Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
File: 5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa (raw, json)
Hash identifier: VVDYCkYm0oaioLb1NyeypSEJ+NTchmhMDgmLK1mimnE=
Subject key identifier: 9D:50:2A:4A:55:52:26:55:B8:9F:37:5C:AE:D2:F8:09:5F:E2:B8:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CD060054A8A53675043F4DC2C99941DA9BB63CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
Signing time: Fri 06 Feb 2026 00:30:14 +0000
ROA not before: Fri 06 Feb 2026 00:30:14 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d0:60:05:4a:8a:53:67:50:43:f4:dc:2c:99:94:1d:a9:bb:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:14 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=eb075f0ed19de0d7066c27fccd34eda7eae06fb37699933b138214af7df2b4a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:b1:1f:dd:11:1d:09:73:62:87:cd:3e:77:
e0:3f:f1:3f:c0:f3:83:ed:41:06:f8:3f:95:a1:60:
d4:2a:f5:22:36:52:ca:70:4a:d3:f8:45:c7:13:2a:
7f:79:0d:67:ef:c3:2d:51:f4:56:63:58:23:bf:b4:
ed:1b:33:6a:7b:de:21:9c:27:37:b5:12:f5:67:45:
8f:e1:22:d9:71:49:b4:64:62:1e:59:8e:5d:6d:ac:
39:07:26:60:f0:80:8e:48:7c:ed:5c:22:a3:04:94:
dd:1d:eb:18:e1:46:39:c3:f5:bc:f4:5c:44:dd:3d:
66:fc:7a:a0:43:9a:af:68:a8:39:e4:bc:b6:87:51:
67:55:e0:9a:04:27:24:f6:f8:f8:50:35:a4:bf:e4:
04:27:5f:3b:49:cf:07:7e:ef:94:6a:80:88:23:c5:
9c:c3:a5:94:81:1d:16:df:73:14:3c:e9:24:d7:3a:
85:ce:30:74:9e:e0:51:3a:00:6a:b9:71:5e:9a:2d:
b1:a6:f6:e3:c3:38:3f:38:37:ca:b3:2a:00:2e:30:
37:e5:04:c4:5e:3c:f3:2e:40:ef:62:a3:8e:e5:c9:
0c:51:19:aa:fa:3a:78:d3:e7:72:32:cf:92:89:c3:
1b:13:ad:e4:85:09:7c:5f:0b:a2:32:58:f2:82:65:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:2A:4A:55:52:26:55:B8:9F:37:5C:AE:D2:F8:09:5F:E2:B8:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
a7:28:7c:07:54:35:01:4a:d7:cb:cb:78:23:a9:13:48:ec:aa:
ee:e8:cc:c2:2f:41:5c:4b:c9:ec:fd:bc:b0:ba:9f:2b:59:c4:
bd:9c:ad:2f:28:bd:72:bf:f8:f6:2f:cb:f9:69:ff:92:5c:88:
99:1d:6f:52:9d:44:f1:56:fa:8d:cb:f9:17:f8:f1:ea:d3:8f:
c2:49:ca:26:45:5c:df:1e:83:64:f1:8a:49:8a:a2:4e:ab:ea:
be:5a:dd:3d:2e:68:21:78:1c:7d:8a:71:cf:95:03:6a:8a:f3:
0c:f6:76:42:bb:87:8d:0a:ef:47:05:d4:93:45:2e:78:37:4c:
ad:78:23:f1:b9:c3:80:07:1f:bf:72:f8:c3:7f:11:62:b0:f5:
17:2b:2d:16:cb:52:9b:be:56:b9:fd:2e:33:b2:92:b9:8e:54:
96:9c:c9:fd:00:46:a4:de:4e:83:df:6c:b3:6e:9b:1f:82:c8:
e1:ac:b3:03:b3:8f:86:c8:36:35:cd:94:a2:79:1d:16:8e:4e:
28:a9:01:d9:1b:cd:72:7f:0a:0f:00:3b:c6:a3:6b:07:78:f0:
c3:c9:af:f3:4c:b3:ea:45:c5:02:67:92:af:b9:87:f5:2e:79:
3f:f8:c1:49:6c:ec:29:43:1c:f2:5b:85:bc:7e:d9:5f:4e:46:
04:38:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:36 2026 by rpki-client