Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
File: 56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa (raw, json)
Hash identifier: pN2XkTI05G3V3u9cxTFIsOSGy3P2IQJTie8LRJe495k=
Subject key identifier: A8:4D:43:E7:D4:7C:0B:FB:DB:20:6F:54:61:0D:DC:4A:34:B8:F9:DD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CC4E027EE34F62AB5EF6AFE58A4397B47AF7A75
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
Signing time: Wed 11 Feb 2026 01:30:16 +0000
ROA not before: Wed 11 Feb 2026 01:30:16 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c4:e0:27:ee:34:f6:2a:b5:ef:6a:fe:58:a4:39:7b:47:af:7a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:30:16 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=76526c9d7515f88a5062ac00b419e89bfeaab4ad8e88a9c7d65ca3ac49e330b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:de:73:79:a1:72:31:4b:28:a5:f5:0e:ff:79:
99:a7:44:71:d2:b4:68:35:c0:f8:23:23:c1:c4:1d:
14:58:08:16:53:48:90:e2:31:32:a6:2d:40:c2:c4:
c1:c3:35:67:52:a8:b7:68:d7:20:71:c5:29:3d:fb:
f1:49:5b:6b:e8:5f:1e:ac:12:76:0d:a2:f6:a4:82:
10:aa:45:41:07:3d:ea:43:9a:8d:74:8c:52:0c:16:
3d:4e:59:b9:58:19:9d:79:08:c9:ca:e8:af:bc:a0:
86:4a:72:e4:1e:bb:ec:b2:2b:1c:2e:54:f9:4b:9d:
18:31:78:2b:0e:3a:d9:f5:99:52:75:63:61:43:6e:
fe:f1:1c:e1:30:e3:43:a9:4d:c7:bc:38:64:64:84:
5f:f0:2e:04:f1:4c:76:03:d8:e9:ab:4a:54:dc:c3:
13:a0:26:6d:53:17:5b:69:73:c3:a7:9e:6b:4c:bc:
e1:23:6d:d1:ed:6f:f2:da:5d:31:15:89:b3:00:b2:
0f:ee:97:6e:ee:82:f2:ad:c4:f3:45:2d:0a:bd:af:
11:1d:6a:1f:6c:92:4a:36:b9:df:8e:36:74:1a:9c:
05:44:38:f0:d9:52:6a:d3:e7:aa:81:cb:a7:d3:0c:
18:a1:df:c3:9f:79:ec:3f:50:1c:26:d2:c5:cf:42:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:43:E7:D4:7C:0B:FB:DB:20:6F:54:61:0D:DC:4A:34:B8:F9:DD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
10:5d:08:12:bc:80:b1:ec:4b:07:af:f3:a0:e2:e0:1f:a9:31:
3b:9e:bc:2a:fe:ce:92:f8:09:45:97:b6:8a:73:03:a2:66:fd:
15:4d:46:8e:b4:9f:34:38:da:ec:a9:f2:8f:e4:40:aa:c7:e6:
12:c1:8a:e0:be:b4:24:9f:99:33:43:1f:13:8b:be:25:80:cc:
f2:f9:6e:f7:78:3d:24:ef:78:bd:b8:e1:00:1d:fe:d6:f5:21:
ca:04:22:7d:25:da:53:ee:33:3f:9a:67:b5:f5:49:59:3d:55:
0f:2a:46:b6:c0:c6:fd:0f:27:d5:8a:13:09:c5:51:2d:42:43:
6e:25:ea:dc:48:e2:82:96:06:87:8d:8f:b6:7b:a6:80:be:e3:
5f:bd:2e:fb:db:62:0d:e8:f9:0f:80:fc:6e:32:74:45:bb:7a:
df:e3:41:e5:d0:03:50:fd:cc:2f:f7:d8:96:45:54:cb:80:3d:
38:f3:8c:33:5a:f3:dc:78:b4:ac:06:90:2b:80:40:62:fa:a6:
56:f9:36:e6:fa:f6:7e:40:48:ef:5f:84:d5:d3:ef:1c:2b:51:
59:19:2e:26:2f:7e:40:fd:51:02:d5:ba:81:00:10:bd:89:dd:
cb:1f:b2:8e:bd:a8:1d:7b:70:5c:bc:8d:ad:e8:d7:0e:5f:fe:
c4:c5:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:02 2026 by rpki-client