Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b348abf6-2f46-4ce4-b249-d512daadd2b5.roa
File: b348abf6-2f46-4ce4-b249-d512daadd2b5.roa (raw, json)
Hash identifier: 16+WNoDByRGNiAcfP/JkBmJVscFo1l/9bsvNt9zYOCk=
Subject key identifier: 39:22:2A:51:64:19:42:E9:DC:E1:9E:F2:54:C7:2F:45:F8:87:D2:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0BADB72178AB5076EC23E88FC836C92B5F8543B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b348abf6-2f46-4ce4-b249-d512daadd2b5.roa
Signing time: Thu 12 Mar 2026 15:38:30 +0000
ROA not before: Thu 12 Mar 2026 15:38:30 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ad:b7:21:78:ab:50:76:ec:23:e8:8f:c8:36:c9:2b:5f:85:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:30 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=75e5d719c1a2c9eebd3176ba33b45f0c5d2d7de0b75c55bc8b7cd734d0f98ac9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:48:d2:5a:8f:83:41:80:20:12:02:dc:02:
77:00:8f:94:77:5b:cd:29:e7:c3:ae:f3:11:f5:56:
39:59:ea:67:1b:50:0c:33:9b:32:55:2d:0d:cf:fc:
7e:c7:55:8b:61:36:17:84:5d:cd:93:de:41:40:ab:
5f:70:b6:5c:6b:df:6e:52:b2:00:c9:1a:92:78:2c:
d6:c1:d0:12:92:21:51:37:02:59:4f:48:d0:de:90:
17:ac:ba:61:0a:41:28:cd:52:7b:db:1f:5f:cd:20:
59:e9:81:23:dd:b2:6b:21:dd:fc:dc:3d:80:6b:ee:
d8:53:9f:79:e1:07:be:b4:3e:b0:67:8d:ca:ef:9c:
7e:b7:6c:62:d5:df:d5:f8:10:aa:19:3b:15:65:8c:
32:0b:3a:5c:45:51:cc:47:77:70:df:3b:76:1f:b9:
ff:e6:5d:92:4e:2a:c8:82:18:5e:8f:dc:63:ce:b8:
f3:cb:d9:63:b0:76:85:83:b0:31:b1:65:f8:59:dd:
c9:a3:df:c0:c5:7a:74:b3:fd:fe:d9:a4:23:1b:27:
3d:23:38:1f:21:f0:3a:06:7a:a9:ed:f4:2e:0b:05:
df:05:c7:40:41:6b:8c:9d:f4:ef:1b:b6:7a:35:7b:
64:c7:b2:eb:a6:17:bd:d5:36:6d:20:38:82:a1:62:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:2A:51:64:19:42:E9:DC:E1:9E:F2:54:C7:2F:45:F8:87:D2:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b348abf6-2f46-4ce4-b249-d512daadd2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
62:f4:f7:42:43:95:ec:04:e8:11:6c:a6:8b:cc:27:d5:03:d6:
b9:d3:1d:79:22:93:6c:96:8c:a2:b3:34:f5:b4:33:a8:d1:15:
33:de:96:48:1c:24:9e:d8:8f:c3:20:41:30:99:bd:a1:9e:c9:
be:82:49:f0:d8:bd:52:1f:0c:bd:fb:fc:65:e1:69:a6:be:98:
66:e8:e5:fc:ac:b2:cf:f1:19:30:fa:70:55:21:22:71:70:ba:
7a:bf:de:e9:88:e1:51:8b:1d:ff:c1:0f:19:d4:82:7d:14:af:
44:27:e3:15:a6:2b:1a:03:8d:22:6e:96:b5:f8:d7:e7:d7:91:
8d:28:ab:06:91:dc:81:d0:b6:32:1b:31:0c:cf:cb:5f:2b:44:
50:03:b6:f4:a5:0f:76:15:8d:d6:d0:55:a9:12:c9:35:d0:ef:
7a:e1:66:8f:df:49:0d:f8:5c:8f:b4:8b:fc:eb:b1:75:96:32:
ad:c1:8b:83:04:4f:3b:f1:62:11:3e:ed:01:0a:84:89:ec:f7:
4a:69:96:ac:3a:d1:1c:66:dc:31:8e:ba:5f:2c:f8:d6:db:b5:
e7:12:ae:22:fc:00:45:99:4f:9e:8c:a6:e0:c2:d1:c7:f2:51:
3f:ed:6a:bd:9e:b8:00:65:51:47:89:61:56:00:b8:76:5d:44:
01:06:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:58 2026 by rpki-client