Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
File: e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa (raw, json)
Hash identifier: ua5fX0NLjqV4neAaoOXlnvSgqZMDMXNmtCnG/aB/FFk=
Subject key identifier: C8:5B:AD:16:54:DA:F7:A3:61:A6:8B:E6:34:B9:F4:6F:5A:F0:29:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 684EBFF8F7795E753DD7E56886835CD919D6D230
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
Signing time: Thu 12 Mar 2026 15:40:00 +0000
ROA not before: Thu 12 Mar 2026 15:40:00 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4e:bf:f8:f7:79:5e:75:3d:d7:e5:68:86:83:5c:d9:19:d6:d2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:40:00 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=c649144205c1a6e2e45139bf5ec39178cddac98ea6ec2b690332d8aac403a091, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:e9:15:09:81:03:45:2b:f0:f3:a9:ee:2d:
b7:e8:d8:72:57:a8:7f:f5:b4:5b:36:19:5f:fc:d4:
dc:35:e4:c3:f7:50:f7:4b:47:be:31:c7:bc:64:58:
75:9d:a7:87:97:61:dc:15:da:cf:bd:fb:a4:55:6a:
07:62:ae:cd:7b:cd:5c:9e:b7:42:97:18:56:91:50:
38:f8:e0:30:d3:1b:15:7c:62:75:44:a0:a7:7f:d2:
b2:78:e8:44:c5:d1:8e:c5:a9:05:5d:0b:d4:8c:86:
e1:c7:21:b8:af:de:c0:bd:a9:aa:68:c7:41:49:1b:
14:6c:8a:4f:bd:31:ec:c3:29:89:69:85:88:58:d4:
62:21:32:00:e1:35:99:b2:92:b9:af:5c:60:f5:70:
12:bf:01:4e:b0:2d:6f:e9:73:ca:39:23:27:37:94:
c3:e1:c4:e6:43:dd:61:d7:33:ea:cf:dc:ce:92:1b:
ca:0a:1e:22:a8:92:da:4d:62:b8:ca:4b:3c:a4:85:
d0:3a:27:22:3d:3c:19:e0:12:1c:41:e3:55:34:a8:
fb:99:b2:51:0a:79:be:6b:e8:39:aa:01:1c:6e:d3:
ba:81:6f:ff:64:40:62:ad:0d:39:a5:64:0c:99:98:
c8:a5:f7:3f:9c:1f:37:90:40:26:c4:cb:74:65:8d:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:AD:16:54:DA:F7:A3:61:A6:8B:E6:34:B9:F4:6F:5A:F0:29:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c080::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d5:b4:52:2d:91:2a:dc:cf:ae:07:c8:57:ef:67:28:5c:18:
af:9b:45:09:35:82:45:9e:64:eb:87:f5:76:b3:c0:20:12:ed:
73:1d:ed:5c:6c:83:ae:41:d8:c4:4b:a3:1e:d9:95:ab:3c:7d:
b8:19:79:92:f8:9e:01:3d:d0:ae:6d:8f:36:0e:75:32:07:60:
b4:4e:bd:21:fd:e5:7f:a5:26:1c:ef:14:b0:c1:11:d1:3c:b4:
aa:59:7f:6a:79:27:90:ec:0b:36:4b:d8:8b:db:f6:6e:97:1e:
71:df:bd:20:c4:27:10:29:97:45:02:ad:f5:1a:80:26:e5:dd:
c7:53:e0:88:0b:3a:df:91:b7:b2:4a:0b:71:4e:6d:64:f8:c4:
bc:a8:5b:f7:91:95:2e:4c:dd:67:73:d2:4b:48:59:26:5a:62:
e5:b3:77:7d:60:ff:88:51:06:eb:50:29:50:e3:d1:a2:c5:a7:
e9:d5:22:c7:fa:f4:50:66:6a:38:13:91:17:b8:67:26:e2:b4:
9c:59:d9:0b:e7:b8:df:96:b7:0a:ab:4e:69:ec:f3:cb:6d:a2:
b0:e2:6d:7c:a6:ed:63:a3:d9:1f:08:14:dc:47:90:0e:be:e2:
f0:71:46:2d:af:1a:30:16:82:76:0e:4b:07:35:d6:7b:7c:8e:
c8:ad:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:57 2026 by rpki-client