Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
File: 0b197d7f-771e-4490-ae9e-d500d4007e6d.roa (raw, json)
Hash identifier: u3xp0o4Jk/O56tw3uuCBg5zGw1RuPqE/nVoDfY7vDAQ=
Subject key identifier: 35:D1:99:65:F5:64:A2:78:03:4E:88:0C:BB:5F:2D:54:28:58:0B:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30F22FDCBC96D1039D18B39E344FFFA50193E1EC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
Signing time: Tue 24 Feb 2026 03:00:07 +0000
ROA not before: Tue 24 Feb 2026 03:00:07 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f2:2f:dc:bc:96:d1:03:9d:18:b3:9e:34:4f:ff:a5:01:93:e1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 03:00:07 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=63db4c738fa0801e3540003e9e1f1f78034c1f98429482f4a11abe4684a9d0f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:0e:81:5a:14:a8:32:7f:be:ca:46:e2:c3:
52:34:24:07:16:ed:8a:b2:a3:a8:42:c0:6d:e3:50:
1b:4e:cd:6e:0f:d8:8c:84:10:b2:95:ba:36:4b:a6:
56:8f:97:b5:3a:6b:b2:a7:99:33:9e:cb:7b:01:96:
14:f9:aa:d1:cd:cc:2b:c9:e8:d2:8b:49:f7:94:df:
43:df:52:e0:18:43:9f:b6:17:4e:ef:0c:94:73:6a:
32:68:6c:e8:21:3c:3b:80:7a:6f:59:0a:3b:cc:f3:
78:0a:b0:11:57:b5:57:ca:1c:07:ab:be:fe:b5:56:
44:3a:8e:b9:82:2a:fb:fe:5b:57:6d:36:d0:9b:d6:
4f:56:3d:47:a2:f8:d5:8b:67:58:64:7f:85:12:4a:
f8:11:0b:05:da:90:7a:e3:ee:b6:18:14:fc:be:45:
b0:1b:9d:03:76:73:74:bc:54:ba:ad:4d:8f:e0:79:
29:14:bb:be:b4:d3:fb:34:d3:80:39:b7:13:49:12:
79:9f:c0:09:3d:fc:f5:a2:08:9d:1f:c2:49:ca:78:
08:6d:ad:8d:9d:16:6d:e9:c6:ce:eb:f5:cb:9f:6a:
34:61:96:e5:51:3e:91:22:52:57:9b:04:fc:8d:47:
4d:0f:bb:1a:8d:fe:ed:80:a2:ad:4a:9f:dc:00:38:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D1:99:65:F5:64:A2:78:03:4E:88:0C:BB:5F:2D:54:28:58:0B:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:1000::/48
Signature Algorithm: sha256WithRSAEncryption
1a:6e:bb:62:2c:97:9c:6e:49:ba:60:2a:65:ed:20:7f:67:31:
7b:68:47:bf:7b:9c:e2:bf:0b:89:be:d9:a3:0d:11:59:34:b3:
6a:6c:ed:62:67:7e:c8:74:13:d7:a2:69:67:b1:7f:5a:03:ee:
ef:37:df:ef:84:db:43:e6:f2:71:a5:fe:03:aa:1e:0e:1d:61:
c9:70:73:7c:84:d1:df:37:b4:87:9e:dc:a2:af:5b:54:cc:fa:
5c:8c:40:0e:6c:0d:b5:9e:78:94:dc:2d:96:72:95:c7:9c:48:
f1:86:5e:bc:4b:7c:65:09:f2:42:fa:0b:42:ac:c9:6a:61:db:
6c:f6:be:f2:85:ac:bb:6c:ba:de:62:24:67:5c:ac:ca:2f:a9:
fa:ce:0c:d7:69:07:c1:a9:84:30:5c:83:4d:1d:ea:34:2e:3b:
6e:5b:60:f0:dd:95:bf:8a:7b:36:ef:37:5f:c6:33:e8:ef:a8:
25:c2:a4:ca:91:b7:5f:1e:d0:42:38:5a:4a:ac:ea:fc:db:1f:
88:b7:0f:6b:b0:f9:e9:57:af:24:9a:62:30:9b:0d:5b:e6:e7:
af:e2:de:e7:b6:a8:f8:24:33:4b:ce:fe:83:45:12:14:f1:e9:
ad:58:d1:21:a9:4a:48:17:10:65:05:55:40:8e:c0:97:75:f5:
47:2b:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:54 2026 by rpki-client