Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
File: 4b0f19cc-b646-49d7-a134-8b1c2659541a.roa (raw, json)
Hash identifier: jFEQztZTc2htntSPC9IwYzrWK/cnMaRBIsQ4pacFIqo=
Subject key identifier: FD:48:C1:C8:AC:E1:88:FD:46:52:18:A0:29:97:F2:DE:11:58:0D:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C50E3DB5F23C481356657917B3DDA706DFF1FBD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
Signing time: Fri 06 Feb 2026 00:30:16 +0000
ROA not before: Fri 06 Feb 2026 00:30:16 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:50:e3:db:5f:23:c4:81:35:66:57:91:7b:3d:da:70:6d:ff:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:16 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=3ded0652b2b58f55c18346ccbb55297e4f6f9400e05a2590364abde18d8aae6a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:81:08:10:f1:2c:50:54:a2:0d:e3:76:22:
b3:76:c6:c0:ba:1d:7e:44:24:8f:78:dc:c9:da:9b:
8c:cb:f3:c5:1c:ce:96:41:10:5f:91:11:64:1a:0c:
e9:d8:1b:a9:e0:d0:81:33:94:99:72:40:57:b7:5c:
ee:89:38:b6:71:cd:a6:82:ee:20:e4:8d:3c:26:9b:
49:67:24:13:7b:31:ed:57:b9:65:5e:13:72:d4:19:
fa:a6:76:2b:71:4b:8a:44:9c:29:b0:d1:e6:55:77:
d4:9c:1b:d1:76:b3:b8:7c:9d:b5:0c:e0:fb:68:cf:
9e:56:52:89:6f:6a:78:44:00:08:78:69:a8:88:5c:
74:01:47:fd:98:f1:69:7a:73:3b:35:f8:c1:b2:6f:
91:07:3a:d0:8c:cb:e8:cd:0b:9c:16:c7:de:44:35:
3c:6b:cf:7c:21:64:09:04:dc:1b:b9:82:5d:72:73:
73:db:9a:8a:b9:b2:db:81:d8:80:e2:19:a8:a8:c6:
d5:b9:10:81:dd:ee:0d:e7:8f:7c:4f:ac:d4:6f:66:
e5:06:3c:01:f8:7d:0f:db:ef:c3:64:03:8b:47:ce:
cc:43:9f:60:d3:12:0d:76:86:2f:35:dc:3b:a5:45:
1f:21:d9:27:33:be:df:94:e7:e4:57:c5:77:ff:5a:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:C1:C8:AC:E1:88:FD:46:52:18:A0:29:97:F2:DE:11:58:0D:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:b0:85:ee:3d:95:56:bd:64:cc:21:0d:e1:cb:da:fd:93:06:
df:16:b1:ff:4a:b7:b2:3e:8b:cc:0f:8c:0b:b1:5a:a8:4a:aa:
ee:4e:e6:74:2d:33:b1:83:e3:4b:ac:5a:1e:5e:ea:e5:93:5d:
23:8a:ce:86:60:0a:1b:0c:fb:93:c8:cb:30:f3:62:01:8a:e0:
7d:f4:9a:bb:ea:a0:e8:2f:4f:3f:17:a9:94:31:84:34:5d:66:
7c:be:ef:50:ab:9d:a5:60:b8:6d:e1:b8:24:1c:78:50:5d:a9:
5d:e7:0f:0c:19:5c:e3:e9:63:fe:e2:05:40:cb:cc:e3:fd:37:
a3:cf:0e:ea:5d:3d:e8:49:d8:2a:36:b7:27:8b:99:b2:df:61:
cc:71:22:aa:07:44:59:f4:ff:34:d1:14:51:a1:3d:75:13:cd:
5e:d8:11:59:ee:d4:86:93:5e:97:2c:3e:49:48:bc:1c:fc:12:
ca:41:39:1d:d5:af:ad:a9:e7:dc:15:3b:6c:74:0c:f0:9f:a6:
1b:d6:d3:f3:8a:89:b5:0f:dd:42:6c:85:71:d4:ed:8e:73:a5:
aa:07:3f:9c:32:08:c4:d8:8a:1b:7a:73:4d:8b:f9:78:6c:fc:
2e:a4:ac:3c:30:3e:10:4e:4d:a3:d7:06:fd:ed:bd:44:02:27:
3c:70:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:45:40 2026 by rpki-client