Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa
File: 6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa (raw, json)
Hash identifier: q2Fc79bweQYyrfB1lmPwKhZbb7eB4MYoJ35SHflZ4bM=
Subject key identifier: B7:80:B8:6E:DD:6A:87:57:4D:B2:6C:33:50:71:2D:55:95:02:89:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F399C6990CBB64351C8B8B713C5CCC64158BFEC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa
Signing time: Wed 11 Feb 2026 01:30:36 +0000
ROA not before: Wed 11 Feb 2026 01:30:36 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:39:9c:69:90:cb:b6:43:51:c8:b8:b7:13:c5:cc:c6:41:58:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:30:36 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=81ca1874591f2bb80654cd66e85979a60beb3cdcab888ed424171a8e87dbba51, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:a7:77:58:5c:6b:b4:f6:a8:b9:8b:58:ff:
0f:29:da:9e:d6:4b:2d:3b:cc:cd:e2:63:17:28:0f:
9b:bf:d1:7a:71:4d:10:a6:69:84:2c:88:1e:02:63:
a3:32:2c:51:c4:ee:32:29:f8:a3:72:30:ca:ba:91:
f6:2b:3c:c7:27:17:d0:e1:93:4c:0b:7d:bf:0a:7a:
57:db:64:59:00:1a:74:64:b0:ee:83:0d:2f:3a:88:
76:48:d9:ad:b1:a8:7e:c9:85:d7:ed:19:7b:a5:09:
5e:29:8d:4e:28:63:70:b7:81:30:70:45:6c:12:21:
e2:84:32:88:fd:b1:be:7f:32:0a:86:a7:c5:c2:9e:
f8:28:fa:e1:b3:e0:08:8a:9e:ba:f1:3c:89:7b:0f:
3f:81:b2:8b:59:07:ab:3c:75:0c:79:1c:e2:b0:87:
d0:5c:81:18:f6:f3:b9:58:48:68:8a:22:b7:2c:18:
55:8f:35:ed:c7:1f:65:57:d3:f2:4a:7b:2f:9c:b9:
7c:6c:80:3d:a2:30:6e:42:cf:0a:c4:c1:91:30:dd:
d4:f6:9e:7b:b1:59:03:45:1d:f0:9f:6f:8d:7b:1d:
a9:70:13:30:29:d0:ef:41:aa:61:10:40:14:37:dd:
a0:7f:62:73:16:ec:77:a9:df:2c:a2:2f:f7:91:85:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:B8:6E:DD:6A:87:57:4D:B2:6C:33:50:71:2D:55:95:02:89:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8040::/48
Signature Algorithm: sha256WithRSAEncryption
41:af:5c:d7:63:c9:48:e7:b7:b5:e8:dc:6b:ce:a0:d4:03:6d:
2c:90:36:48:b5:e3:e1:46:22:41:88:e3:f3:40:d3:80:c3:a3:
dd:2b:f2:f7:08:7a:e0:7a:92:54:b1:38:62:47:b3:34:3c:c7:
34:59:e7:8d:38:47:79:bb:fc:d0:5b:74:30:46:69:f3:f0:5a:
20:03:40:74:75:95:8c:0a:99:5f:54:dc:75:34:aa:9f:c6:15:
18:a6:85:d4:b0:08:da:ef:84:f5:3f:77:94:88:5a:1e:96:2d:
5e:53:31:99:08:71:fe:42:fd:5d:a8:cf:25:f8:94:fe:ba:b9:
89:72:a8:c5:55:9e:33:e6:63:9d:ed:5b:95:c8:bf:f3:d3:88:
c1:63:e9:75:a9:f3:b5:01:93:cd:96:86:39:84:08:fd:c3:f1:
ad:01:8a:a0:f1:a3:4e:31:b3:07:f9:22:f9:e3:3d:07:27:99:
37:c1:eb:14:1a:9e:cb:7e:d3:78:e9:69:ab:1d:ca:46:9c:9a:
68:c6:5f:d6:5a:7f:75:bb:ee:19:24:36:7b:bd:f4:ba:a4:2e:
c6:95:7a:81:ee:fd:9f:5d:a5:19:06:2d:3b:f0:ab:75:73:6a:
ed:01:c1:ef:28:a8:20:6f:14:a0:f0:ea:b0:a7:72:d0:c1:8f:
fe:5b:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:50 2026 by rpki-client