Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
File: 533769c8-002c-491c-9b99-324fe9f5743c.roa (raw, json)
Hash identifier: UzuuwaFziIt29fR4Xj61YEJ8SRd9/YKoJyBknJaiXso=
Subject key identifier: 44:E6:38:6E:D6:22:F7:26:C4:22:C4:17:0E:26:56:38:A0:35:7F:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A222DF8230BEA15A80DF588BCE0C2C96A7183AA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
Signing time: Sat 28 Feb 2026 05:31:14 +0000
ROA not before: Sat 28 Feb 2026 05:31:14 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d022::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:22:2d:f8:23:0b:ea:15:a8:0d:f5:88:bc:e0:c2:c9:6a:71:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:31:14 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=f9e6024891ef7fdedfeab8f40a4207ba96331f74000d694b8690f6546a3b5ea3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:27:a7:14:3f:ff:9f:6c:62:ac:e3:47:35:e3:
ec:d0:a4:86:2a:85:6e:fc:7b:25:e5:65:a5:e9:c7:
c9:43:10:5a:44:66:a3:be:bc:b6:03:44:4c:a8:17:
d3:25:b4:d0:a9:06:6c:14:97:32:ca:64:99:2e:d9:
88:f8:c4:d0:58:49:30:fe:82:f0:a9:11:8b:48:f4:
92:e4:f2:73:cb:01:2d:7e:c0:ed:38:05:e0:8c:b0:
35:a4:3f:f5:99:35:01:5a:a8:30:53:ca:15:d4:24:
b2:69:1e:c5:c0:79:8a:d7:45:2a:84:69:4b:2b:3a:
ee:fd:a3:0c:67:98:ce:f0:e1:3a:2b:5e:bb:4b:ac:
be:db:35:a7:fd:b6:5e:50:37:99:f1:c8:4d:d1:97:
00:67:28:ad:9a:5a:16:a5:b3:dc:ac:68:5c:1f:e6:
5f:08:30:0a:12:87:fc:99:78:03:00:7b:69:0c:51:
d4:98:95:87:2f:ec:38:e3:a7:7b:66:e8:ec:9f:24:
bc:d8:8e:53:6c:49:52:c0:4a:5b:6e:56:e5:d3:44:
75:c9:82:4a:88:3a:f5:a6:f1:84:ec:54:8a:85:b2:
e1:34:81:48:97:8a:15:b2:70:c4:d6:d8:64:f5:10:
29:b3:70:e2:cf:51:ff:ce:91:02:58:54:86:1e:6d:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:38:6E:D6:22:F7:26:C4:22:C4:17:0E:26:56:38:A0:35:7F:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d022::/36
Signature Algorithm: sha256WithRSAEncryption
ae:bb:1a:39:73:27:54:37:4b:b9:27:cd:2b:d8:87:5f:9d:b5:
d4:35:01:92:a1:fc:c9:6f:11:27:35:a0:30:81:21:cf:f0:63:
3f:3b:c3:13:b8:48:5f:33:c1:3a:12:0e:89:4a:17:32:bf:30:
27:60:ce:86:71:20:77:e9:f7:44:a1:58:72:96:7a:26:c8:84:
c7:42:b8:a1:c0:6e:03:18:73:46:6b:d2:c5:01:5a:7f:61:c1:
f4:49:de:72:9b:90:d0:86:1a:a0:43:99:31:82:6f:31:31:1d:
f6:94:af:06:ca:dc:4b:62:25:1a:31:b6:20:04:5c:89:af:1f:
59:26:2f:d5:60:9a:a9:80:3c:b0:b4:2c:f4:ef:2f:33:40:3a:
5c:0a:09:0c:48:ed:fe:e9:15:db:ec:3b:c5:2a:57:fc:40:d9:
9c:10:8f:6d:92:5b:d3:e2:67:82:f8:de:ad:7f:02:0d:5f:d4:
be:e3:5e:f8:4c:13:90:6e:a8:80:aa:66:a6:dd:2a:c7:89:27:
41:a7:d0:88:1b:50:0d:10:5f:2c:47:ac:bd:ce:88:4f:b0:07:
33:9d:10:07:77:49:3b:e8:b7:52:0f:d3:9a:1c:b9:52:89:81:
5e:fb:d4:34:36:aa:c5:bd:57:14:a0:7d:f2:9f:3f:59:e5:b7:
e1:16:ce:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:56 2026 by rpki-client