Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File: 4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier: z+WM6btvdZVK3Qrj3jOU6oH0NW+r0ynzpkm1IatJ5RA=
Subject key identifier: 89:84:8B:B0:FB:D1:F7:03:4F:ED:CB:81:E0:77:9E:BB:FC:0B:10:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6022D7853CB0DBBD1028100E173A962D99654117
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time: Sat 28 Feb 2026 06:21:10 +0000
ROA not before: Sat 28 Feb 2026 06:21:10 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:22:d7:85:3c:b0:db:bd:10:28:10:0e:17:3a:96:2d:99:65:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:21:10 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=e8b0f5917312d9b8f31cbf11a146bce4e58f64147c6bfe7953db86de7d9b5b0e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:b2:c9:b6:cf:bb:29:af:6d:f6:78:af:a0:
e8:ef:00:6e:c3:22:31:8a:6c:a6:c1:2d:8f:c6:89:
94:fa:11:97:1a:7c:ec:e5:73:2b:4e:c1:9e:1f:2a:
b8:d3:95:71:98:83:ca:c9:16:68:18:c3:42:0a:bc:
7c:b1:9a:ba:49:be:9a:fc:90:1e:0c:a6:26:4c:0f:
e0:9d:f9:8e:83:7f:97:0a:da:50:ee:79:7b:b1:a2:
d5:6e:b2:6a:7f:3d:6f:36:52:4d:b7:78:8a:45:a2:
ff:b5:a3:33:e4:72:0d:dc:27:7e:ed:93:0f:99:68:
11:56:64:d9:3c:a5:1d:6c:3e:35:aa:44:40:a3:f3:
34:e2:f5:e7:62:d6:20:88:53:1c:df:5c:96:d8:db:
ad:55:d4:ed:48:fe:13:6b:ea:43:b2:bd:dd:2b:75:
41:6a:4d:f0:c0:7d:c7:8c:d9:16:b4:61:62:9c:5b:
ef:5d:13:47:94:c6:70:ce:95:82:4e:af:f1:2d:59:
27:c8:f8:52:ad:08:c1:90:cd:81:81:82:e1:60:33:
93:60:b3:43:c9:a1:56:cf:2c:8b:d9:b3:77:b9:1d:
b9:94:7c:ee:d5:89:60:b5:60:fd:c4:3a:d3:3d:54:
b0:34:22:a3:cf:2e:0d:5f:d0:16:11:6a:19:a4:ff:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:8B:B0:FB:D1:F7:03:4F:ED:CB:81:E0:77:9E:BB:FC:0B:10:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5080::/48
Signature Algorithm: sha256WithRSAEncryption
8b:76:e2:2f:d3:fa:c2:ca:8d:c2:cf:54:c0:f4:d6:86:d5:a4:
eb:1f:59:e4:03:a5:a2:51:34:16:10:e3:08:e1:c6:8b:38:9e:
12:c3:71:84:4b:42:37:e2:e4:5d:8d:02:ce:47:8a:5c:db:97:
ab:05:0e:29:a5:4d:d0:19:10:a3:60:57:57:a1:14:b8:4a:dd:
1f:0f:a6:72:df:30:13:9d:3e:40:dd:f8:f8:d5:2f:15:69:6a:
12:8a:e6:98:50:f3:6c:2d:5a:84:8e:e9:4e:46:e5:b1:aa:56:
25:11:c6:90:24:df:86:46:99:47:38:7a:f6:69:16:5c:c4:e7:
12:5e:54:e1:37:50:5b:6e:5a:c3:73:08:7a:8e:18:17:00:fc:
d2:86:c8:f4:09:9d:ec:c1:bc:7a:4a:9d:2c:8f:76:e6:89:3f:
5a:66:f4:a1:4e:1f:98:b7:a4:a6:bc:6f:c1:58:bc:58:fd:3a:
df:aa:f3:f9:53:08:75:f7:bb:7c:b7:bd:cc:7b:0b:43:ad:1b:
c3:9d:e4:59:70:35:ea:eb:ca:2a:0e:80:0b:f6:7a:de:cf:42:
51:19:99:0b:12:58:35:da:0d:6d:d5:e3:36:9d:4a:48:56:37:
55:f1:af:55:4e:60:5f:04:ca:29:0c:2c:b6:02:3f:ea:84:23:
c4:d2:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:50 2026 by rpki-client