Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa
File: 5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa (raw, json)
Hash identifier: toq7x8mpEbQZDABxJNpgr8ujycJgOmpT70Un8iEKJNw=
Subject key identifier: EA:56:7B:4B:B9:0E:7E:FB:AC:48:45:84:B5:EB:5B:0B:18:7B:A6:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 432381704948E5FBFBA387DBF3FB525D851B5907
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa
Signing time: Thu 12 Mar 2026 15:36:40 +0000
ROA not before: Thu 12 Mar 2026 15:36:40 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:23:81:70:49:48:e5:fb:fb:a3:87:db:f3:fb:52:5d:85:1b:59:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:36:40 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=b801a43b782f1b43cb6d00f0c0f5198a0a26a9509af4b1386baa6f0361a6d063, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:6e:5e:7e:de:ee:db:6e:55:b8:37:fe:ff:
83:d4:3a:7f:eb:49:1f:22:58:65:09:26:08:ac:6e:
2b:b5:29:b3:67:52:03:30:4e:21:e7:ff:20:0f:bf:
f8:8c:45:c4:cc:e6:28:b8:20:db:4e:d7:6b:05:50:
78:c5:85:cb:09:bc:b3:56:08:5a:f6:49:43:78:69:
98:f2:95:33:ae:d0:aa:c2:c7:16:48:5a:0f:b4:03:
7d:18:9e:f0:d4:24:69:fc:1c:26:c4:ec:89:94:71:
cf:0d:39:71:22:1e:15:e0:f1:ee:0d:b5:47:89:b2:
ae:3b:67:cc:32:15:09:28:d1:5f:dc:85:ec:5b:96:
a2:a0:e3:b4:45:3c:61:d7:30:2c:9c:36:d7:34:66:
81:4c:c6:b8:d6:93:76:ce:f6:2a:86:b8:4b:d9:1d:
f7:b6:61:c7:2e:24:54:6c:ca:c4:41:3b:28:9d:e4:
c5:e4:85:b5:42:52:98:27:b3:10:ca:58:d6:75:b4:
db:e3:64:b7:3e:15:c4:4f:c0:8c:23:2a:2a:9b:00:
23:33:01:02:47:f0:a9:bd:e2:32:3b:e2:ea:91:00:
e2:49:57:c0:52:de:4b:a5:aa:23:5c:cb:57:c3:8d:
7c:be:d9:67:58:23:6f:6f:7d:ef:3f:11:b3:8e:94:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:7B:4B:B9:0E:7E:FB:AC:48:45:84:B5:EB:5B:0B:18:7B:A6:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:e3:bd:09:a3:71:b9:34:20:e7:b3:23:f5:70:ca:4d:2f:ca:
30:17:46:3e:b7:51:69:74:03:db:1e:10:73:7c:47:e2:71:ed:
f1:20:d9:5a:a4:01:fc:ee:d6:87:18:57:04:53:7d:d3:25:f7:
05:9f:8b:47:0d:2f:a2:16:17:f0:07:0d:c0:9f:eb:b0:8c:0b:
bb:4c:28:1c:21:c8:89:09:67:1c:f7:24:bf:b6:c2:48:7c:25:
4b:1b:0f:13:a1:95:7a:51:4a:d6:f5:f1:8f:5e:e0:9d:1b:09:
2d:a6:f7:39:4e:87:e9:ad:ae:06:e2:b0:d1:ae:66:db:f8:ab:
eb:55:f1:f0:4d:9b:41:c4:be:1e:62:a1:40:52:22:ba:03:db:
cd:71:ae:45:97:ab:78:3b:4a:c9:d2:c8:dc:c6:88:f4:69:dc:
44:f1:e4:4a:6d:52:16:5e:a6:2e:63:a1:31:32:ef:b2:f8:51:
7a:70:ed:7e:90:5a:0e:55:b7:e9:ef:73:e5:56:36:1a:e9:da:
03:d3:9e:14:32:c5:29:3e:38:3f:65:75:52:58:b2:48:a9:da:
9b:e2:cb:a8:c1:c3:91:80:53:6d:16:4d:4d:ae:ec:0b:89:df:
36:f5:f3:e0:c9:49:41:73:f4:96:7f:69:55:e0:e6:28:24:58:
90:c3:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:18 2026 by rpki-client