Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa
File: c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa (raw, json)
Hash identifier: RLj9N9uTqx+UDdVydoNH9d+NQZ1DSmgr0kigptggYAU=
Subject key identifier: DE:2A:9B:42:07:43:F9:E4:6A:4C:C4:26:92:70:82:62:C4:51:28:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D7A9941912211FE8A43FBB925E1C6AE1AC964D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa
Signing time: Thu 12 Mar 2026 15:40:08 +0000
ROA not before: Thu 12 Mar 2026 15:40:08 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7a:99:41:91:22:11:fe:8a:43:fb:b9:25:e1:c6:ae:1a:c9:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:40:08 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=f799f02f802646d5ebbd941cdd6db4628437619773d9d6ba462f1cddd530193a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:5a:fd:58:b8:df:b7:43:90:29:d5:f6:e5:
96:a3:bb:bd:63:c6:8f:50:9c:5a:81:29:80:ea:3e:
b3:15:af:41:08:aa:5c:a2:7e:ab:46:a0:a7:d0:5e:
c0:3f:97:da:2a:8a:e5:58:8d:c4:b7:86:f5:5e:ca:
db:46:81:0c:74:05:bc:f3:29:fb:d0:8e:73:09:9e:
79:56:96:d9:4c:3c:3c:b5:09:a8:46:92:42:4d:e1:
5c:16:30:80:5f:88:2b:62:db:d3:f9:77:5e:0a:6f:
10:93:17:67:00:03:0f:34:30:74:8d:15:55:78:a0:
ad:8e:97:37:28:58:8d:9b:54:08:b5:de:6e:71:43:
ce:e3:72:4f:10:69:9e:d1:58:f2:1d:08:03:a0:1f:
ce:af:29:2a:a1:a5:08:36:75:b0:72:c6:bc:d8:3a:
48:ee:c5:68:f3:a0:24:9e:56:c9:fe:73:60:3d:ee:
e0:82:17:ff:3f:b6:98:18:23:c3:b2:cc:59:7c:96:
90:2b:1c:6c:23:fc:c3:b0:96:73:84:44:c4:52:1c:
2f:a1:dd:e7:68:3d:91:6b:88:c0:9b:59:80:30:c7:
10:8c:91:8c:ec:3c:b5:f8:ba:f0:b5:e1:98:7d:91:
41:ce:86:a3:ad:9a:e7:86:74:b4:fb:86:c4:93:3f:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2A:9B:42:07:43:F9:E4:6A:4C:C4:26:92:70:82:62:C4:51:28:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:a000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:48:8d:27:80:80:f3:15:45:40:b3:fb:b6:f4:7c:83:3c:8c:
33:5e:4a:07:96:d5:1b:ef:64:4d:36:0c:4a:4b:0c:3d:53:86:
37:0d:cc:59:8f:be:63:d5:20:2b:bb:90:42:35:40:b7:80:44:
90:2d:65:b7:9f:48:2a:da:16:29:0f:4e:62:a7:cb:32:08:44:
f7:d3:17:54:3d:83:0c:1d:a2:f7:87:a5:e0:f5:e1:c1:39:d6:
ec:90:8d:fe:a0:08:59:82:f1:09:5d:22:3e:a9:61:68:e4:2c:
aa:46:58:cd:28:d0:9b:06:d3:0c:fa:67:ed:94:81:87:d8:f8:
f8:99:d8:be:92:6a:51:2c:d5:45:c2:29:82:b9:b1:04:9b:db:
77:c6:08:cd:c3:30:8c:3b:39:c6:d0:9b:e1:28:21:d7:5c:9b:
21:30:d9:cb:fa:35:de:27:7b:fa:d8:95:8c:cf:74:b0:62:59:
13:47:99:7f:4d:f1:01:7c:6e:5a:5f:47:65:16:34:37:b1:13:
00:b8:65:64:4d:0b:95:37:b1:de:ba:17:bd:10:d5:f8:6c:4b:
6f:e8:c5:26:38:9d:20:6d:a3:d1:dd:db:d4:84:08:00:49:ec:
44:35:e8:cb:d6:2b:8c:cb:ea:74:76:2c:47:11:81:ac:d5:cd:
8d:5f:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:17 2026 by rpki-client