Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
File: 46510026-3bc6-4802-9977-5875dcaffcac.roa (raw, json)
Hash identifier: pHhUtjsQHp9rHMkbSh9nN4Trs3VG9YZ4qq1mX6610MA=
Subject key identifier: 98:A2:56:E5:59:AF:7F:AD:37:A3:89:D5:66:0E:C5:6D:91:28:75:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 465815D82E11395204D303226A254194DB668235
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
Signing time: Tue 24 Feb 2026 03:00:09 +0000
ROA not before: Tue 24 Feb 2026 03:00:09 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:58:15:d8:2e:11:39:52:04:d3:03:22:6a:25:41:94:db:66:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 03:00:09 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=565f016bd22c1a81876151f277c8df3b7329ffd31e8b7db31a8caf637bf41c64, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:13:d7:d0:b4:84:31:98:c3:8a:a3:be:1e:
af:70:37:43:b1:6f:97:57:7a:4c:ee:41:20:f1:65:
b2:38:c3:bb:2c:fe:9e:92:10:a1:2b:20:96:c1:45:
91:14:86:c9:52:a2:22:3d:8a:f7:55:f1:33:c5:a0:
30:82:cb:3a:a5:4b:f3:8b:68:b1:97:de:54:4f:6a:
d4:53:d7:eb:0c:26:5e:10:bd:c7:19:8d:bb:1d:6c:
20:0e:ec:12:28:8b:5c:7d:cb:8b:f4:26:bf:7a:89:
fe:db:fb:64:5d:4e:bf:df:d9:2c:03:e3:cc:d0:af:
07:f4:f5:56:4b:6a:22:a3:c3:54:67:74:a7:88:d8:
ad:be:82:4f:2b:fb:14:2c:b5:c7:f9:ed:73:9b:6d:
82:78:12:d7:9e:86:7a:ef:3a:75:43:46:78:55:2d:
82:08:65:53:9c:ec:41:fc:3b:cc:b7:3f:6e:03:dd:
56:70:be:4f:24:2f:3b:8c:e1:a3:d4:1e:1f:a5:36:
3b:20:e0:ff:28:9c:18:a7:61:4e:b1:ee:f9:b0:ea:
c8:f5:cd:9e:79:f7:f9:53:f8:94:d5:1d:f5:82:25:
24:cd:40:e7:3f:b2:ef:3e:5f:9c:42:9d:c1:2b:14:
ab:c4:cc:ea:72:1d:48:4f:47:76:37:fd:b6:3a:31:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:56:E5:59:AF:7F:AD:37:A3:89:D5:66:0E:C5:6D:91:28:75:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
c9:e5:25:a4:f8:ce:5a:61:85:33:29:33:e4:7f:2f:75:ee:87:
e6:bb:9a:3e:31:a6:6a:f2:71:ac:7c:b5:40:36:e4:2f:0b:9f:
a4:48:58:5b:77:ae:93:69:15:ba:e8:ff:98:cd:d5:57:e4:20:
e1:52:79:dd:c6:7e:bd:c1:4a:16:d3:4f:95:8d:98:43:51:29:
0d:7d:28:35:69:be:6f:33:5a:84:e8:84:82:b9:89:f8:51:99:
dd:a4:d7:76:05:7e:0b:54:70:90:9c:b5:6b:c7:c7:0d:90:6b:
93:77:2a:41:2c:85:a9:a4:c9:c1:b3:20:e3:36:05:8d:e1:b8:
bd:29:c2:6d:6b:47:77:f3:81:7d:f0:c7:c7:f3:e5:08:09:ef:
fa:ac:c2:46:d9:8a:f1:b4:a4:4d:a6:f5:82:30:b2:63:b3:ff:
6e:d4:7e:23:7f:4b:d4:e0:74:cc:cc:fd:e5:24:15:7b:ec:af:
2b:5b:04:da:96:a5:78:d1:71:10:27:00:f7:ba:7f:e8:08:a6:
ff:c6:0a:77:e3:b6:a7:87:98:c5:b9:d8:96:57:75:50:cd:d9:
5e:50:08:46:be:7f:08:c6:76:1e:28:b3:a2:3a:23:e4:b3:00:
62:14:2e:99:40:c2:95:16:05:ba:91:32:b3:df:a8:9c:f4:b1:
aa:aa:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:35:18 2026 by rpki-client