Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
File: da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa (raw, json)
Hash identifier: 5BmGDehX4vdRor3R5qVyN+bIxc2BcYfClAS7Fseu0O0=
Subject key identifier: 2C:E3:35:5E:52:CB:1F:23:D2:B0:B4:A8:35:14:AB:76:09:D5:10:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62745874A82EC1D94D97D3110648E34944FA7751
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
Signing time: Thu 12 Mar 2026 15:41:26 +0000
ROA not before: Thu 12 Mar 2026 15:41:26 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:74:58:74:a8:2e:c1:d9:4d:97:d3:11:06:48:e3:49:44:fa:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:41:26 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=69289d18bec4ef8420db19fd6d5196dd322b465298c612dae35f6edbe47d097a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:43:4a:18:71:96:17:34:f5:0b:ab:68:8d:
6c:b0:ba:6b:bf:45:85:8b:70:0c:c9:b4:f8:8d:2c:
90:e8:e1:2e:c9:2c:d8:db:b5:e0:48:14:4a:33:0e:
11:a4:d8:17:c6:35:ce:fa:05:a9:c6:09:71:7c:06:
4c:89:b6:d0:8b:4d:b2:2e:04:d5:ff:fd:47:87:5f:
25:0f:f3:0f:ab:69:21:1d:6d:fb:fe:5d:e1:8e:2f:
b0:83:5f:a3:c1:0c:a1:88:13:c7:c0:4e:0a:38:48:
90:02:8c:87:16:8b:74:ea:8e:da:44:93:8d:17:51:
d6:43:0d:3e:dd:d0:ca:99:ef:8c:ad:cf:ab:a5:a4:
e7:9a:f4:ee:fd:fc:c8:98:26:ac:70:5d:fc:33:5d:
83:34:8c:b4:b0:8c:64:f2:4d:c0:fc:55:fd:fe:30:
4b:a3:9d:fb:29:2d:07:1f:36:7a:30:d3:fe:1e:54:
dc:cc:98:91:1b:aa:78:3d:ae:3e:bc:e7:92:a6:6c:
76:3a:65:66:b5:2f:08:98:97:68:fa:da:1a:45:82:
bd:da:e5:3b:90:c8:b2:a5:ce:88:b7:0b:17:93:bb:
95:8f:1f:b3:5c:70:cb:23:5e:43:14:8f:13:4b:50:
8b:75:d2:1d:36:15:c8:6f:20:c3:22:00:ff:be:e0:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:35:5E:52:CB:1F:23:D2:B0:B4:A8:35:14:AB:76:09:D5:10:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:6e:6a:3e:5b:4f:7e:68:86:1f:2f:48:04:10:90:80:3b:6e:
bd:57:88:90:0c:23:d9:9d:a5:f1:fc:be:21:f7:98:03:dc:2c:
29:7f:e0:2c:b1:a0:e0:29:9c:e7:c7:b6:00:80:56:be:c3:89:
7a:4b:90:5a:71:5c:30:a7:8a:ca:fc:65:0a:6b:46:4a:24:48:
b0:03:6a:4d:aa:3f:b3:94:d2:60:1a:e9:55:68:12:3d:31:d3:
9f:4d:b8:f9:77:c2:40:f7:58:4c:22:87:1f:d4:02:75:f8:0c:
02:a2:04:ca:9b:24:a2:db:96:49:ed:2d:21:2e:18:71:8d:3a:
4a:dc:2a:f3:4b:4f:3f:89:8a:62:d8:ee:a7:b1:b4:3d:92:32:
1e:00:6e:37:24:52:60:0e:85:8f:01:c8:f6:92:18:9f:be:cf:
4e:23:63:6b:49:b8:f5:2a:e2:83:c7:1f:75:b4:dc:b7:04:b9:
52:0b:de:d6:81:08:e0:a3:e8:6a:c4:9a:e7:9a:45:5c:19:c6:
3e:13:ab:a6:31:be:21:63:96:ab:e7:94:fc:87:81:c4:87:3a:
24:46:28:0f:80:c7:27:35:b1:dc:39:01:50:22:da:8a:df:f3:
2a:0c:13:5b:d9:bc:b2:ec:93:10:94:52:43:7b:7d:99:42:37:
7a:7d:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:57 2026 by rpki-client