Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa
File: a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa (raw, json)
Hash identifier: 2ysnb1l3mIglzGgzxHnbsR5qNfk1PKkDT4vI/JXJV3s=
Subject key identifier: F6:97:B8:FD:CE:75:5C:AE:E7:9E:C6:0F:D7:43:1E:2C:C0:ED:A8:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 458A45492982F83270DBBB7861133EFADF844684
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa
Signing time: Thu 12 Mar 2026 15:41:24 +0000
ROA not before: Thu 12 Mar 2026 15:41:24 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8a:45:49:29:82:f8:32:70:db:bb:78:61:13:3e:fa:df:84:46:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:41:24 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=a8aa4d8b04adc9e6cc57adf1682adf6fd055601b6f9ce5c97d8e7270bda53d3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:d4:bc:1b:af:b8:39:b6:1a:7f:0c:f9:b4:
fe:19:b5:fe:91:59:84:0f:34:a3:4d:1b:d4:3e:97:
a2:2d:62:9c:c1:23:32:65:77:94:8c:e3:8b:03:d1:
78:15:f2:b5:5b:74:b1:87:f8:84:10:0f:e0:85:b6:
bc:ed:3a:42:d0:6b:3d:17:d8:d0:15:77:99:9f:f8:
87:88:f9:a5:27:db:d8:74:5a:e6:0c:18:01:97:11:
cc:5c:ed:a6:7f:9b:74:94:66:c2:12:35:56:fb:68:
13:2b:d2:70:19:11:af:2e:d3:78:92:81:b6:76:35:
d0:e0:f2:33:dd:bc:42:ca:c0:96:59:c2:52:7c:a9:
ba:36:05:37:b1:af:61:96:7a:39:0e:51:29:4c:11:
12:11:46:c9:3e:69:41:c8:fa:07:19:d9:6e:28:ba:
a3:6b:53:4d:ab:c0:84:33:68:4b:3b:2a:14:f9:42:
56:eb:a0:15:09:f8:b4:0f:c3:d8:c1:ec:ef:66:3c:
e8:2a:62:4a:a0:1d:15:da:1b:2b:56:8f:01:48:43:
d7:9a:b5:ba:13:9f:fb:b5:3e:98:b4:25:81:ba:15:
70:93:bc:0a:ea:93:e8:f2:2b:31:5f:92:da:32:66:
98:6d:9c:96:b6:d3:f9:a4:f6:8e:07:2d:b5:90:ff:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:B8:FD:CE:75:5C:AE:E7:9E:C6:0F:D7:43:1E:2C:C0:ED:A8:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0f6fb02-62ef-44b6-be63-dabac16f02dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
2c:59:bf:0c:99:29:5c:fa:75:6e:f8:75:9f:a3:89:7b:69:21:
6b:cb:12:f3:43:09:65:d6:b1:1b:08:54:19:0d:f3:78:9a:02:
fb:fe:46:e9:ec:3e:7e:3a:eb:29:62:01:42:3a:da:a2:b7:e4:
3b:4f:17:69:fa:42:1d:5b:7c:eb:00:b9:f6:e1:2a:64:17:45:
ce:52:dc:28:67:74:ed:5a:c9:32:41:39:6a:63:33:21:71:50:
c0:f4:9e:40:c9:82:27:1e:71:a3:b8:ae:7d:5b:10:82:4e:24:
1b:f6:8b:07:d9:88:a2:bb:bc:9a:e5:f9:88:bb:ec:59:fb:e6:
d7:1e:88:57:61:85:07:69:9a:c9:ee:0f:8c:b1:69:66:a6:a7:
d9:88:82:03:60:09:77:c4:4e:74:aa:5e:d8:2c:c2:91:48:9b:
2c:f5:87:54:35:f6:e1:a8:19:ea:6e:51:22:78:dc:73:37:28:
0b:a9:58:68:1f:31:3d:97:e9:2c:37:1d:4c:47:62:e8:b8:98:
27:cf:5f:5a:0f:8a:72:9d:6b:68:e3:75:fb:5a:43:34:a5:78:
86:cb:25:ed:7a:6c:ac:35:97:17:6c:82:96:33:83:da:f6:b4:
b9:8f:63:be:5a:59:03:63:b2:5e:9f:ea:2f:21:0e:74:41:5a:
eb:85:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:19 2026 by rpki-client