Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ef3372e-f216-40b8-b019-7230e30b3283.roa
File: 1ef3372e-f216-40b8-b019-7230e30b3283.roa (raw, json)
Hash identifier: 6qz9rxkKrB7+SHU/AGd3QVMeoqKj4eQwod0eYAn838I=
Subject key identifier: 45:FA:8F:FB:89:64:93:25:30:01:98:F0:CF:64:06:7B:56:EA:43:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30B886456E9FD3187F7AAC7AF374D0817EAFF5AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ef3372e-f216-40b8-b019-7230e30b3283.roa
Signing time: Wed 11 Feb 2026 01:30:10 +0000
ROA not before: Wed 11 Feb 2026 01:30:10 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b8:86:45:6e:9f:d3:18:7f:7a:ac:7a:f3:74:d0:81:7e:af:f5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:30:10 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=9364d9ef426777dbe0259f22aa944a5a74c8b7a674ea229b811c3e9cd8dde53f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:0a:44:84:be:c5:e4:6c:5c:df:7f:93:1a:
53:43:fd:39:18:4d:ae:de:7b:89:5c:cc:e5:7c:17:
71:28:c5:67:59:3b:77:d7:2b:bb:e2:97:bd:89:1b:
5f:45:f0:bb:66:b9:1a:86:eb:a0:55:df:0a:b5:81:
6a:93:64:f6:47:60:97:be:0d:bd:74:a2:85:bd:7a:
ec:09:d3:95:56:ca:72:31:67:7f:76:a8:a7:80:5c:
c8:65:9c:8c:f3:35:e8:cf:29:32:e8:2b:20:4a:2b:
b4:e7:c4:0b:81:af:1f:27:70:bd:42:3c:9a:49:17:
cf:f0:8d:3b:49:72:6a:63:39:9a:65:0a:36:8f:34:
14:6b:be:c9:d9:68:0f:a0:10:8e:0b:b2:47:9b:97:
e2:ee:6a:30:2b:72:cb:c9:88:f0:48:48:b0:f7:21:
17:35:69:58:0c:ca:ac:9b:d2:42:64:b4:b1:0c:9a:
a1:61:64:36:af:b0:e9:2a:47:a9:eb:dd:4d:07:8c:
78:d6:8a:3e:28:71:49:a0:b4:61:33:51:02:00:db:
a6:1b:09:bc:7d:5b:69:b0:56:df:69:38:f9:40:11:
5e:9a:5b:90:9f:87:0d:9d:de:9e:36:95:f6:8b:e1:
b3:8f:bd:86:a7:bc:25:7f:36:ab:19:0d:42:3d:2a:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:8F:FB:89:64:93:25:30:01:98:F0:CF:64:06:7B:56:EA:43:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ef3372e-f216-40b8-b019-7230e30b3283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:9c:dc:5a:0e:54:3e:40:70:bd:f9:aa:92:73:6a:0d:7c:fb:
2c:17:bb:62:59:74:01:af:1a:08:70:7a:b1:11:c7:6a:76:6e:
45:03:f9:ad:67:a6:f1:98:37:15:1c:5c:6b:b2:40:9a:6f:96:
03:54:ef:01:f4:4b:c9:af:0b:17:3e:46:28:a3:33:10:9a:70:
dc:0c:88:34:ed:4a:bc:9f:59:f4:86:99:26:04:5b:5e:2c:b4:
d8:73:ac:ae:db:80:ba:07:a9:68:4e:1a:c8:51:56:bd:ba:33:
b3:b8:36:dc:d0:6c:25:2f:06:50:c7:6d:fc:c1:fa:d6:87:71:
dd:1b:6b:94:ca:87:63:51:89:18:e7:3e:f1:42:59:58:c7:2d:
c1:f7:0d:9c:f2:0f:4c:64:03:28:9a:4b:ce:99:e1:f9:2d:1d:
b4:93:05:fd:e0:5a:cc:e9:c6:a4:6f:d6:1a:db:0e:05:c9:50:
41:19:d5:8d:00:6c:35:44:77:e5:fa:c1:2d:8a:80:cd:50:95:
93:cc:f0:e6:a9:f3:65:73:66:2c:88:31:79:87:6a:38:e2:bf:
48:b9:26:1b:4e:0c:b5:7c:96:e8:86:75:7a:ff:c3:e7:9d:34:
42:75:2f:d9:16:47:73:b3:37:ba:ef:88:20:a8:fb:31:59:01:
23:c2:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:49:41 2026 by rpki-client