Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
File: 325fa89c-1511-4efc-84ed-51af85c9ed14.roa (raw, json)
Hash identifier: pSnYnsTsQpNLnhRkeLfA2s4f1wUfpmKNePm3xOgVNUY=
Subject key identifier: EA:CA:82:AB:C5:86:18:85:77:E9:30:A9:3D:7E:3F:74:CB:87:43:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4841C1548A44C291EC2D7FF422C6BDCFE0C79EAB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
Signing time: Tue 17 Feb 2026 03:10:30 +0000
ROA not before: Tue 17 Feb 2026 03:10:30 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:41:c1:54:8a:44:c2:91:ec:2d:7f:f4:22:c6:bd:cf:e0:c7:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:10:30 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=c1a5e5fe5050e5cceec9a38132c3791e107086d8a10340df2f0a945a2aa4fab3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:48:23:2c:de:11:15:9e:54:88:51:ab:c0:
18:1d:81:67:68:c3:b5:10:22:55:3c:3b:25:fb:5d:
f0:2e:23:93:78:a1:c1:81:93:75:42:25:a5:d6:75:
28:7c:48:17:8e:df:bc:f8:29:43:6c:27:07:2d:5e:
50:cc:7e:1a:51:e8:a2:5f:7b:b5:19:fb:b5:56:c6:
8f:71:57:11:bb:f8:3c:49:8c:99:d7:da:80:6d:c0:
b5:aa:df:bb:a0:0d:bb:c1:64:93:c6:d3:95:5f:2a:
1d:fe:78:63:3d:b3:5e:c0:a9:91:79:0d:0d:66:2f:
3b:43:9a:4d:a6:51:fe:fc:d5:d6:98:b3:2a:e2:ab:
5e:4e:15:c4:39:39:84:d2:3d:5d:f9:78:2a:25:59:
a3:30:7b:e3:50:d1:67:22:56:17:96:a4:91:7e:f0:
bb:d7:f2:17:2d:eb:78:5c:60:2a:5a:ad:cf:12:56:
2f:ae:8e:5a:91:f8:a9:03:66:e7:6e:f3:4b:9c:74:
3e:db:a4:a0:0b:24:b3:40:d3:b1:f4:f5:f9:d3:0a:
90:ee:c6:24:26:2d:89:2d:b9:2b:6e:3a:9c:aa:a5:
9f:b3:d1:35:83:8b:df:53:26:53:5d:73:1f:15:10:
11:54:65:fe:80:27:59:17:65:a1:6a:9c:15:83:68:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:82:AB:C5:86:18:85:77:E9:30:A9:3D:7E:3F:74:CB:87:43:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1000::/40
Signature Algorithm: sha256WithRSAEncryption
44:73:5c:16:b3:66:c6:db:21:52:18:06:86:1c:f6:35:26:03:
5c:81:7c:c8:ef:5e:d5:14:d7:1c:8a:61:56:99:59:35:17:8b:
b7:e1:69:14:80:d5:70:f0:67:33:70:d7:dd:85:68:a8:33:45:
b6:28:46:0a:aa:a7:74:42:ec:d1:0b:60:90:aa:2e:8d:d7:4c:
a7:c1:28:07:04:f9:bc:35:c4:d8:21:e2:7d:29:89:98:53:59:
65:1d:40:48:19:c5:9d:6a:9a:07:16:e7:66:99:bc:15:db:ac:
46:72:c9:1e:42:05:68:56:63:8c:24:d6:9f:6e:47:45:44:49:
54:9f:20:d0:15:c2:aa:f4:5e:f5:55:e6:2c:0d:05:cb:e2:c3:
e1:ba:91:36:62:fc:2b:98:2f:24:11:cc:7c:b4:60:e8:b5:7c:
8d:3f:ae:fa:9f:66:93:0a:56:da:eb:1d:2d:85:60:9f:df:b5:
19:99:fb:56:2a:77:77:11:4e:8b:4b:06:35:0e:24:70:77:d2:
55:af:e0:10:80:53:87:e2:1a:22:c3:22:a2:33:3c:0b:5b:3b:
13:33:e1:84:5f:23:44:20:91:bd:9d:1e:3b:e2:83:ff:81:69:
b9:80:7d:06:75:8d:8d:a0:30:d4:87:17:9d:89:5a:af:a7:c8:
6d:f7:04:2e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSEHBVIpEwpHsLX/0Isa9z+DHnqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMTcwMzEwMzBaFw0yNjA1MTgyMzU5NTlaMHoxSTBHBgNV
BAUTQGMxYTVlNWZlNTA1MGU1Y2NlZWM5YTM4MTMyYzM3OTFlMTA3MDg2ZDhhMTAz
NDBkZjJmMGE5NDVhMmFhNGZhYjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJWQSCMs3hEVnlSIUavAGB2BZ2jDtRAiVTw7Jftd8C4jk3ihwYGTdUIlpdZ1
KHxIF47fvPgpQ2wnBy1eUMx+GlHool97tRn7tVbGj3FXEbv4PEmMmdfagG3Atarf
u6ANu8Fkk8bTlV8qHf54Yz2zXsCpkXkNDWYvO0OaTaZR/vzV1pizKuKrXk4VxDk5
hNI9Xfl4KiVZozB741DRZyJWF5akkX7wu9fyFy3reFxgKlqtzxJWL66OWpH4qQNm
527zS5x0PtukoAsks0DTsfT1+dMKkO7GJCYtiS25K246nKqln7PRNYOL31MmU11z
HxUQEVRl/oAnWRdloWqcFYNonwsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTqyoKr
xYYYhXfpMKk9fj90y4dDTzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzI1ZmE4OWMtMTUxMS00ZWZjLTg0ZWQtNTFhZjg1YzllZDE0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBEc1wWs2bG2yFSGAaGHPY1JgNcgXzI717VFNcc
imFWmVk1F4u34WkUgNVw8GczcNfdhWioM0W2KEYKqqd0QuzRC2CQqi6N10ynwSgH
BPm8NcTYIeJ9KYmYU1llHUBIGcWdapoHFudmmbwV26xGcskeQgVoVmOMJNafbkdF
RElUnyDQFcKq9F71VeYsDQXL4sPhupE2YvwrmC8kEcx8tGDotXyNP676n2aTClba
6x0thWCf37UZmftWKnd3EU6LSwY1DiRwd9JVr+AQgFOH4hoiwyKiMzwLWzsTM+GE
XyNEIJG9nR474oP/gWm5gH0GdY2NoDDUhxediVqvp8ht9wQu
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:04 2026 by rpki-client