:cf:77:54:00:2c:e7:56:16:
e0:fd:02:d5:a1:ae:7b:87:2b:bb:25:7d:01:73:c6:
2e:82:28:ee:d4:9c:53:87:3b:60:08:ee:5d:64:4e:
c7:26:00:d1:1c:0c:a9:3a:3e:c5:1a:21:39:82:8d:
8f:0b:46:df:77:08:06:f5:d5:10:db:8e:d5:6d:9e:
a2:f0:17:58:67:5c:d5:4e:ef:9f:a5:9b:07:02:ab:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:A2:43:F0:01:2A:6C:34:95:E5:76:51:01:3D:0A:9E:8C:11:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f8336e9d-2d0d-44fb-9ea1-0cf8cfef8cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:2080::/48
Signature Algorithm: sha256WithRSAEncryption
64:3d:fb:b5:5b:38:c5:88:6c:15:f8:4c:fb:89:16:a1:fc:ce:
f6:f8:0a:96:1d:4c:a3:d8:3a:be:96:c4:6e:2c:93:1d:7f:9f:
19:70:3f:e7:7b:35:64:7f:26:6c:4c:f5:61:ac:e7:b7:da:77:
a5:0f:87:03:c6:13:85:3d:5f:fd:35:e8:8c:2c:99:64:14:95:
f2:dd:67:45:a6:8a:95:69:91:d9:8c:ff:0e:3b:23:cf:da:c6:
33:63:41:1c:10:b0:f5:39:fb:5b:2c:70:df:7a:e9:b7:8d:ef:
ec:2a:90:17:11:bd:f6:ea:e9:58:f0:a1:3c:1d:13:0b:45:84:
b6:f0:9c:7c:0b:60:ad:02:48:0f:5b:4e:a4:c3:99:a1:49:55:
da:ba:63:a9:00:99:02:fe:9f:0f:44:43:40:37:c2:87:55:15:
5a:0d:26:74:87:07:bd:83:fa:a6:7c:06:61:f4:cc:6c:55:dc:
6b:4e:ef:86:80:43:4f:6b:1c:20:a6:5a:26:65:c0:f6:e7:e8:
d2:2c:09:60:01:d3:9c:24:6a:d1:f2:86:93:86:50:ad:1f:27:
8d:3a:0a:bf:37:b8:e7:88:49:40:29:35:18:55:80:a6:f9:89:
6f:6d:cf:2a:9b:22:44:9f:31:fe:27:51:f0:2b:86:72:07:ec:
c6:93:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:21 2026 by rpki-client