Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
File: 3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa (raw, json)
Hash identifier: txGFovYtEaoJN1SBytTNNxR8vUN/pporGO90iSyeDHg=
Subject key identifier: 50:E5:D3:D4:7E:61:34:11:FF:31:10:55:C0:71:8E:3A:41:B5:EC:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 302BB4B0CE26134404F6943F4F80226AF985CA1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
Signing time: Sat 28 Feb 2026 06:00:08 +0000
ROA not before: Sat 28 Feb 2026 06:00:08 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2b:b4:b0:ce:26:13:44:04:f6:94:3f:4f:80:22:6a:f9:85:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:00:08 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=54e78b929ce5df0bdc1f3c818851decb84bd5d28d98008a2ca670aef4fee33b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:98:a4:62:7b:14:39:de:01:1a:3a:10:ac:
99:33:7e:d4:9f:05:98:ef:61:85:dc:c7:5b:e4:02:
0a:75:dd:44:32:97:3d:64:f8:34:bf:7b:13:19:75:
54:35:8b:91:c5:1e:35:6a:08:8f:5f:69:08:88:1a:
7b:1a:1e:9b:da:75:4f:08:bf:4f:cc:69:22:cc:f6:
b9:af:52:89:04:30:b2:d8:d2:18:d3:db:bb:fc:c5:
77:a0:f7:32:59:54:ef:b4:71:2f:35:3f:2e:53:0f:
12:7e:57:f5:d3:7b:ba:eb:d1:aa:e0:5f:10:1d:c8:
88:c8:42:20:de:c1:00:15:53:65:03:0c:89:39:a1:
61:26:96:b0:a1:5e:f9:1b:42:cc:b3:91:f8:d8:b3:
0f:79:d3:f3:13:67:0b:31:1d:24:c1:8a:e6:1c:de:
9c:cd:bf:9f:1b:2f:1e:a3:36:97:a4:36:28:c1:91:
15:82:13:a6:31:ff:99:3d:9a:68:b4:77:d9:1d:d5:
cf:4c:00:b6:c4:8c:ef:55:bc:93:04:c5:45:c1:19:
0e:4b:35:c0:1b:c7:86:06:c2:0c:a6:10:50:18:85:
3d:b6:b8:86:cb:a9:65:95:33:70:9b:5a:27:25:ed:
6c:5b:f8:c6:73:f4:d5:f7:10:62:fb:1f:85:1c:17:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:D3:D4:7E:61:34:11:FF:31:10:55:C0:71:8E:3A:41:B5:EC:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
4e:28:2b:cd:d9:5e:a3:1a:6b:f9:96:68:40:42:fc:8c:c3:aa:
ad:05:d4:63:6c:90:72:6a:4e:38:ef:08:7f:b5:23:f4:79:d5:
ef:01:cf:3a:99:b5:39:90:a9:33:cc:70:5a:b2:96:8a:4b:5e:
ba:7b:03:a3:7e:d1:a3:88:c3:cd:fd:69:7a:9b:3c:27:43:d4:
ff:ad:fb:e7:7a:c5:62:c8:da:65:45:ed:0e:ad:db:db:d2:e7:
fa:28:b5:9a:18:ce:0f:5e:f9:95:6c:50:1c:42:6a:73:9c:9f:
69:7e:19:e3:12:f8:9b:c3:35:f9:c9:1d:b9:71:74:be:9a:58:
d9:f6:64:7b:39:b9:7f:33:e0:aa:e4:3b:62:de:9e:64:db:40:
5a:d1:93:78:2e:db:01:41:9d:82:43:a2:bf:bf:50:5c:db:8a:
a0:32:ea:c6:4b:12:c6:f2:64:b5:45:91:b9:d6:9d:74:c9:8c:
79:5c:11:0d:be:56:cb:10:d7:2b:96:3b:15:d4:75:f9:c1:6c:
b1:64:8f:6f:f9:91:0e:45:56:8f:39:9f:9e:90:33:ae:ee:2f:
6e:17:ee:59:c6:c9:b2:29:2f:51:83:f2:59:83:05:ee:69:63:
91:6c:a8:96:6e:e9:d9:97:36:cc:9d:91:f4:89:ab:4c:a9:2a:
df:d4:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:33 2026 by rpki-client