Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
File: 4408cd10-0fa6-407f-adbc-3a7a668523d6.roa (raw, json)
Hash identifier: IDcYr6PzRgDaylHXKBBBbV62RI4z0fCOfyaQ/tOFWcc=
Subject key identifier: EE:36:71:92:4F:91:97:CF:A7:00:BD:11:86:24:A4:CB:24:06:86:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 75AC7C6130493A8F597AA89C7555DB40F0C6C045
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
Signing time: Sat 28 Feb 2026 05:20:11 +0000
ROA not before: Sat 28 Feb 2026 05:20:11 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ac:7c:61:30:49:3a:8f:59:7a:a8:9c:75:55:db:40:f0:c6:c0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:11 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=7f9abec0d44923ae18318c7330355c63758bc2752179f20549939d41f89ddbc8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:f9:be:22:a4:86:4e:13:8f:d3:fe:6c:9c:
9d:52:16:b6:16:c0:77:12:9a:ed:78:be:c9:f8:bd:
ed:41:9a:f6:b5:1d:35:59:b0:98:e6:c7:e1:68:a7:
3e:fd:d9:00:d0:a4:f0:f7:71:8d:06:ea:8f:a1:58:
c0:1e:41:3a:62:d0:bf:59:f6:19:d0:8c:bf:9a:43:
d6:51:70:45:68:65:ea:4f:8d:12:c0:f3:56:de:82:
0a:71:c2:64:88:ef:0d:37:27:c4:77:23:14:32:6a:
73:df:a0:8f:5c:81:e3:7f:ba:e3:05:7b:57:28:de:
30:e8:50:17:6d:2f:8d:e1:03:6c:d7:c4:04:df:be:
68:cc:39:ee:8c:ac:eb:59:f1:05:94:72:30:e5:f8:
d3:c2:30:d5:8a:b0:a0:52:87:de:29:3f:d6:34:87:
91:5b:15:03:50:82:42:47:46:55:e9:8f:de:13:7e:
48:b3:09:cc:d9:f7:5c:eb:a6:af:10:d8:6e:e2:90:
af:bb:7d:de:96:b2:c7:30:e9:52:bc:18:c1:71:cc:
85:9c:c3:49:11:f4:cd:20:42:a2:40:ae:7e:ce:f1:
c6:04:01:3c:7f:6e:95:99:5a:e7:16:c0:5c:59:b3:
86:16:35:16:ed:5f:07:35:c2:a9:cb:f6:65:c5:ec:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:36:71:92:4F:91:97:CF:A7:00:BD:11:86:24:A4:CB:24:06:86:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1040::/48
Signature Algorithm: sha256WithRSAEncryption
8c:4c:d5:ac:9b:57:8d:24:cf:5f:51:15:1b:5f:b7:50:43:0c:
0d:a1:76:03:42:21:30:5a:a9:b1:e0:9b:e5:2c:5c:d0:0f:c0:
fd:ef:ee:ae:72:b0:c1:6d:53:2e:cc:ee:76:80:05:c9:8b:f7:
a9:be:be:00:d6:b2:87:2f:f6:b5:b9:78:9f:e3:46:06:1e:f7:
fb:e7:f0:41:06:c6:9a:0d:fd:d3:8e:a0:b8:80:87:ca:39:cd:
6e:00:d6:07:d1:5c:eb:62:af:42:b2:bb:7e:02:be:5a:e1:11:
ce:92:5a:a6:bf:9f:a7:ca:da:34:29:4c:ac:bf:0e:5b:0f:15:
17:10:6b:79:73:58:dc:f4:82:fe:24:a8:ca:dd:6b:a6:7d:65:
d2:b4:c8:17:43:c4:e2:a1:55:6c:9a:9e:ee:55:ff:2e:ef:86:
09:ed:5f:fa:04:20:7a:28:bf:2e:65:45:cb:8d:5b:ff:04:c0:
b1:1c:9f:1c:db:79:0c:6e:2e:00:7f:22:0c:8e:81:6d:99:ed:
20:6b:a6:d5:ef:15:43:a8:a4:92:fa:17:bc:6e:c6:ef:da:00:
ca:05:15:fc:92:2a:5a:9f:c7:7a:d5:45:4b:3c:01:81:96:97:
99:0b:b0:2f:1e:ec:26:54:2e:1d:c7:b7:df:88:54:2e:53:cd:
74:9f:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:05 2026 by rpki-client