Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
File: 48ce7dfe-434d-4b57-b520-9001ae26be85.roa (raw, json)
Hash identifier: YbNYa+TA2mV/AkM0DcHcFQZ/bg0cRTzyD956/eXzjLs=
Subject key identifier: 38:5E:69:34:E2:7F:43:36:65:21:E5:7F:82:1A:E2:BA:D1:05:90:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2AC3B8FB68F8DED214CF47C02AD95602B48251F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
Signing time: Sat 28 Feb 2026 05:30:12 +0000
ROA not before: Sat 28 Feb 2026 05:30:12 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c3:b8:fb:68:f8:de:d2:14:cf:47:c0:2a:d9:56:02:b4:82:51:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:30:12 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=7ab0f479c809824427c521b113d43fdd51c2bf2d751f07e95879c00db4a0840e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:42:88:1c:4c:5d:d9:93:3e:b8:9d:5c:ae:
40:80:fb:e6:41:be:a3:61:33:1a:f1:64:ea:e7:35:
85:a7:1b:c1:9b:14:41:ae:c3:d5:66:94:c6:f7:e8:
f8:cc:03:33:3b:ab:5f:3a:d6:9b:60:ea:40:33:e9:
2e:80:ab:bd:1f:24:26:c1:6a:89:74:90:ab:90:f3:
d4:4d:a3:01:ff:4e:1d:ad:c7:aa:44:e9:5b:80:e6:
42:f0:69:e7:8f:43:73:48:59:cd:00:40:ab:54:28:
18:6d:19:98:a9:ab:82:ec:36:0d:04:07:94:a7:8b:
3c:b2:73:ac:fe:d5:72:4b:0e:3e:04:e5:dd:c9:d9:
05:18:cd:fb:31:6c:4a:7d:c5:60:d4:9e:9d:25:24:
94:ee:ad:de:dc:d0:6b:3e:61:86:29:78:3d:ac:fa:
b3:e6:24:9b:dc:92:2d:90:dd:3e:fb:f3:88:5c:e8:
82:d1:9b:59:20:50:0c:04:23:ce:81:a8:37:cf:7e:
fa:b1:b4:02:b3:16:fd:17:4c:fd:72:fa:71:82:42:
41:80:e7:fa:07:89:d1:79:ae:93:45:bc:f8:7d:b2:
ee:18:8f:f3:94:b7:ec:ac:88:30:d9:ea:28:1a:48:
a6:a8:a5:cf:18:0a:64:d9:a9:30:31:0b:54:30:34:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5E:69:34:E2:7F:43:36:65:21:E5:7F:82:1A:E2:BA:D1:05:90:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8010::/48
Signature Algorithm: sha256WithRSAEncryption
1d:c6:1c:dd:37:d7:fb:8a:16:89:96:81:be:28:ab:4a:be:d0:
1f:26:6d:6b:c7:6e:c6:1b:f8:55:8e:57:57:b0:c4:b9:a7:96:
37:20:dc:44:75:c7:de:aa:92:c4:ef:8b:18:4a:37:b5:fc:5b:
65:3a:d6:f1:41:38:51:4f:cd:3c:cb:07:e0:22:67:d0:f9:09:
45:60:c5:ae:ad:03:18:c2:0c:65:8e:04:5e:d1:69:e8:84:73:
21:97:de:4c:25:8a:89:e4:2c:5a:49:9c:c6:8a:0a:42:f7:ab:
a9:81:c2:a3:53:c2:85:dd:2b:5b:9d:d5:ff:64:c1:22:c5:ca:
90:bc:d3:95:9d:4b:de:a7:58:82:9f:7c:08:43:35:93:fa:f3:
ec:50:e9:a9:36:7f:b9:23:85:38:eb:db:59:25:7a:4d:8b:82:
ed:35:52:b3:26:6b:74:42:4b:12:97:19:f2:ad:ab:26:b7:62:
4e:a4:78:8f:64:0f:f0:86:96:3a:1d:9f:6d:22:d6:40:eb:79:
3a:db:af:25:7b:af:4d:26:19:ce:b1:de:4d:ff:38:6c:f0:5f:
46:d6:bc:db:73:a6:a5:a8:4a:82:f9:cf:b6:e3:ab:fc:da:5f:
75:83:ea:5a:af:02:40:cb:06:20:79:3a:89:fb:ec:b1:1f:f6:
51:43:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:19:04 2026 by rpki-client