Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: 3VS9mm1CPXPhBnf0vmhoqCXEmyy4SqKwQHZSTDupi04=
Subject key identifier: 84:51:11:E5:6B:62:8A:FD:EF:CC:98:25:55:29:06:EF:69:86:62:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77C28BCB8B793A901348C91E99364C8689EB8CF9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Sat 28 Feb 2026 06:20:51 +0000
ROA not before: Sat 28 Feb 2026 06:20:51 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c2:8b:cb:8b:79:3a:90:13:48:c9:1e:99:36:4c:86:89:eb:8c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:20:51 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=d456148f84c5b8fbe6540da64c250a07e69164e128f60ab06f3a4c0107f9c90b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:95:90:ad:ca:06:1b:c4:6e:6f:dd:8a:48:
a2:1e:22:12:e5:65:5b:07:8c:a9:c3:1b:9d:37:76:
d3:66:f9:1a:ac:6f:1c:55:13:65:0c:48:98:87:f5:
f3:6a:c1:cb:f0:c5:ef:d0:df:f7:d7:ce:79:b1:21:
ae:44:01:89:8d:31:0c:c3:5d:b6:b0:0b:22:9f:91:
8f:be:b5:ef:6a:af:0b:27:02:e1:c4:f7:ce:bd:5b:
f5:7f:fa:e4:59:bb:db:14:06:f2:67:b6:43:72:a0:
7d:af:c4:f2:d4:a8:3b:be:e1:67:ba:73:43:e9:8d:
6d:0e:6b:c2:6c:64:f5:c2:64:b4:cd:91:a3:e8:db:
a5:c3:69:67:4a:0d:2d:17:11:36:d8:20:97:30:b3:
79:08:f0:81:94:81:fb:27:45:55:9e:f1:ee:db:43:
48:52:15:8b:d5:02:68:22:03:cb:e0:6d:2f:41:d3:
37:02:3f:40:15:41:89:54:02:ba:5a:84:e3:b4:d0:
48:8f:7d:6b:f3:14:0b:fa:a8:2b:8d:56:8f:67:31:
7d:da:4e:98:8e:a3:13:ac:c3:a3:60:15:30:4e:0d:
ca:ad:14:77:73:59:27:fe:2f:f2:53:cc:9f:1f:ff:
51:01:49:b2:ce:57:b2:77:25:31:cd:22:81:df:bc:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:11:E5:6B:62:8A:FD:EF:CC:98:25:55:29:06:EF:69:86:62:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
77:60:12:15:e0:16:2d:e1:26:31:c9:8a:58:a6:8b:42:b8:4f:
03:e7:ef:61:5b:4a:0b:2c:ea:b5:e7:9e:52:57:72:7c:18:f8:
66:06:2a:94:1f:cb:37:dc:b9:c1:8d:ec:f6:da:22:aa:77:c8:
bb:99:19:2d:a6:3b:36:33:08:07:d3:3f:0b:11:93:36:16:82:
3d:86:90:f9:00:8c:fb:74:78:e8:8c:51:24:1e:e7:f1:a8:09:
64:95:67:2c:aa:ab:44:33:27:8f:aa:73:68:76:a2:81:c8:92:
bc:08:8a:2a:27:7c:db:85:c1:1a:d1:29:37:96:ae:28:03:86:
38:89:30:9b:6c:9a:56:40:2b:bb:2b:3a:f3:a6:df:48:3c:be:
49:d9:ac:ae:80:95:1f:13:57:7d:e4:17:f0:bc:09:63:ce:c0:
7d:49:c7:64:51:6f:a7:6d:0b:2a:ca:c8:22:7a:ed:66:3d:cc:
29:df:9f:a5:ba:47:ea:86:27:6e:ba:8d:a9:ba:13:88:0d:1b:
2e:f9:9c:c5:81:79:76:d9:1e:64:fd:91:ce:ab:3c:cb:7c:1f:
bd:20:b2:b5:99:6b:0f:f5:2d:9d:ba:9e:7b:76:91:ec:8b:9a:
7c:05:44:81:dc:4b:93:00:98:c0:0d:29:57:7e:19:ab:9b:3a:
75:d6:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:30 2026 by rpki-client