Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier: JJNrfL1Udygu5rvegehMmf+XByor6mre/FTt8x1aiCM=
Subject key identifier: A8:96:BF:8E:06:A1:0F:8F:4E:19:F8:4F:17:CC:E5:46:80:70:2D:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F25C9A9A857BE92227892890F19A8AF87F0A14C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time: Fri 13 Feb 2026 15:20:07 +0000
ROA not before: Fri 13 Feb 2026 15:20:07 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:25:c9:a9:a8:57:be:92:22:78:92:89:0f:19:a8:af:87:f0:a1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:20:07 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ee9f90356d2fc7cba69f4cbe29a03fb497876503949a7ccd844be14d43f8136a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:46:6d:63:33:68:73:e7:d3:da:e7:d0:18:
62:dc:6e:33:f5:58:39:8e:41:39:c3:53:95:5a:96:
14:6c:70:c5:36:f5:a5:95:f9:84:98:5d:ae:50:66:
08:55:4b:ee:08:69:d8:79:b6:85:b3:5a:d7:04:1e:
27:f8:ca:c4:d1:36:21:3c:de:1c:ee:4f:51:96:2c:
00:39:76:03:df:16:ed:45:a2:98:2b:ad:71:d1:75:
b9:3f:ef:5c:6c:17:a3:03:91:79:78:9f:c0:27:f7:
1b:f9:6d:16:e3:2f:48:45:ac:13:a2:e1:5f:13:7c:
0b:ec:ca:9a:95:a9:a3:3b:71:dc:61:e3:ef:5d:74:
ae:2e:b4:8f:ca:34:4e:8d:b7:01:1e:2d:b1:54:13:
f3:a0:15:c6:ea:98:30:9b:23:82:95:ca:cd:0d:79:
65:63:d2:88:24:16:da:14:8d:cf:cf:dc:b1:2e:c2:
bc:1c:87:21:b9:56:14:db:61:80:70:dd:cb:8f:0d:
8a:94:b1:a0:3b:28:39:ff:1b:4b:95:55:c5:98:1e:
51:67:9a:79:2e:2a:cd:b8:6b:3a:9d:ee:9a:be:81:
37:12:0f:c7:00:f4:15:9b:17:1a:51:d2:60:ef:cd:
91:86:a7:b4:79:35:54:bf:f4:c0:56:3b:34:a9:a5:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:BF:8E:06:A1:0F:8F:4E:19:F8:4F:17:CC:E5:46:80:70:2D:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
03:ad:ed:05:c9:ab:f7:25:76:66:24:6b:31:4a:ce:81:50:a4:
77:4c:7c:b2:6c:40:9d:8a:94:53:40:58:ee:f7:59:99:a4:8d:
18:9d:4b:72:06:e1:0c:66:39:25:ae:2c:1c:07:7a:02:8f:5e:
ca:70:16:38:12:3c:c9:59:d2:b8:dc:95:a8:76:a0:eb:56:a1:
b4:be:aa:c0:93:07:d8:96:4b:f9:03:ed:a4:9d:1f:7c:4c:6a:
14:22:f2:dd:69:9d:d0:99:d0:b9:a1:96:f2:3e:60:1f:05:cd:
eb:eb:f0:4f:fa:59:dd:7c:88:d5:2e:f3:11:b7:13:74:2e:5f:
90:09:59:d7:7b:0e:55:d0:be:8d:5e:b1:d1:da:82:1a:13:80:
f3:5d:c2:da:4e:7b:6c:43:0c:c7:1d:67:50:be:53:b9:af:50:
aa:af:0f:a4:d4:09:5d:34:88:6f:07:1b:50:42:02:00:35:6b:
63:93:22:92:68:ec:16:fd:80:a9:40:e0:7a:eb:be:43:dd:cf:
f6:26:5f:3a:f4:c6:16:7e:61:6b:d9:8d:3c:e8:d4:94:2c:42:
7b:48:d9:cf:14:9b:83:4d:43:ba:bf:67:73:ba:92:ca:98:3e:
3e:fe:37:4f:33:19:1a:64:f9:92:eb:3e:55:5d:bd:95:d8:88:
77:73:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:56 2026 by rpki-client