Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
File: 3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa (raw, json)
Hash identifier: aPNuMCYtZMJ19F0zmuOlrrWTKTmMy23WVpPixn72Ieg=
Subject key identifier: 8A:43:9F:A5:18:F9:72:00:59:38:0E:93:58:08:BC:69:CB:56:17:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78990BF8A507955170A793E543FBF829B8242D3D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
Signing time: Sat 28 Feb 2026 05:10:10 +0000
ROA not before: Sat 28 Feb 2026 05:10:10 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:99:0b:f8:a5:07:95:51:70:a7:93:e5:43:fb:f8:29:b8:24:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:10:10 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=2b862cb810a554963f58a02712df337e391cca0c9ed5febfcb63e918a4a743ee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:04:78:68:94:a9:31:13:50:7d:6d:8b:a4:
e9:b9:84:b3:d1:86:bf:33:72:b2:c4:0d:23:5d:76:
d0:63:5c:f0:d9:9e:8e:c5:dc:2e:f1:81:a5:43:16:
86:65:69:98:b2:d8:3f:20:5c:e5:16:48:df:17:22:
ba:b8:ea:af:26:95:d3:9a:fb:26:7e:6d:1f:ed:b9:
29:a5:97:90:8e:39:c8:df:fd:66:43:95:c5:b9:53:
02:14:00:cb:c9:1a:44:59:fe:15:99:f7:81:7a:2d:
65:c3:12:ce:48:b4:55:dd:26:db:96:11:40:f7:b5:
b7:14:6b:f2:ea:62:67:f7:36:da:98:9e:07:0c:14:
65:c5:1d:6d:94:39:28:2c:be:36:20:9d:4f:ef:1b:
ec:af:a9:d7:5c:e1:1d:5d:3a:74:a8:75:41:92:29:
be:f7:a1:b7:b7:e5:69:d3:e9:c6:a6:0a:45:ef:e0:
e1:9c:eb:f9:4d:3e:6f:c3:eb:6f:cf:3b:eb:bf:2b:
43:74:81:83:dd:f0:1c:fe:71:54:21:dc:f9:c1:08:
2d:c5:bb:00:84:1e:43:c0:ef:9e:5b:82:31:f2:5a:
e5:0f:b0:52:d7:4d:35:a6:d9:8d:59:2e:58:41:82:
bc:10:d6:f6:db:76:7f:f9:24:aa:eb:46:7b:f5:5c:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:9F:A5:18:F9:72:00:59:38:0E:93:58:08:BC:69:CB:56:17:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
13:e8:6d:3b:fa:21:a6:e5:0f:6c:72:d7:29:d9:da:c2:43:f4:
a2:f5:f6:37:4a:70:d0:55:31:6a:29:43:6d:23:80:d6:91:4e:
2e:62:69:b3:95:c4:8f:f2:59:d2:16:22:8b:65:7a:d2:e1:cf:
72:3f:34:06:95:ba:0f:ad:a2:a5:5d:d6:03:b7:14:8a:15:a5:
aa:ff:99:bc:20:3b:aa:0c:40:b4:06:7d:d9:c6:29:63:eb:77:
ef:b3:c2:f7:99:06:17:a6:e2:ea:d6:c3:49:52:d0:b2:ac:53:
6c:fa:bf:36:d8:78:34:b3:a1:2e:30:73:12:8b:a3:c7:fe:e3:
db:fa:58:2a:df:58:a7:37:ae:1f:53:e2:6f:c5:0a:95:b4:18:
66:76:e1:8e:f5:68:96:40:15:d6:2c:c8:c6:76:0b:3b:74:36:
78:f0:5b:eb:5a:33:5c:de:17:1b:e7:69:c1:52:d7:38:a6:be:
8a:76:e9:70:d0:d2:5a:2f:d7:b8:47:86:46:db:13:78:67:2e:
d6:1a:50:d1:f3:f7:4b:cb:7f:ec:4e:f2:31:50:58:78:c3:49:
5d:31:eb:61:80:69:ce:82:01:10:6e:93:85:39:3f:8b:3e:2d:
0f:0d:9f:49:2a:55:4b:f6:bb:0c:9b:8d:c1:2f:d8:18:ca:00:
ba:79:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:36 2026 by rpki-client