Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83aa5ff7-8b33-4c11-a5cd-5729a2c61d5f.roa
File: 83aa5ff7-8b33-4c11-a5cd-5729a2c61d5f.roa (raw, json)
Hash identifier: af3j9fcPntwCyDWzjL1MWdcXQyKeM/z3QXFHc+ANkRM=
Subject key identifier: 81:F3:32:FA:02:5D:8C:C2:D9:84:A2:C8:F6:CD:A2:A2:EA:E8:BF:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 219D22AF939E1ACDD164E46746AF5FF35C802BBC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83aa5ff7-8b33-4c11-a5cd-5729a2c61d5f.roa
Signing time: Thu 12 Mar 2026 15:39:56 +0000
ROA not before: Thu 12 Mar 2026 15:39:56 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9d:22:af:93:9e:1a:cd:d1:64:e4:67:46:af:5f:f3:5c:80:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:39:56 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=aa06458c9432c134a8a9201add6c2bd1a0b951e779d516028d3cc67cdc244efb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:15:8f:9b:9d:09:03:b1:11:ac:6a:d6:61:
63:4e:eb:7e:d8:a1:48:28:e0:76:25:47:af:62:2a:
c3:8d:08:55:69:96:9c:c0:00:d9:ec:75:7b:d7:7a:
09:6e:ce:9c:2a:58:f1:07:77:d7:0a:97:03:b1:9c:
d5:e8:20:aa:5b:be:61:30:64:70:38:fc:11:89:41:
08:f5:61:96:59:7b:36:00:ec:55:ba:a2:3f:6e:a1:
ab:1e:60:67:ed:8c:c7:7e:eb:75:2d:b3:91:ba:80:
d5:86:94:fb:48:49:d1:21:32:d3:40:60:35:cf:12:
f0:78:ef:5a:d8:bc:05:b1:49:db:5d:74:55:44:04:
dc:28:19:9f:24:64:57:a1:4b:1d:28:99:16:81:ad:
1d:7c:a8:46:de:a7:ba:47:5c:77:5f:75:e8:94:af:
71:04:75:d7:89:69:d1:b0:4e:69:fd:15:bf:3b:e8:
d8:00:63:db:bf:00:04:be:c0:14:47:06:74:42:13:
a7:0b:28:c1:9b:39:59:40:23:be:cc:79:93:8f:6f:
73:37:fb:c1:0a:2a:fe:09:90:74:80:76:48:bb:97:
48:d2:b9:ff:5c:9f:23:a9:f8:b5:16:f6:5a:dc:9c:
5b:a1:a2:9a:c7:28:e0:b4:f2:9e:0b:33:5a:2b:b0:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:32:FA:02:5D:8C:C2:D9:84:A2:C8:F6:CD:A2:A2:EA:E8:BF:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83aa5ff7-8b33-4c11-a5cd-5729a2c61d5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:a040::/48
Signature Algorithm: sha256WithRSAEncryption
06:2f:ff:0c:8d:95:8c:31:78:67:a8:7d:83:3a:70:2f:a4:ca:
05:be:de:41:84:3c:56:bf:38:bc:a6:d4:be:41:62:41:e1:51:
b7:1f:93:95:f6:aa:9c:53:f6:11:6a:c7:84:4b:34:4f:d4:86:
d0:64:9c:95:3d:44:87:ba:4a:21:74:f4:32:7d:e6:5e:b8:49:
b8:2d:af:7b:88:a0:08:a4:04:be:f1:1c:78:27:4c:dc:e6:3d:
5e:b4:ca:a2:1d:97:fa:7a:7d:0e:5e:5e:e0:52:a4:18:ac:53:
c1:16:7f:ce:5a:15:a5:01:cc:3c:5d:ab:5d:19:02:3f:4d:a8:
53:b4:f4:62:29:cf:dd:d0:e7:74:a4:32:dc:96:12:08:ef:0d:
b6:16:27:b2:fa:89:bd:ec:3e:49:e2:30:e9:52:0b:c0:7d:da:
41:e2:6a:9f:cc:b4:f9:9a:3a:a5:ce:d8:b5:f8:a7:9f:3f:ff:
d3:22:c2:47:c3:cc:13:aa:45:c5:df:9e:a6:a0:74:56:42:c1:
b9:e8:1a:31:f0:ae:f1:7b:c4:f0:20:b9:19:6c:b6:a1:ad:32:
08:b7:dd:df:39:32:53:02:4d:e7:52:64:e5:05:f1:1f:56:8b:
55:b4:71:40:7f:1d:e1:eb:d2:b0:25:96:6e:f2:8f:55:ea:f1:
0e:1e:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:20 2026 by rpki-client