Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
File: 07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa (raw, json)
Hash identifier: u97s/7XTinv5dPGrGV2rqt2pQdHDzu3dyLmJ1jM3oIQ=
Subject key identifier: 51:CF:96:24:13:72:CD:30:BB:7A:E3:B0:1F:12:71:E2:83:C5:B4:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 591A34A37F4CF98AEE686CCD890D47B4B1EEF431
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
Signing time: Wed 11 Feb 2026 01:20:09 +0000
ROA not before: Wed 11 Feb 2026 01:20:09 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1a:34:a3:7f:4c:f9:8a:ee:68:6c:cd:89:0d:47:b4:b1:ee:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:20:09 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=d71ad4ca21f49b70fba8811dfec75f73004f3fbd2174d6a76d58720c3baaa1e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:8c:42:79:f0:cc:8c:80:5a:76:55:e6:dc:
c7:6c:3b:1f:04:e0:d8:9c:95:5c:6f:a0:8c:c5:d3:
26:22:2d:00:15:c8:87:82:2f:ff:46:56:dc:2f:9b:
4f:67:a4:21:41:7a:39:8e:a4:83:b2:6d:94:15:32:
d1:7b:ea:2b:b0:ae:66:03:20:44:43:b6:eb:82:1d:
e3:5a:d1:d7:25:fd:bd:99:2a:be:69:f1:81:02:fb:
00:66:3f:1e:29:03:64:06:c1:9e:f9:f0:98:88:a9:
ce:ae:a1:c5:8d:0e:07:92:36:b2:c5:86:b1:69:e3:
3d:ee:8d:f4:29:8f:a0:fe:34:3b:da:2d:3e:cb:11:
80:ea:9d:d5:75:2c:c6:37:d4:b8:92:84:a4:a8:a4:
87:15:f0:0e:3c:cd:82:cc:26:ee:f3:97:63:fe:2d:
77:e1:c1:b5:b8:5c:a6:20:7c:5c:78:d7:68:31:da:
92:b3:1d:bc:9f:ab:ce:50:b6:53:23:eb:52:8f:c7:
1c:c3:f6:2c:4a:c5:e5:3d:a8:23:a2:c0:82:35:dd:
87:1a:d3:22:4d:a9:c8:83:8c:ba:92:1a:a9:5c:97:
7a:a9:8e:67:ec:d9:f1:5f:44:e5:3f:15:10:c3:94:
95:81:a4:16:00:f0:cd:ea:e5:46:d4:69:5c:d5:f6:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:96:24:13:72:CD:30:BB:7A:E3:B0:1F:12:71:E2:83:C5:B4:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:5040::/48
Signature Algorithm: sha256WithRSAEncryption
39:89:9e:c9:e0:89:d8:e7:91:bb:49:63:d4:59:af:2e:88:02:
c8:09:96:2b:7d:fb:de:f2:3c:de:ca:e5:c9:76:eb:1e:f7:45:
a3:11:ae:2a:40:c7:03:33:2e:08:1a:fb:2e:b2:81:f3:1b:ed:
8b:0a:63:bc:32:6c:98:52:ca:b9:35:ae:14:cf:97:cd:bf:98:
87:71:a2:e9:08:7c:49:52:d1:b6:5e:2c:b1:d3:8a:23:d6:ae:
63:95:d1:ff:a2:30:69:42:ff:bc:f7:33:bc:4b:ba:f7:72:2e:
89:10:e2:63:8c:9b:ec:ee:a3:b8:62:5a:d7:41:f2:12:b1:33:
28:bc:03:cd:96:98:dd:c3:31:c2:2f:c2:eb:47:39:d6:be:b7:
67:6a:74:0a:9a:08:1d:85:f7:80:43:de:bf:d1:d3:e0:91:58:
12:2b:0f:df:65:d9:55:28:ed:93:8e:9d:d2:ca:fa:80:71:5e:
be:61:59:a3:86:b4:e1:f9:12:df:a9:3a:65:b4:be:87:1f:c9:
4a:2e:3d:46:a0:91:01:48:64:53:d7:19:70:1e:e0:f7:bf:ef:
5a:cf:39:46:d5:b5:ee:4d:f2:34:33:b0:94:03:27:97:23:3c:
63:bb:cb:f3:ac:05:3e:e6:ad:db:2c:72:74:c8:d4:d9:96:0b:
83:0d:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:04 2026 by rpki-client