Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
File: 007aa6ae-ee04-4168-a465-d2d3db70f19f.roa (raw, json)
Hash identifier: qW84h26CyOPhWuobMEbHCyx4T8X5LBLZO32/WTSFehk=
Subject key identifier: C5:18:23:4B:0E:B3:BE:6E:C3:CD:16:CF:1F:A6:68:B2:F0:E9:89:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 411C0548E4E284E20469A1F256E0D3CFBBEADF0F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
Signing time: Sat 28 Feb 2026 05:10:11 +0000
ROA not before: Sat 28 Feb 2026 05:10:11 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1c:05:48:e4:e2:84:e2:04:69:a1:f2:56:e0:d3:cf:bb:ea:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:10:11 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=950d0717e27fe5e89b7c90ed934d83743f6a01850f9dc7c0ce78c3fb2351171e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:c4:ed:25:b0:8c:40:5a:ec:55:c9:78:03:
84:99:57:89:af:1f:93:e6:c2:bf:e9:86:e1:5e:17:
7d:d5:0d:b3:d1:e8:e9:0d:9a:92:50:13:8a:c7:ff:
05:81:db:38:ff:aa:e3:93:a6:c0:b4:24:38:67:f2:
9c:b2:45:1e:c9:66:4f:51:2d:a4:c6:62:0b:42:43:
61:b1:6b:bd:95:e9:a6:5b:5c:da:49:dc:fc:d3:77:
1d:fc:af:55:f6:2e:db:db:44:a5:65:62:a9:e1:69:
93:ff:79:c2:3e:2e:64:3a:70:c9:cc:59:eb:31:2f:
e5:38:a1:18:b0:8b:6a:4d:23:30:e1:49:72:a1:c6:
af:7b:a9:db:b4:d8:8d:54:89:fc:38:07:cd:05:df:
43:6f:eb:1e:84:1f:93:0d:28:af:df:31:8c:0d:af:
dc:de:b9:cd:6c:c9:c0:b9:77:d8:44:8c:14:39:aa:
a7:c2:8d:7e:ab:b1:73:5c:41:e4:f8:5a:ed:fa:4b:
78:06:d4:50:6d:69:00:e2:fe:ba:9b:f9:c6:af:d2:
f8:a0:af:d8:ab:bb:fd:cc:fb:94:12:3d:92:3a:7b:
3b:da:2b:b5:97:d4:7d:97:26:df:05:80:a1:1b:b2:
bd:8d:29:50:8c:09:bd:34:2b:36:7b:d0:30:33:9d:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:23:4B:0E:B3:BE:6E:C3:CD:16:CF:1F:A6:68:B2:F0:E9:89:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1040::/48
Signature Algorithm: sha256WithRSAEncryption
af:f6:8e:ff:cc:c2:c2:f5:9e:ef:f8:a1:8d:c7:ec:b8:3c:e1:
6d:28:03:23:19:62:c6:e5:1c:77:46:90:9c:9d:79:b7:58:9b:
f6:a5:0a:64:8c:7e:0d:4e:0c:fa:89:80:6e:b3:15:27:d3:44:
57:17:80:fa:f5:c7:c6:f2:f4:f2:cc:fb:58:82:fb:bb:ed:22:
4a:8c:95:95:2a:0f:c6:a3:17:12:e6:6c:12:f0:9b:95:68:39:
10:51:ad:1b:64:33:c2:cd:07:a4:c6:84:46:c2:62:13:54:ab:
8d:a7:1c:1e:3f:2b:0e:dd:59:17:6c:20:ff:28:00:e0:1c:f6:
36:f3:11:b1:fb:c3:2d:9b:18:7b:b0:a9:76:cc:fe:95:23:53:
00:0f:8c:21:9a:4a:0d:e1:44:26:92:cc:33:29:8c:e2:4f:d1:
76:58:07:0e:bb:64:39:5b:e0:a8:09:75:a8:f3:a7:2a:fe:b1:
39:4a:87:1a:d1:e4:55:f4:49:60:92:4b:e8:6e:e9:15:1f:c2:
6c:a9:79:e2:9c:1d:22:25:56:fc:1f:90:1e:56:f5:ab:75:df:
35:2f:ce:88:de:15:1a:5d:01:56:a2:84:4a:49:6d:cd:db:de:
d9:1d:d9:3d:26:13:29:93:ee:90:2a:61:2a:b1:54:72:b1:d0:
5f:01:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:34:50 2026 by rpki-client