Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/446c7294-15f2-4794-9a7f-77119799815e.roa
File: 446c7294-15f2-4794-9a7f-77119799815e.roa (raw, json)
Hash identifier: RrzlqiQwbaWc57uo4yPGYfUfpSkrqR1RB3L8QYPz6i4=
Subject key identifier: 7F:81:1B:C3:08:B1:91:F0:16:40:15:F4:81:95:EE:74:03:F9:0B:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13DFD82CF01727FB0D92C2FB5B4E41A756E8329E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/446c7294-15f2-4794-9a7f-77119799815e.roa
Signing time: Fri 13 Feb 2026 15:20:10 +0000
ROA not before: Fri 13 Feb 2026 15:20:10 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:60c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:df:d8:2c:f0:17:27:fb:0d:92:c2:fb:5b:4e:41:a7:56:e8:32:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:20:10 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=74378a42a534f42392a4394f3bb060c98bc0835eff65f6dd91d1bdad396c5e9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:d8:aa:78:27:ff:34:e4:08:be:f0:e4:43:
cf:79:46:89:60:54:f1:1c:82:24:ba:36:2c:0c:77:
c8:5f:50:81:2f:51:e1:71:5b:b3:c1:26:61:fe:fe:
10:79:ed:88:c6:41:1f:44:e9:21:8d:2f:90:9d:50:
9b:e2:8c:78:73:d2:c9:fd:9a:27:60:f5:79:1f:13:
4d:dd:7c:13:15:57:b5:43:91:29:0e:14:c4:09:a8:
e5:67:6d:76:39:1b:b5:e2:f2:0c:50:30:04:62:53:
2a:a7:b6:13:db:e4:06:08:c1:85:1a:ec:6c:4b:17:
45:f8:6f:df:fc:44:37:0d:d4:2c:14:06:30:42:81:
2a:a0:6d:78:58:3c:3d:1a:fa:84:ca:be:0a:cc:3c:
25:5a:8e:47:25:02:9f:b4:6b:aa:46:a6:0e:90:e5:
25:0a:76:62:74:6d:1d:be:be:11:65:97:05:12:bf:
b2:16:a3:73:ac:09:4c:89:76:05:f8:2e:fd:46:ef:
7c:af:c1:33:5c:b0:1b:83:cb:cf:ac:2d:19:93:5c:
2f:b4:fe:9a:a9:93:42:ae:bd:b8:d5:3c:64:ca:0b:
27:a6:f4:b7:dc:aa:7d:6d:f7:e1:d4:cb:e7:5d:6f:
cc:0b:83:5d:63:6d:1b:51:70:be:f7:8a:4a:c4:de:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:1B:C3:08:B1:91:F0:16:40:15:F4:81:95:EE:74:03:F9:0B:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/446c7294-15f2-4794-9a7f-77119799815e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
1b:47:d6:b4:6a:b8:99:0e:27:44:7e:0c:db:4b:ea:07:1d:f5:
b6:da:91:ab:7a:7b:4f:09:2e:de:a9:1c:f0:82:40:f3:8c:2f:
d4:c3:05:95:d4:f1:5c:6d:01:9f:92:a7:c2:d8:f9:ea:f7:1d:
37:db:58:5e:e5:4c:7f:cd:bd:54:7f:74:30:9c:aa:5b:5a:e6:
66:c8:c1:96:71:f5:4d:b9:98:55:86:87:c1:98:16:df:73:30:
75:3d:39:d4:8e:92:c7:eb:2b:09:fc:4b:0d:8f:73:4f:63:4a:
24:d9:b8:01:6c:4e:ff:19:3f:06:56:a4:84:60:b5:b4:a9:33:
84:5a:2d:4b:16:72:14:c6:9b:ae:42:9b:78:5e:9b:14:7b:21:
d1:5c:33:20:b5:bf:1b:3b:3e:c6:1a:d6:96:4e:25:80:c7:25:
4e:96:61:7e:89:ec:9e:2e:64:c6:32:c3:e9:9e:42:ea:0a:39:
c6:17:50:57:ac:e7:b0:48:9d:fa:52:9b:4c:9e:ed:a6:e7:da:
e4:ea:e1:6a:9d:1e:53:50:3c:f6:65:a4:65:aa:39:7e:04:29:
fa:95:bd:32:43:fd:ea:6a:aa:1f:d9:e0:b3:38:f3:52:d7:85:
38:e7:02:57:a9:f8:5e:90:43:05:bf:86:fb:bf:70:44:b4:6a:
98:f0:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:24 2026 by rpki-client