Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
File: 00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa (raw, json)
Hash identifier: 8VV8GJIpiLlGqJQ1eWH7lYoTRMsG1bZNGoPsDmyED68=
Subject key identifier: 37:06:88:DA:D3:0F:4B:D3:84:02:B9:48:8F:90:B4:E0:5E:C5:DB:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1720CA9078A590671BA9893BBD05F0A2AED9B97F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
Signing time: Sat 28 Feb 2026 05:10:07 +0000
ROA not before: Sat 28 Feb 2026 05:10:07 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:20:ca:90:78:a5:90:67:1b:a9:89:3b:bd:05:f0:a2:ae:d9:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:10:07 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=45328f17b6ba69ea60e8d856c64cf718e85ff58aa001934103d789d31cc4f673, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:21:53:25:b1:b6:f4:03:77:3b:5c:91:17:
46:79:45:b3:a0:1a:2b:b0:3e:d1:dc:62:a7:6a:55:
8a:37:a7:d5:96:dc:ad:21:1c:52:2e:94:a1:38:87:
86:ef:a2:6f:94:d0:c7:58:c6:2b:14:be:34:07:b1:
75:d2:68:03:03:12:7e:1c:59:a0:24:7d:80:34:2e:
bc:81:70:f5:a6:96:d8:4c:0d:b2:86:82:3f:86:6a:
14:6c:8e:50:d9:9f:48:2b:d5:c2:dd:5d:d7:af:45:
dd:81:cc:38:49:6c:1a:3f:c0:10:05:5d:65:e6:8f:
23:e7:70:f1:75:99:7b:b6:98:2c:f9:23:11:f0:92:
94:d4:b6:2b:a8:d3:bf:2e:a9:aa:78:90:2e:56:3f:
f1:bc:86:e3:37:95:b6:cb:94:1f:2a:c0:0c:a0:6e:
94:4d:fc:66:c0:13:de:e3:10:d5:a8:e4:ab:7e:fa:
b4:65:2b:a0:fc:2d:9f:c9:bc:42:9f:92:2b:d1:40:
2b:c2:07:e8:f5:ab:32:61:b1:be:5b:90:b3:49:11:
f6:c8:a4:88:78:0a:53:a8:0b:2c:76:32:7d:f8:a1:
cc:b0:6b:aa:f8:3a:fc:11:24:92:01:1d:7d:3b:6e:
42:8c:fd:eb:1e:48:76:b1:5d:8c:ae:a2:f7:20:e6:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:88:DA:D3:0F:4B:D3:84:02:B9:48:8F:90:B4:E0:5E:C5:DB:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:e6:04:ed:f8:35:a4:6c:41:63:64:b8:91:9f:30:af:f9:57:
02:09:42:52:08:7a:33:97:ea:f9:68:7e:68:ae:9f:f0:fa:e7:
6b:b6:dd:9c:f8:9b:3a:6f:9e:7b:88:0f:0a:a2:9d:a2:de:ef:
21:f6:f3:da:da:1f:5a:fd:c7:72:ec:dc:9b:e6:7a:13:a1:e2:
2f:9e:14:8a:cc:8c:0f:a1:52:4e:a2:11:bc:97:95:84:2a:10:
17:ce:57:fb:4c:46:26:d9:23:c5:bc:6e:0c:2e:37:a2:45:a4:
58:b9:fd:72:83:17:54:7f:ff:da:2a:b2:5b:5e:51:46:35:b3:
16:da:a6:c0:19:16:7f:a0:ad:da:1c:5f:10:bc:04:3d:d6:0e:
98:c8:35:9e:6d:19:cf:4d:8f:8b:a0:31:13:cb:00:08:ea:1e:
d0:a9:5e:ce:bb:5d:f8:0d:a9:c8:02:0a:e9:3f:50:20:19:e9:
c0:78:dc:45:88:78:5b:0b:97:3c:85:05:1c:5c:77:21:22:c9:
0f:e8:3a:c9:65:25:79:2d:f6:4c:6a:cf:21:89:cc:05:4e:49:
59:3c:81:55:ba:57:07:e8:d3:c9:9b:e6:c8:d7:07:c2:31:d6:
52:21:55:61:36:89:10:fd:90:4c:50:66:f3:89:eb:d5:bb:d0:
e1:ec:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:19 2026 by rpki-client