Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa
File: 2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa (raw, json)
Hash identifier: MOc4hX0zgAdeM6qaEGiuNHev4ryTxBsfIB4t+oavW5o=
Subject key identifier: B8:A7:D4:E4:8B:2D:3D:EE:F5:D9:6B:56:89:16:1E:94:5B:B5:AD:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 463E3B8AB2FA76EED256C32D0619DBB90F4410C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa
Signing time: Fri 03 Apr 2026 02:40:26 +0000
ROA not before: Fri 03 Apr 2026 02:40:26 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3e:3b:8a:b2:fa:76:ee:d2:56:c3:2d:06:19:db:b9:0f:44:10:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:40:26 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=b4c27eb2232c6df46f1630bde1be4f38f35fbd7a9fa1a4d06324a27094a3766e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:00:79:3d:f7:cb:fb:8f:cc:47:63:ff:e4:
ca:e2:b9:fa:7a:f4:19:5a:21:c2:79:27:23:f1:db:
23:d6:e5:3b:04:d8:db:32:ae:cb:9b:3c:27:46:d0:
1d:95:b0:1c:9b:47:ed:e9:dc:c9:4f:fe:84:af:a5:
a4:89:72:91:1b:05:b2:38:34:3a:31:19:67:b8:ef:
b6:79:8d:28:08:75:d5:bf:4c:4c:7b:07:ab:37:47:
a5:13:b9:cf:e8:74:e8:e5:3f:79:d3:86:47:14:f9:
c1:45:1a:c4:ec:e5:70:9a:b2:05:85:90:63:43:f1:
d5:cc:81:36:d1:b7:74:91:e3:4c:91:f0:4f:6e:16:
a4:97:55:22:c0:42:09:77:89:30:85:75:9b:b4:8f:
70:26:30:35:40:12:8f:64:74:c9:ab:63:42:57:b6:
ff:2b:fb:98:a8:3c:19:26:70:0c:09:84:ab:5e:1e:
71:bf:b5:62:9e:da:9a:d7:e8:85:79:29:df:f4:a5:
c3:34:b5:77:d0:94:a5:f4:c7:97:eb:13:49:4e:4a:
75:62:1f:10:85:94:27:22:53:0b:f2:75:2a:51:a5:
4f:d6:b5:68:b6:ef:65:65:7d:2d:f9:fc:28:14:f0:
c3:2e:5c:9a:6b:fa:ce:c8:23:f9:a1:30:ff:6c:d2:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:D4:E4:8B:2D:3D:EE:F5:D9:6B:56:89:16:1E:94:5B:B5:AD:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4080::/48
Signature Algorithm: sha256WithRSAEncryption
1e:1c:5c:56:97:a9:b5:cb:6c:86:4f:ba:06:d4:8e:d4:42:66:
17:88:40:e5:c2:c1:1c:da:85:77:14:56:57:40:27:3a:dc:ba:
fd:fa:4f:8e:8e:b5:a6:8e:8d:e9:9a:db:4a:66:a3:63:ab:10:
e5:ee:79:70:0a:ae:05:dc:e6:5c:48:ce:d4:e9:4e:84:9b:c6:
b5:ba:69:d9:d0:aa:5b:f0:71:83:6d:14:3e:9f:a4:cf:ab:58:
64:0a:27:c9:5c:55:93:bf:69:7b:7e:9f:09:48:84:b3:b8:ae:
e8:15:a3:f3:17:00:3f:dc:b1:95:96:ee:0b:d7:4d:f8:5c:11:
a7:ea:44:a7:3d:1b:9c:90:c4:b1:3d:78:77:e2:c4:a1:1c:cf:
77:d5:94:51:4f:7d:07:1c:9f:2f:49:79:32:09:86:66:83:03:
c7:9e:4f:38:2a:3f:eb:f9:4a:f8:ad:1a:de:15:74:ba:4d:5a:
b9:c1:73:f0:11:ae:22:ca:d9:2c:f2:0d:97:34:7d:78:fd:8b:
97:78:22:17:51:de:df:fa:77:cc:44:89:f6:cc:6e:ec:29:8a:
72:e8:93:be:71:33:18:a7:af:50:0b:38:61:83:40:03:f0:45:
1b:3f:31:f4:61:19:39:2e:1a:8f:d4:d3:bf:e5:d7:9c:d4:0c:
2b:c4:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:46:11 2026 by rpki-client