Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa
File: ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa (raw, json)
Hash identifier: USufkSadx16iRtHGuy5+LNOay3MXvPSDG7z8uQFI4sk=
Subject key identifier: FB:E8:53:39:40:E3:FB:B3:28:CB:4D:1C:4D:6E:86:C5:A6:CD:8F:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BD9AE4712B141E6EE20D5A5C11350FBDE3B444F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa
Signing time: Thu 12 Mar 2026 15:38:27 +0000
ROA not before: Thu 12 Mar 2026 15:38:27 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d9:ae:47:12:b1:41:e6:ee:20:d5:a5:c1:13:50:fb:de:3b:44:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:27 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=db4561b208a34bb3e31698baeb36f278f5ed35db75822853e577eb43bf27c9fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:e0:67:bd:ea:49:55:e6:ee:7d:fa:f9:9f:
aa:6b:07:cc:86:5f:8b:36:6c:c7:52:56:f6:5f:c0:
af:2d:2f:76:f2:96:c1:fc:4b:4d:6d:35:e1:bc:29:
33:ea:cf:8e:d8:05:54:3b:f1:b6:e5:8c:45:8b:39:
09:ec:40:08:fb:15:ee:e9:bb:61:b3:95:14:9e:4e:
41:b8:2c:e4:21:89:34:f9:4e:4e:ea:74:cf:f1:03:
de:00:b4:5a:4c:13:66:d4:a4:06:12:7e:b8:b6:55:
85:49:4c:1b:44:5d:7e:2f:36:32:4b:63:82:16:ab:
15:9e:f6:5b:d9:f0:d9:4e:71:a8:ed:b2:8c:7d:eb:
03:16:c2:94:c9:0e:1d:15:9f:31:c3:bf:07:8d:95:
f1:df:c7:47:c3:5d:70:a0:d1:05:5a:d9:43:17:f2:
99:62:b1:92:a4:57:b2:cc:4f:dc:e8:29:ba:15:3e:
c1:f5:48:c1:fb:04:44:71:47:68:cc:d9:ad:31:47:
84:6d:30:20:6c:7a:58:44:39:16:07:0a:63:f1:b1:
98:ed:58:bb:e8:04:c7:67:d3:d2:cf:ba:5f:ae:a5:
16:11:3b:81:97:22:e2:28:bf:60:a9:dd:ec:d0:4e:
d1:ec:2d:b7:82:c8:01:2d:7f:24:fe:39:db:2f:3b:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:53:39:40:E3:FB:B3:28:CB:4D:1C:4D:6E:86:C5:A6:CD:8F:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca2a6462-f06a-427f-bb4a-06d3ea6a933a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:2080::/48
Signature Algorithm: sha256WithRSAEncryption
1b:13:03:a1:cb:32:50:f1:8c:11:28:5d:ba:b0:5a:85:7b:59:
bc:a1:d0:96:3d:29:a2:fa:ba:92:16:71:8b:8a:19:79:ba:78:
39:b0:20:b6:d5:b2:ca:05:ad:3c:c9:f6:88:d3:88:4f:5b:5e:
5f:8b:41:44:f6:a8:56:8d:5f:03:4a:4d:77:31:a9:89:b8:50:
03:b3:a1:3f:f4:fc:4c:9f:76:02:55:3d:46:bf:3b:63:aa:1a:
ef:b3:d1:47:77:59:88:4d:ab:e5:ab:85:a5:1d:7c:73:ed:e9:
05:ee:cc:21:e3:e6:9b:63:40:6b:2e:8a:b6:d3:4f:31:ab:da:
e6:ca:5e:59:0e:d1:3b:7c:52:5a:2b:63:c8:07:9c:a2:1a:09:
83:d0:c3:5c:cb:9a:4d:c4:4b:5e:5d:09:70:0d:cc:8f:47:6c:
08:2b:3a:e3:69:b6:92:d6:05:1a:35:1f:91:b8:30:44:bc:93:
37:56:ce:af:5c:5a:53:5a:eb:0b:5a:15:67:32:8e:dd:8c:52:
7e:b0:ad:e4:83:a8:0f:d3:db:98:90:df:c6:cc:e0:b0:63:c5:
27:9b:d4:2b:b7:29:db:da:9f:5a:27:ee:20:8c:65:63:13:9a:
01:7a:fc:44:ea:57:76:17:34:00:88:15:6d:3c:b2:b5:bd:f2:
aa:d4:eb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:56 2026 by rpki-client