Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
File: 216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa (raw, json)
Hash identifier: ewQvHtL0Th948vmsJ/qn90/FfIW24xDuYYUwblwgMlY=
Subject key identifier: 1D:D0:F0:42:F7:87:E4:BA:A6:3F:42:25:2A:17:02:A7:05:89:DE:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E8CD0A0F9868AC783503FB501AF4823DC4AEF1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
Signing time: Sat 28 Feb 2026 05:21:00 +0000
ROA not before: Sat 28 Feb 2026 05:21:00 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8c:d0:a0:f9:86:8a:c7:83:50:3f:b5:01:af:48:23:dc:4a:ef:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:21:00 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=1cc1430ce5087f82fff7888bf9f34d2c6a5533a51d4ae09bfc16a30ca16c9491, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:6b:81:92:81:71:3d:95:1f:33:fe:6d:e4:
fd:bf:95:af:fa:47:8e:fd:dd:7d:d5:5c:d4:95:9b:
e5:7f:48:a7:15:54:df:50:34:d9:48:e4:b7:8e:5c:
c9:06:4d:68:39:40:f8:d9:ae:59:20:f2:43:82:f5:
03:82:0a:7c:34:b5:3b:64:e0:b1:00:e1:ab:43:5e:
20:be:07:a2:04:39:3e:fc:c6:7d:c6:05:94:87:de:
db:0b:85:d7:02:d3:82:8a:11:0a:ff:9c:91:36:e4:
17:3b:50:a0:07:0b:1d:41:43:d1:de:64:89:04:9f:
86:0c:83:c9:45:97:68:07:9c:f9:cb:6c:94:be:c5:
1d:01:db:0e:b6:ba:69:2f:f9:0b:b6:7a:a7:22:38:
34:53:ff:63:1c:80:d6:fd:38:b5:35:db:ae:79:87:
97:df:5f:cb:14:33:32:ce:15:70:0e:43:55:9b:8f:
7e:8a:3d:33:88:38:fc:58:4d:ec:a0:7a:3f:e1:7d:
52:39:64:52:a9:a1:a0:95:17:f4:d0:4d:10:12:53:
e5:11:de:18:e2:dc:38:78:65:b6:8a:d5:8c:1c:0c:
82:fe:dd:a5:84:75:64:6d:80:f8:28:54:f7:87:b3:
98:28:93:fe:b5:53:33:d7:98:c8:92:98:3a:f4:64:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:F0:42:F7:87:E4:BA:A6:3F:42:25:2A:17:02:A7:05:89:DE:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
ba:4f:83:0b:0c:99:b6:2e:af:41:44:27:78:bf:44:48:34:29:
da:8c:88:4c:c0:d0:4f:71:4e:15:ef:f5:3f:24:4d:da:a5:f2:
3e:09:bf:b4:51:5d:99:fd:cb:0a:0c:0e:84:e6:73:eb:17:eb:
6a:ba:ee:55:1d:d9:c5:4f:16:9d:49:cc:9c:fa:0e:63:84:20:
b1:ea:0b:e5:79:84:44:25:56:3b:6f:09:76:53:2e:dd:eb:83:
83:a7:b3:63:9d:01:a9:2a:a9:c6:b3:eb:c2:72:0c:19:0c:dd:
28:b2:41:bb:0a:27:e9:6e:f5:58:06:1d:a8:61:4f:c4:01:63:
26:08:b3:31:e5:a1:9c:03:14:97:aa:d8:02:90:62:ee:f2:63:
85:9e:c3:0e:4d:bf:3b:f2:4f:7a:fa:df:7a:81:8a:ec:07:66:
96:5c:b5:31:2a:f8:0c:7a:71:5d:94:66:69:cf:86:41:09:b2:
5a:a8:81:b3:9d:af:09:b2:84:ee:ab:e3:ac:21:78:cd:4e:1d:
4d:b0:91:ec:15:e2:a4:49:db:4a:7c:0c:28:e1:04:ad:3e:10:
42:5c:8d:de:a1:cd:92:79:b5:94:85:6d:13:3a:08:ab:68:cf:
7c:85:88:23:a7:d8:53:f7:8e:91:32:d6:bc:b3:64:36:80:33:
85:ad:13:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:55 2026 by rpki-client