Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
File: 2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa (raw, json)
Hash identifier: W+I5elrOBk74f9IQQuc2tuKe5hUchxviWJwSMtKVNUU=
Subject key identifier: 84:5C:CF:39:57:21:8C:DB:F5:81:75:D0:98:97:16:9D:73:4A:8F:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2990E703DEEE2D98A959AA1ADEEFEA151380C50E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
Signing time: Tue 24 Feb 2026 04:10:42 +0000
ROA not before: Tue 24 Feb 2026 04:10:42 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:90:e7:03:de:ee:2d:98:a9:59:aa:1a:de:ef:ea:15:13:80:c5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 04:10:42 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=7769f096d1fcaf7c297173b34b05c135a3f4f73560682e5f8177bc7816deb92c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b1:48:0a:a7:80:c8:2d:b8:03:57:53:a5:c1:
35:b8:be:ed:1d:1e:4e:ff:7f:f9:22:23:6d:07:f6:
28:78:56:ba:03:35:27:e7:92:de:0a:e8:a2:b6:cc:
e8:9a:89:a9:75:2b:58:1e:2c:74:d4:7b:fc:31:8b:
b4:2d:9d:47:a3:26:d3:fe:e3:65:2f:1e:4b:d0:56:
95:60:04:48:8f:29:3b:07:98:0f:ea:81:d4:43:9f:
68:c4:da:31:fc:17:03:90:aa:63:e3:0d:e8:05:7a:
7d:e2:b1:ef:5b:80:62:4f:e2:d7:80:4a:c4:51:3f:
67:e9:34:a6:0b:32:00:a1:01:aa:cf:f7:69:8c:ae:
83:00:da:8d:ba:04:ea:d9:df:94:78:26:69:b9:ca:
bd:8c:ad:fc:5f:27:0e:f0:26:ec:79:ad:5e:06:a1:
84:b7:41:51:90:d8:54:9e:a7:91:ef:e6:53:80:69:
31:6e:82:bd:76:74:f3:ff:c6:95:b0:f5:1c:89:e6:
d4:99:30:47:fd:ce:9b:75:68:f0:b2:6b:13:7f:6f:
65:2a:51:0c:53:ed:a5:01:fd:70:17:db:83:6a:c1:
a3:78:b1:8e:a7:22:de:89:2b:45:4f:1b:85:c9:ce:
eb:98:eb:a4:4a:67:d4:c8:7f:40:2c:8b:a0:8b:5b:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:CF:39:57:21:8C:DB:F5:81:75:D0:98:97:16:9D:73:4A:8F:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:b000::/48
Signature Algorithm: sha256WithRSAEncryption
95:12:0a:5a:b2:1c:16:60:8c:cf:c3:82:39:4c:76:2f:29:05:
51:56:f0:05:3d:0b:cc:3f:68:bb:3f:23:25:86:77:da:b3:76:
01:1a:58:ee:92:af:e5:2e:e5:af:f9:98:fe:4b:23:fb:7d:3d:
96:22:e1:47:ad:cb:e3:6c:a0:fb:c4:05:ee:52:6c:94:b8:7c:
90:b7:37:4b:d3:59:57:96:c1:9f:bf:8e:c5:d7:4d:0e:cb:43:
79:6a:5f:25:da:f3:60:0b:5b:ec:41:5d:fa:90:6b:b7:c5:25:
03:2b:f9:8a:c6:22:d6:85:c3:f8:6f:5e:83:48:b0:c8:c8:88:
68:6f:14:c0:1e:a8:8f:08:df:07:77:21:0e:d1:43:be:79:11:
ec:90:45:a5:57:69:b1:81:04:8c:6f:a6:dd:35:bd:f1:7d:37:
15:ad:3c:21:a5:37:9a:f3:3e:4c:cd:71:40:eb:6c:d6:00:cb:
30:4b:14:e3:8e:1f:b7:d3:48:fe:e7:d6:73:46:4f:08:5d:56:
13:33:78:c8:09:de:6c:1e:99:42:9a:5f:b4:b6:6c:58:ce:e4:
b4:ca:71:96:84:d5:dd:d6:b6:4a:b5:1d:1d:ed:0e:f7:e6:19:
ae:0c:1e:29:2b:a6:96:90:06:6d:25:6e:4f:64:47:8e:d5:36:
ed:3a:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:28 2026 by rpki-client