Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa
File: 1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa (raw, json)
Hash identifier: vcnZN/ABQwcdLb61bsCEzPDJLB3LfV9r+2VGqe9ez7I=
Subject key identifier: 33:9E:AB:6C:80:1E:CA:04:D3:ED:D7:E8:2D:4F:81:46:89:B9:A5:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DCB456CED1CB8C958620922BD3CBF9640D67776
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa
Signing time: Fri 06 Feb 2026 00:30:11 +0000
ROA not before: Fri 06 Feb 2026 00:30:11 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:60c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cb:45:6c:ed:1c:b8:c9:58:62:09:22:bd:3c:bf:96:40:d6:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:11 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=c7e2f4fc3e61c27c832fea0c166b9003d981ef22ef5a6e4e839fb4b558cc9224, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:9b:4c:a2:a6:c4:3f:68:0c:c1:1e:f2:89:
ae:f3:f2:12:85:38:24:52:13:0e:16:f8:55:2e:7f:
55:fb:99:57:6e:6d:90:26:31:5e:e5:d6:ba:4c:bf:
1d:aa:17:3b:a8:05:de:a1:06:c5:bc:ec:af:0c:c6:
f0:eb:87:a2:c0:63:3d:26:7b:4d:62:7c:f9:97:3f:
47:ca:7f:2e:6e:17:17:e4:bb:04:e9:af:d7:d5:76:
29:67:99:36:98:44:5f:99:c1:44:df:18:06:a8:23:
f4:66:8b:50:8c:7c:a2:77:54:ab:48:a7:b2:f5:63:
04:0d:62:a1:26:a7:39:b0:23:a4:91:19:ed:85:83:
b2:4e:ce:5f:02:cf:85:0e:05:a7:0b:db:17:3f:20:
6e:24:99:43:0b:33:09:a7:a9:93:04:1c:9d:6a:a8:
d3:45:a0:4c:95:cd:94:ce:b1:eb:ac:4e:51:2d:a5:
1b:50:73:3f:e1:c4:81:b1:da:72:8e:27:37:06:e3:
87:81:af:88:d9:3d:90:d7:26:04:a6:f2:0b:0a:a7:
bc:9a:ef:d1:10:e8:44:11:56:75:62:b5:5e:de:f4:
0d:96:29:25:9c:64:1a:63:e0:3d:ac:f6:8e:27:5d:
f5:44:60:bf:11:2b:0c:94:fd:5d:e9:b0:22:7e:44:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:AB:6C:80:1E:CA:04:D3:ED:D7:E8:2D:4F:81:46:89:B9:A5:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
11:b5:14:03:ce:7f:5c:08:7d:fa:9e:81:40:00:33:76:f8:51:
f0:78:03:28:c7:d0:4a:b6:33:34:46:4e:00:e9:22:2a:7e:18:
b8:f8:1c:d6:f7:05:11:01:b7:e6:a0:8f:23:af:c0:03:c6:30:
af:6c:dd:0f:5d:00:29:bd:35:41:cf:9c:79:56:2e:aa:8e:4f:
ed:73:54:dc:bd:a2:ed:90:db:82:31:e4:34:99:53:33:44:1a:
7d:4c:ef:9d:d6:38:bf:f0:b5:55:f0:11:fa:62:8e:4a:17:c1:
fe:07:44:8f:51:94:56:09:f3:b2:e4:1b:59:29:fc:b4:5a:0a:
fb:10:95:51:2c:02:63:51:26:f9:19:04:7c:31:6a:85:c5:13:
1c:af:6e:ed:46:11:c7:10:69:a1:19:aa:de:f1:15:27:b1:41:
8a:02:81:d5:46:a9:14:62:4a:b4:58:6b:ec:e4:9d:00:f4:ee:
fd:cc:7a:80:02:92:85:b2:79:45:e6:8c:c3:ab:e5:0e:03:69:
64:31:1c:2f:fa:2b:e3:5c:bc:09:ed:8a:5c:57:7e:ad:10:0c:
a0:fb:d9:51:5f:09:43:56:8b:eb:af:bc:ea:d3:c4:f9:09:40:
e2:3b:f3:b2:4a:1c:a5:8b:81:a3:6e:b0:fd:d7:7e:6d:f9:a2:
22:8a:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:56 2026 by rpki-client