Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa
File: 8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa (raw, json)
Hash identifier: +uX7YT+9pB8lvXHx+HU6pQxWrbJ0zFlrvXs/n4BNGUg=
Subject key identifier: 22:37:5E:51:98:9D:19:B4:A1:2D:44:21:6C:10:C2:1C:66:36:82:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2AC1A6FF67E9FF4CF4585AB363802FAC020B53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa
Signing time: Thu 12 Mar 2026 15:39:57 +0000
ROA not before: Thu 12 Mar 2026 15:39:57 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c1:a6:ff:67:e9:ff:4c:f4:58:5a:b3:63:80:2f:ac:02:0b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:39:57 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=a065b66b34de7e55173d4f40ae33df186e1aa036eb017176240775ca9ea90b90, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:d2:b9:df:0d:eb:33:51:6e:f6:0f:b4:cd:
dc:03:ab:61:fb:be:a2:5e:10:57:85:ba:80:57:bd:
e8:3e:e4:f8:4e:89:0f:fb:3c:7c:6e:76:e1:e4:2a:
5d:dd:ad:2b:08:81:70:e8:5e:0e:f1:71:52:c1:b9:
41:b6:20:e8:34:38:83:c1:19:a5:e1:c6:0d:60:c0:
3d:29:ea:e2:8f:4d:37:73:b0:25:e9:37:b2:27:4b:
1e:e4:03:40:40:76:02:71:0f:d7:28:9b:5e:48:c2:
9a:f3:af:8b:ce:06:1b:98:ac:d8:11:2d:2f:75:9a:
be:04:07:c2:86:b7:06:1c:79:11:bf:5a:33:86:e8:
3c:5a:77:56:15:ba:c1:f6:c9:3c:4d:94:96:06:4a:
36:f8:80:fd:5e:b2:39:76:f3:7d:da:f4:d1:ab:88:
b3:c3:30:82:d7:dc:d3:40:68:63:c8:aa:7e:30:ec:
53:fe:09:4d:53:4e:dd:58:aa:31:61:46:96:d7:93:
f3:1e:4f:24:8b:ae:76:3a:65:68:bd:2e:bb:bb:44:
dd:b3:b0:3c:ef:9c:d4:6e:29:eb:a5:c8:d3:bb:04:
36:cb:3d:ea:b7:7b:e1:dd:97:cc:f4:12:19:46:9e:
6c:3a:6d:8e:b7:2c:bb:83:f7:d2:9c:bd:fb:8b:cd:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:5E:51:98:9D:19:B4:A1:2D:44:21:6C:10:C2:1C:66:36:82:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:72:09:cb:fb:d6:79:29:96:17:73:95:0d:83:68:44:4b:02:
0f:3f:ba:4d:ec:88:0c:05:f0:14:6c:be:88:8d:e5:d0:a5:4d:
6f:c1:89:4c:41:6d:bc:74:06:7d:fe:25:5e:52:76:22:3e:26:
7d:b7:ad:26:58:fb:b5:37:8b:f8:fb:58:ff:54:9c:c5:5b:44:
ad:63:f2:9d:fe:e9:e3:d7:a2:5f:61:81:1a:ad:de:ef:1b:b1:
ff:cb:5b:3a:2b:20:7f:92:9b:88:1e:12:1e:50:d5:64:a5:aa:
87:74:81:41:15:ad:4f:d0:db:29:68:02:fb:ee:83:1e:cb:d5:
21:c6:db:5a:81:c7:f0:57:8f:f5:c4:46:a9:c0:1d:07:9a:6e:
4b:1b:9f:a7:f8:ee:65:3a:38:11:11:09:8a:cd:7c:ff:2c:8f:
17:22:29:0f:dc:59:43:7f:fa:5a:6c:56:c1:06:53:fe:bb:28:
2d:06:cb:cd:74:bb:97:11:4a:f4:a0:c2:38:5a:02:fc:f6:2a:
2f:39:75:56:9e:cd:ab:a2:63:22:4e:e7:85:9f:03:f0:b5:fa:
d8:33:48:10:af:bf:6b:d0:51:dc:72:eb:36:ec:8a:dc:89:de:
98:e7:0c:ef:3b:98:d0:26:2c:7e:02:ef:6e:92:bd:b0:ea:36:
19:6c:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:00 2026 by rpki-client