Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
File: 4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa (raw, json)
Hash identifier: 8GOJ3cuw7ibUtseueDG3bJmB3qdbjnAQWjAqf/2RVV4=
Subject key identifier: 59:4E:E1:95:CC:83:2C:2D:48:46:53:AB:12:39:93:8A:92:80:33:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7951DA09B027670A7BB7327B0D28AD6330906961
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
Signing time: Fri 06 Feb 2026 00:30:12 +0000
ROA not before: Fri 06 Feb 2026 00:30:12 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:51:da:09:b0:27:67:0a:7b:b7:32:7b:0d:28:ad:63:30:90:69:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:12 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=245cf8b3adc3deb7440a985d96bcdc3bce5183337a49bb3d760f8583aa1df09b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:9c:eb:4e:fb:cf:f5:b5:be:e8:a4:06:74:
68:52:6d:a7:9c:4b:2e:db:0e:76:d4:60:61:a4:50:
1e:11:87:a2:86:b0:80:fb:b2:56:ff:87:a2:5f:8b:
f2:d9:2a:b3:2e:bb:30:94:ef:ce:63:96:ee:d8:60:
05:23:91:1f:4d:56:8f:68:c2:12:b0:b3:84:1c:b9:
d7:18:f3:13:58:8a:21:0e:40:74:71:a6:cf:46:53:
34:4d:f5:06:d3:d3:e8:25:c0:e1:84:87:da:b2:36:
d5:e9:80:79:b6:56:71:f7:ea:90:12:d2:6d:54:9c:
1f:f8:c1:e6:46:af:a7:cb:59:e9:93:c2:68:d9:01:
09:46:a9:15:3e:31:f4:e2:8c:ac:fd:90:24:5b:6d:
fd:5a:2b:db:4b:33:1e:b2:64:ea:88:d5:1c:05:2b:
05:a0:a5:29:10:e2:f2:c1:54:c0:a4:e6:ed:db:a3:
f6:7d:83:57:dd:a3:f0:06:c1:77:db:85:06:45:12:
2a:10:47:99:db:ff:52:70:37:c4:da:3b:94:90:ff:
6e:64:88:03:0a:99:40:a1:c0:f7:85:62:43:87:db:
0d:69:14:25:32:1f:ef:4d:21:e6:4a:40:27:02:cd:
09:18:53:1f:a1:80:a5:52:9d:11:78:38:52:7a:b0:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4E:E1:95:CC:83:2C:2D:48:46:53:AB:12:39:93:8A:92:80:33:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
9b:23:00:ec:c9:43:be:3a:25:68:16:16:2a:db:02:d3:ac:f3:
76:d2:51:c5:ec:87:26:b2:81:c2:10:ca:42:d7:d6:c0:f3:cb:
14:ad:69:bb:f3:a3:6a:c6:7a:3d:b9:d2:3e:b2:e7:fc:d3:94:
79:02:d2:23:58:d4:e7:d3:72:09:cb:a0:ea:83:ae:ac:5c:dc:
17:23:40:d2:f9:b9:9c:d7:22:a7:f6:aa:06:ad:c9:a9:95:bc:
a9:9e:46:41:74:51:50:8e:3f:5d:7b:6e:5f:5e:7c:f2:71:6c:
04:a1:4e:06:27:be:15:9c:ed:e2:9e:b6:49:49:f1:e3:d0:b4:
17:4e:1b:63:9f:54:de:92:27:8b:28:a4:d7:6c:e3:dd:ed:f5:
3b:2d:8b:9e:86:90:27:a0:e6:d7:57:e7:b0:51:f4:51:27:2e:
1d:94:13:9d:14:75:92:0f:71:96:eb:c4:f6:11:af:4d:e9:e0:
3b:f7:67:c5:d0:a7:dc:1c:fc:bc:49:22:3b:e5:e3:56:0c:51:
57:79:f7:83:e4:fb:94:56:12:94:e3:50:f6:a5:b3:cf:7f:e9:
f6:92:0c:ce:48:b7:47:68:b1:50:63:2a:f9:2e:c3:c2:d5:64:
c9:eb:75:73:5f:78:4f:fc:5f:86:cf:6b:8c:3c:07:d5:45:af:
9a:68:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:52 2026 by rpki-client