Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
File: 6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa (raw, json)
Hash identifier: b8EoYMrWrdbF3cntTV4Kr/RcUHXKHtmdMwHde/6iGho=
Subject key identifier: 23:6B:DB:1A:D2:23:FB:F8:E7:3B:52:38:42:DF:50:AD:FF:8C:DA:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A6D9EDDA0ED66F11A3AE8AC98CF225A260494CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
Signing time: Fri 06 Feb 2026 00:30:13 +0000
ROA not before: Fri 06 Feb 2026 00:30:13 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6d:9e:dd:a0:ed:66:f1:1a:3a:e8:ac:98:cf:22:5a:26:04:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:13 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=d3fadb275cefd14348a6a9272c86beb8b65024b98a7a6efa6663c91900989f39, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:7c:94:63:cd:dc:b0:6d:90:66:6d:1b:e1:
c8:4f:59:8c:45:8a:9e:1d:a8:fa:84:0f:5d:a1:e5:
aa:6b:2b:16:ee:53:bb:a8:0a:7b:ad:df:1a:50:ad:
8e:50:03:78:d6:9d:49:7e:52:d7:11:66:ac:4d:f7:
7d:33:be:e9:75:8a:17:4c:f7:90:5a:04:ee:ac:51:
17:30:e9:96:0f:92:d6:6c:5d:ba:2d:25:af:d4:d8:
7d:9e:93:61:96:75:f9:63:ba:97:c4:59:41:2b:e7:
f7:60:26:3e:e6:b5:e7:8f:79:b1:89:dc:b2:2f:cb:
cb:7a:96:ec:ef:79:b8:a3:fb:2a:f6:27:e0:31:7a:
ad:41:17:99:24:2c:10:7d:61:23:7c:0e:08:dd:8d:
97:fb:b8:4a:49:10:70:5b:38:8e:5d:10:db:3f:04:
c8:b8:43:c9:75:11:19:9b:1f:56:0a:5e:72:d9:c8:
2c:52:69:f7:aa:82:65:01:02:60:94:36:a8:39:bb:
83:42:56:8e:ca:52:8e:7c:18:2e:0b:54:d9:6d:0e:
77:e7:5b:ba:87:31:49:ed:5d:75:7e:35:9f:84:e7:
b8:e1:e8:2b:77:db:b6:5a:b0:7f:58:ee:93:8a:e5:
78:25:11:39:33:8d:b6:22:bc:af:ee:56:01:a1:ae:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:DB:1A:D2:23:FB:F8:E7:3B:52:38:42:DF:50:AD:FF:8C:DA:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
7c:25:de:f4:7f:96:52:e3:47:56:21:d9:e9:33:20:4d:4f:1a:
11:b7:06:79:49:07:6e:61:f1:7c:cb:fe:33:bd:ec:f5:35:7c:
1e:f9:3c:55:52:d2:33:5b:9e:54:cf:bc:11:57:38:1f:cc:f4:
ea:76:d3:73:cc:4f:d0:4c:e4:7f:3b:3a:e5:71:23:97:93:e1:
ca:ed:89:5b:0a:70:3c:fa:e1:fb:6e:cc:8a:a5:e7:8f:75:a0:
a8:83:b4:c5:bf:3e:7b:09:2d:da:db:a1:f7:eb:35:c4:d0:8f:
4f:75:1f:a9:ec:34:e0:d2:a0:bf:b7:43:fb:02:09:ff:66:b2:
1a:18:df:a1:eb:97:27:27:ab:83:53:fa:3a:b8:e1:b9:13:a8:
a4:78:8e:6d:02:2f:3a:c5:a5:d7:b8:03:c9:e7:52:c2:f9:5b:
dd:21:77:79:97:4e:68:3e:8f:b9:1a:aa:c4:68:db:9a:8f:14:
6b:10:17:ba:4f:5b:1a:da:62:32:ca:76:3f:1a:45:5c:04:57:
ff:7a:56:6e:d2:c7:58:07:ce:fa:b0:2c:ad:af:ae:44:bd:af:
32:bb:2f:2d:c1:41:e1:5a:88:08:ea:ef:aa:04:9e:c3:68:b9:
5e:f3:01:2a:5d:56:fc:b3:ac:e1:c2:9a:a7:35:4c:d5:a2:5c:
0f:10:ee:b7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGm2e3aDtZvEaOuismM8iWiYElM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMDYwMDMwMTNaFw0yNjA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQGQzZmFkYjI3NWNlZmQxNDM0OGE2YTkyNzJjODZiZWI4YjY1MDI0Yjk4YTdh
NmVmYTY2NjNjOTE5MDA5ODlmMzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOEufJRjzdywbZBmbRvhyE9ZjEWKnh2o+oQPXaHlqmsrFu5Tu6gKe63fGlCt
jlADeNadSX5S1xFmrE33fTO+6XWKF0z3kFoE7qxRFzDplg+S1mxdui0lr9TYfZ6T
YZZ1+WO6l8RZQSvn92AmPua15495sYncsi/Ly3qW7O95uKP7KvYn4DF6rUEXmSQs
EH1hI3wOCN2Nl/u4SkkQcFs4jl0Q2z8EyLhDyXURGZsfVgpectnILFJp96qCZQEC
YJQ2qDm7g0JWjspSjnwYLgtU2W0Od+dbuocxSe1ddX41n4TnuOHoK3fbtlqwf1ju
k4rleCUROTONtiK8r+5WAaGu2QMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQja9sa
0iP7+Oc7UjhC31Ct/4za+jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjAyN2NlMTQtOTVkNC00ZjVhLTlhNTgtNTJkMjY2NzhlYThmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G2A
gDANBgkqhkiG9w0BAQsFAAOCAQEAfCXe9H+WUuNHViHZ6TMgTU8aEbcGeUkHbmHx
fMv+M73s9TV8Hvk8VVLSM1ueVM+8EVc4H8z06nbTc8xP0Ezkfzs65XEjl5Phyu2J
WwpwPPrh+27MiqXnj3WgqIO0xb8+ewkt2tuh9+s1xNCPT3Ufqew04NKgv7dD+wIJ
/2ayGhjfoeuXJyerg1P6OrjhuROopHiObQIvOsWl17gDyedSwvlb3SF3eZdOaD6P
uRqqxGjbmo8UaxAXuk9bGtpiMsp2PxpFXARX/3pWbtLHWAfO+rAsra+uRL2vMrsv
LcFB4VqICOrvqgSew2i5XvMBKl1W/LOs4cKapzVM1aJcDxDutw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:32:20 2026 by rpki-client