Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4530b9c6-5c85-45a5-8e99-e0b412e74316.roa
File: 4530b9c6-5c85-45a5-8e99-e0b412e74316.roa (raw, json)
Hash identifier: pa00HiGo+A/nRMSJgFzR8ZNodIQ1oDjI90hIAWEgsso=
Subject key identifier: CD:3E:0A:E0:4F:4B:86:3D:30:50:73:10:37:82:FF:F5:A3:77:0A:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2676C6DB9586C87AFB446876C3B95F691A3855BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4530b9c6-5c85-45a5-8e99-e0b412e74316.roa
Signing time: Tue 24 Feb 2026 03:00:07 +0000
ROA not before: Tue 24 Feb 2026 03:00:07 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:76:c6:db:95:86:c8:7a:fb:44:68:76:c3:b9:5f:69:1a:38:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 03:00:07 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=bf769bfffff44102d83f0dc5a064018d55694d1447b01be926f837d1e39a02bb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:46:36:76:ea:ae:82:4d:29:17:26:4a:b6:
41:30:b8:89:d2:e0:37:e6:b7:34:02:98:af:8a:5d:
e2:d6:d4:d8:0c:1e:98:54:a7:2f:6b:6f:4d:ce:da:
ad:70:4f:0d:2f:1a:bb:b9:13:48:88:60:9f:dc:75:
db:cb:df:ef:37:eb:ff:fd:b4:d7:a9:11:3d:fa:70:
27:95:dd:a3:b7:54:31:92:93:55:2e:a1:35:9c:1e:
3e:c4:80:80:ac:cc:1e:36:6f:ef:bb:d5:4e:4a:d3:
91:58:cd:7f:80:05:b2:33:a3:0e:c7:87:77:4d:60:
fe:5a:e3:8f:0c:c5:1a:91:22:39:b5:8c:89:d4:fb:
15:8c:a1:df:d6:29:97:c6:8d:15:f7:28:06:03:17:
47:65:0f:c9:c4:1c:a9:06:12:da:43:66:58:21:fc:
d0:ba:9a:2c:38:23:bf:13:a3:7f:84:f4:f2:93:5b:
d1:0d:4e:9c:1f:04:b3:c2:53:32:b7:00:9b:3b:2e:
38:59:d3:dd:b9:82:6c:40:19:50:65:15:97:c7:d9:
2d:7a:c4:e8:62:39:42:cc:49:91:14:68:9f:4a:4b:
45:9a:5c:85:79:96:07:71:79:95:00:15:df:10:e4:
7a:b6:31:54:19:2c:30:33:4f:32:18:92:86:d5:e4:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:0A:E0:4F:4B:86:3D:30:50:73:10:37:82:FF:F5:A3:77:0A:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4530b9c6-5c85-45a5-8e99-e0b412e74316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:f000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:2e:fd:fa:2b:18:fc:cc:b0:85:eb:3f:87:86:f4:70:b4:d8:
d0:a9:b3:00:a6:86:e8:b6:fc:15:39:69:ca:b5:0a:d5:a7:3b:
7f:8e:bc:8f:75:fb:90:6f:0d:2f:91:58:62:91:45:e2:ef:6b:
56:94:de:58:47:1f:94:b4:94:f4:e7:f7:31:03:37:bf:c0:36:
23:99:ab:43:7e:ae:1f:a3:89:c7:38:b0:80:cc:35:98:bc:95:
20:d9:65:67:76:c1:dc:4c:45:c6:59:13:16:1d:1c:93:bd:28:
0f:f9:89:47:a7:6e:52:c4:d9:b2:a4:a0:86:79:e3:3d:5f:b8:
a5:a8:ee:78:cf:f5:08:aa:9a:53:6e:62:d6:ea:54:ae:b7:8d:
99:dd:d9:21:0d:d8:ca:6e:56:86:3d:43:03:a4:8a:83:ed:ca:
d9:3e:d3:dd:74:a2:15:3c:ec:f1:de:af:3d:69:1a:a9:1b:9c:
d9:68:bd:a2:f6:be:43:f9:bb:cb:3c:d4:fb:8a:7d:e2:d6:a3:
51:7d:f4:0b:8d:24:4f:dd:18:a0:db:74:91:c7:1d:e5:72:88:
c1:9f:4a:cf:32:f5:23:7c:4e:1b:7b:f6:d1:06:ea:56:fa:af:
18:18:be:d9:ac:0a:87:27:13:a1:28:9b:c7:72:8e:a5:0f:3a:
fe:46:97:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:33 2026 by rpki-client