Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
File: 11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa (raw, json)
Hash identifier: 63sZHHP8hi7pjfIm1U7cCyJ+LNiYLq7RKCEdsN8kUNo=
Subject key identifier: 57:D1:FF:A1:A8:16:13:EE:37:85:03:E0:4C:26:F3:F8:D0:3A:7A:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14231549F125AD7D66F71568A9E84BB048190967
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
Signing time: Sat 28 Feb 2026 06:20:51 +0000
ROA not before: Sat 28 Feb 2026 06:20:51 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:23:15:49:f1:25:ad:7d:66:f7:15:68:a9:e8:4b:b0:48:19:09:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:20:51 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=352487a3fd65f7ebd61e0d9e8f29efa22136273937b19a02e551e4459e633325, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:8e:3b:f5:00:cd:86:7e:e0:cd:98:18:bf:
b4:8d:4b:c1:6d:6f:ae:37:8f:21:9f:e0:84:3e:ac:
fb:74:c7:aa:fe:e3:71:89:09:1a:fb:e1:90:0c:ea:
91:11:78:9d:ee:19:d1:6d:33:99:3f:bf:89:c1:5c:
17:52:bd:06:6a:68:6b:4e:74:fe:6d:b5:ed:f7:35:
fa:66:da:1f:7b:35:f6:fe:08:be:8c:b5:0f:ca:46:
c7:2c:52:0f:6a:97:4a:7a:77:11:50:29:de:e3:21:
ab:b0:8a:52:ad:4a:78:9e:b4:10:7f:4c:cf:bd:b9:
48:85:c7:de:4e:0c:4c:c5:77:8a:fb:cf:17:20:41:
fc:5c:69:56:de:c9:d8:bb:ea:c2:ec:2f:0d:37:4c:
04:4e:a7:10:a0:8b:34:33:45:b8:4b:12:92:c5:7b:
73:02:0a:66:4a:0f:ef:2e:cd:ac:50:29:c9:bc:d4:
e5:f9:01:93:e8:18:70:57:96:b3:d5:b5:bc:ab:d8:
80:cf:9f:47:0b:a8:e7:74:f7:36:72:7c:4c:c4:c9:
0c:10:55:01:82:d5:c1:de:31:85:71:63:fc:1e:be:
0e:80:ac:c3:76:f9:0d:7f:6a:68:b0:c1:01:36:f5:
bd:36:b7:a5:63:fe:10:0e:dd:2a:8a:fe:de:ad:71:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:FF:A1:A8:16:13:EE:37:85:03:E0:4C:26:F3:F8:D0:3A:7A:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b:800::/37
Signature Algorithm: sha256WithRSAEncryption
6a:e2:e1:a4:70:73:92:22:f3:43:ac:3c:7d:fd:6a:b7:e2:17:
73:f3:b0:24:8e:7d:d2:be:08:63:f9:79:0b:62:d5:d7:4d:70:
ec:cf:ef:0e:24:42:29:fa:8b:e6:e5:36:e4:63:be:86:6b:92:
0a:78:b6:e7:0a:41:69:62:b1:5a:66:b9:26:b9:a4:92:c1:dc:
43:07:85:34:c8:03:5a:df:97:bd:ad:92:97:d9:24:b7:4e:fc:
94:6d:ad:61:b4:b2:a8:5e:01:fa:43:04:ba:76:66:c5:39:80:
97:fb:c6:eb:02:f8:fa:5e:15:f2:13:8b:35:6f:d8:c3:9e:8c:
4d:ed:d0:15:36:02:6b:91:60:06:3d:72:4f:b5:0a:2c:16:fc:
df:fd:30:7b:8b:e0:20:5e:3d:b4:0c:56:ed:1f:b5:20:1a:6c:
7c:32:af:23:28:c1:e9:d8:51:24:5e:5d:d5:07:bf:f3:e8:c7:
f1:5f:d9:a5:d1:c7:19:75:6d:d8:40:20:b2:fd:de:63:d8:92:
7d:a6:f4:c1:9a:80:16:34:c8:b0:a4:16:73:47:ad:88:68:f3:
9c:44:89:0e:6c:5d:2b:f9:e4:d9:6b:69:da:ff:74:ff:07:a8:
b9:86:34:d2:98:f6:c3:9b:15:14:37:ff:af:fd:76:81:2a:c7:
5c:14:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:35:14 2026 by rpki-client