Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2470da0-7607-467e-87c5-2b56043d8899.roa
File: e2470da0-7607-467e-87c5-2b56043d8899.roa (raw, json)
Hash identifier: qsMI6POc8NF4V5raYd+Wby0juGKY1hSDtTQfrE4GsBI=
Subject key identifier: AE:F0:1E:B5:D3:41:57:FF:68:DC:59:F1:61:0D:CA:B5:40:82:D4:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29CBE6EA9E9004DB0BDD28C711EC93FCAA0A17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2470da0-7607-467e-87c5-2b56043d8899.roa
Signing time: Thu 12 Mar 2026 15:36:47 +0000
ROA not before: Thu 12 Mar 2026 15:36:47 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:cb:e6:ea:9e:90:04:db:0b:dd:28:c7:11:ec:93:fc:aa:0a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:36:47 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=0b4d50798f7eb8c445a735dda0078725514bac28fa88619796755d4082f32eda, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:0c:ec:1f:71:08:8f:78:ed:3f:25:dd:2a:
4e:01:5f:ce:96:e2:96:91:30:f7:f5:1d:e0:7f:fa:
61:86:d7:9d:3c:48:d5:74:43:9a:0f:60:b2:22:fb:
51:86:a6:77:7b:f6:6d:aa:b5:17:bb:18:22:b0:4b:
be:da:e8:fe:76:d5:cc:18:a4:3e:1b:26:3a:4a:07:
74:61:06:10:04:2b:e9:36:3a:4e:04:d2:36:e8:d2:
6c:1c:2e:49:1b:c1:f7:3a:0a:d7:31:48:cc:3d:6e:
7b:f2:29:5c:2d:51:cb:3e:fa:36:9c:f6:35:51:de:
07:34:84:41:e6:37:9f:41:8f:25:a3:68:d9:98:68:
ae:a7:49:9f:e2:87:5f:36:17:55:da:62:6b:1f:14:
07:a3:dc:8e:45:c2:4b:cb:8e:95:5c:b6:c5:78:d4:
0c:26:15:17:82:36:d9:04:42:9c:25:f7:b5:00:ea:
6f:99:a9:f1:13:6e:2b:fc:d2:06:43:34:e3:cd:1d:
03:48:13:c2:74:05:92:64:d9:9d:28:99:63:5a:6d:
80:3c:5b:8e:d0:00:76:a6:a7:b1:34:f9:cc:85:58:
a9:18:ff:d5:8a:bf:a9:5c:3b:44:13:2b:93:ac:39:
7c:a2:92:3c:b4:44:0d:a8:9f:08:68:e4:ac:0d:c2:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:1E:B5:D3:41:57:FF:68:DC:59:F1:61:0D:CA:B5:40:82:D4:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2470da0-7607-467e-87c5-2b56043d8899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:17:da:d0:b5:ee:2b:51:59:c5:98:0b:c1:4a:4a:d8:c1:05:
d0:d3:83:83:fe:8b:9b:3c:c3:9c:97:44:2e:7f:15:18:d1:78:
07:08:58:99:7e:43:fe:ca:e7:cf:71:3e:80:af:8b:75:58:9b:
74:2e:09:58:fe:4f:ec:fb:84:08:ab:8a:78:16:55:14:7f:f4:
1a:fd:f7:d4:1a:41:d2:17:21:ce:8b:81:69:29:27:8a:99:38:
79:ec:de:8a:65:49:29:3c:5c:d7:e0:52:d7:c1:58:fb:dc:99:
8e:1c:47:b7:08:02:36:51:06:8c:31:b2:69:b2:79:4e:20:22:
08:ef:5f:14:b6:b1:3b:0b:6e:fa:0a:ad:cb:da:a0:7d:0a:37:
1a:bc:6a:eb:9a:b8:fc:6f:09:47:cb:bd:da:22:d5:21:ec:c0:
18:b5:46:7e:22:f1:5e:15:25:cd:30:4f:44:5e:a7:7e:1d:8f:
44:aa:98:4b:f5:4f:9d:b8:c7:5e:90:66:f5:ae:b7:6e:89:52:
8a:17:e9:05:06:41:95:39:a0:eb:8c:4e:4e:cb:e2:45:79:2d:
b6:0a:86:3a:ee:bd:78:1e:3c:f5:d9:2d:3a:a9:3c:51:bd:b9:
c5:4d:79:1d:81:a8:48:03:45:5f:5a:8f:9f:38:72:3f:a7:7e:
1c:01:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:55 2026 by rpki-client