Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8688b9c1-9a76-4d87-b042-a086fadce46b.roa
File: 8688b9c1-9a76-4d87-b042-a086fadce46b.roa (raw, json)
Hash identifier: 340Jksez4GNaBOyPkDV9raWjUVCXmq3fqXnEJOi0hO8=
Subject key identifier: 21:C3:A9:77:61:1A:7F:3B:7A:99:1F:EA:1C:E8:48:A2:35:4F:EA:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BA303AC6F71E5B11A0F2F24C2CB396E4C01E5E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8688b9c1-9a76-4d87-b042-a086fadce46b.roa
Signing time: Thu 12 Mar 2026 15:38:24 +0000
ROA not before: Thu 12 Mar 2026 15:38:24 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a3:03:ac:6f:71:e5:b1:1a:0f:2f:24:c2:cb:39:6e:4c:01:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:24 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=d70c8ab816d977323c2d04ecc3eac3fbe8342c92b81781b84d077882bb7783de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:eb:0a:43:a8:63:55:e4:18:62:3d:43:34:
67:2b:7a:58:ac:af:0e:24:47:e8:81:ed:be:c8:99:
e7:13:93:73:8d:6f:24:8d:da:0f:5f:73:5e:85:2c:
74:65:39:ac:84:a1:7a:0a:61:00:97:15:77:83:b0:
fb:d0:d3:4e:e2:d8:50:0d:bc:60:ab:9d:0b:8f:f3:
f7:6c:e8:fb:cb:d1:cd:09:b3:38:63:98:0c:7d:05:
71:6b:a1:4f:20:c4:3a:67:55:2c:07:83:60:53:bf:
fe:a6:f3:37:f1:70:5a:72:cd:d5:51:2e:c7:b0:76:
9d:b3:a6:e7:87:72:6d:1b:26:77:b7:67:d2:5f:d3:
93:2d:b6:a1:3b:fb:de:2b:cc:08:0f:fc:5d:0e:77:
bb:f1:6c:d6:d8:bd:ad:94:e3:98:56:a6:f6:18:c7:
46:95:c6:cb:9d:5f:61:e9:ca:d9:ac:cf:01:92:10:
8a:6d:d6:d2:cb:cd:14:f4:04:2a:26:d9:fc:2e:fe:
00:f2:aa:38:fc:d1:9a:80:92:2a:9d:f4:7f:ea:44:
5d:e6:d3:38:62:1e:4b:ed:e2:7f:de:95:70:10:62:
98:01:bd:6e:b3:a2:41:41:42:f4:97:96:bd:80:14:
f6:de:5d:02:77:c9:5f:bb:4a:f3:ff:99:f2:97:0f:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:A9:77:61:1A:7F:3B:7A:99:1F:EA:1C:E8:48:A2:35:4F:EA:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8688b9c1-9a76-4d87-b042-a086fadce46b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:e040::/48
Signature Algorithm: sha256WithRSAEncryption
9b:43:41:39:ca:00:6d:c8:fd:ae:74:8e:66:66:28:98:b9:e1:
cb:3e:c7:10:47:43:b9:ba:15:0a:d3:e8:9d:03:de:03:0a:41:
39:3a:f8:49:69:ea:08:2a:da:d9:4e:40:4e:bd:b9:80:5f:48:
a5:a7:31:0c:96:e7:e3:9f:ce:b6:6b:32:d7:a2:e8:a4:68:6f:
b8:c7:e7:bf:6d:f6:de:a3:bd:ca:67:75:93:d9:dd:a6:ab:15:
97:74:2f:e1:6a:1f:f3:1f:49:1f:8b:44:9d:23:1c:f8:1d:c7:
d7:c3:51:03:c1:92:37:bf:c7:67:32:cd:68:0b:10:ce:9f:b5:
9e:f0:9c:81:dc:48:d2:ee:58:6b:41:28:18:a5:c3:62:82:a9:
dd:89:f6:38:d2:84:43:59:6b:2c:25:b9:d6:c7:81:cb:8b:82:
3a:5c:b2:32:53:14:99:5e:af:fd:15:52:b2:0b:5d:8f:a4:d7:
c9:83:77:23:38:0f:99:8e:dc:76:b8:d2:d1:3d:81:9f:2f:c2:
7c:1e:2e:b9:ad:d3:26:0f:0e:68:c6:7c:b1:26:bc:89:30:93:
0c:1a:63:56:be:86:ee:bd:6c:e5:e5:a8:cd:a0:80:fd:79:1c:
cf:1a:0b:b4:c5:64:8e:ed:fc:6a:00:63:f9:ad:45:da:f5:fb:
62:62:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:56 2026 by rpki-client