Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: uVzssd0wrIhmcfEaplJRs+c1BJUcWXZhG9M1PNeVjC8=
Subject key identifier: DD:EE:11:80:9E:23:01:B9:BB:5F:34:FA:21:44:3E:17:56:87:26:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19771B194F6ACA55D0D54A2C04AA97A7A79F2810
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Sat 28 Feb 2026 05:20:42 +0000
ROA not before: Sat 28 Feb 2026 05:20:42 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:77:1b:19:4f:6a:ca:55:d0:d5:4a:2c:04:aa:97:a7:a7:9f:28:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:42 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=32835586bf68c4533e565a2a9c0e0fb2db1a2a960dfee2f57b5c107963a74a46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:e9:db:d8:71:93:b6:61:cd:8f:53:21:90:
1a:48:6b:9a:8f:61:e5:92:f9:b4:b1:28:26:c6:58:
06:b3:e3:18:54:f6:a8:7c:84:87:c0:75:76:6b:88:
10:dc:a4:74:61:5e:ca:ed:16:2f:fd:7d:15:5d:94:
92:ce:60:02:05:cb:d9:0d:b0:02:29:65:63:8e:97:
5c:5c:91:d0:fb:ab:b0:09:90:da:d8:b3:b7:64:8a:
a7:13:5a:84:7c:fb:91:5e:fc:33:5f:c1:dc:65:41:
b6:3d:23:c2:c7:2f:74:49:e8:af:ab:94:9c:72:64:
e3:a1:69:d9:b1:54:ad:21:ae:ca:29:14:20:65:e9:
3a:83:a2:5e:76:b8:6d:73:c5:ad:60:66:4c:4f:61:
8c:aa:a1:8f:43:d2:92:22:65:24:2d:8f:17:ed:b3:
91:ef:68:3d:ac:2e:ee:43:b8:69:5a:be:4a:a7:73:
80:58:c3:d8:d3:21:19:de:67:92:1c:77:7d:23:ce:
ee:87:5d:2f:2b:e4:56:f9:99:50:96:51:74:21:f6:
06:8d:90:4b:aa:bf:f3:61:1d:ab:25:ad:8d:ae:52:
b4:89:1c:b2:07:01:d3:3d:1a:2e:c6:f0:2d:2e:6f:
dc:c9:c3:b6:69:11:8f:58:df:db:5a:ed:3e:20:8d:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:11:80:9E:23:01:B9:BB:5F:34:FA:21:44:3E:17:56:87:26:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:ed:cd:68:45:2f:65:0d:ba:c2:7b:42:a4:9e:ba:d5:95:1e:
ab:53:f5:77:65:8a:fc:0a:42:2e:46:8a:f3:c8:7b:6e:a9:68:
cb:34:41:7c:d9:e0:17:8c:16:05:47:db:35:62:20:34:42:f3:
85:dc:34:f0:b9:2c:a5:7d:82:96:ea:8a:e9:34:ac:ee:ad:54:
82:61:0d:bd:cc:57:30:36:a9:c6:87:2b:e0:5b:1f:61:7f:a6:
3e:57:b5:8b:0c:60:7c:e1:6a:35:5c:e9:f7:22:d9:e7:f5:b1:
16:e3:24:26:c4:8d:26:8a:38:f5:43:82:bd:17:2a:cf:ef:89:
e8:54:17:4c:72:dc:76:3a:46:db:29:9a:ee:38:55:a0:69:45:
be:b7:10:61:8d:28:99:c5:b7:df:74:c2:21:d4:f1:31:97:31:
0a:dd:12:2b:01:f8:1f:e2:e2:df:14:79:6a:f9:e4:88:c1:0d:
01:cd:fd:e7:ea:fd:4a:26:6c:74:d6:24:87:98:86:7f:ed:0d:
e6:dc:18:98:c7:cc:6a:a0:2b:df:30:89:46:7b:70:57:16:f0:
1e:f8:54:86:d2:d4:7e:e9:d2:bd:45:4e:7c:53:b1:3e:86:98:
fa:6c:4b:80:54:03:c3:3e:54:8e:f3:9c:b4:8b:48:41:64:01:
3a:77:6a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:00 2026 by rpki-client