Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
File: 6fa185be-42e8-4c62-ba43-464d0598c2ee.roa (raw, json)
Hash identifier: qf6jlSiXbiorl6hgie2bSoyuXZvF6pAxgJhTJa46Gec=
Subject key identifier: 32:52:A4:BD:B4:28:95:E3:AC:64:D6:6A:BB:20:E4:EA:9A:4D:A5:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04A0D29FD0AD0A1C3CCCDA5D359D7B57569A7A27
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
Signing time: Fri 13 Feb 2026 15:30:10 +0000
ROA not before: Fri 13 Feb 2026 15:30:10 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a0:d2:9f:d0:ad:0a:1c:3c:cc:da:5d:35:9d:7b:57:56:9a:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:30:10 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=e89d02e3e77673f0ced4cca18d4153a6b618307b46f2e5d312ebfd12f3644ed8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:11:5b:02:36:7b:a4:22:1b:f8:d7:e4:75:
3f:e7:47:54:5d:fc:ec:d8:4d:98:fa:c4:e7:3a:5b:
a0:c2:d3:66:79:0f:44:f8:43:dc:89:67:6a:ad:7a:
4d:00:32:74:29:66:98:ce:d5:59:dc:35:08:1b:a5:
17:8f:c6:27:72:32:91:02:0a:6d:99:8b:8a:0c:9b:
fb:89:69:78:57:75:69:3a:7e:83:cb:f5:f9:5b:26:
41:61:31:5e:a9:f2:75:8c:16:0f:ba:65:47:b0:8e:
d2:7d:ab:35:d7:04:e9:20:39:43:83:9c:78:d9:ab:
c2:fa:15:9b:60:20:be:0b:50:96:14:2c:07:49:77:
c2:28:65:ac:96:9f:0c:e4:7b:b8:69:92:5a:d7:cd:
b1:5d:4f:35:91:c8:2f:6e:60:3c:7e:d6:24:6a:12:
91:bd:5f:da:76:da:d8:5c:01:19:75:3c:ef:cc:de:
12:3b:67:cb:2b:ab:94:88:d7:7a:36:cc:da:42:6d:
e2:ce:5b:27:1a:c8:c8:c2:0b:8d:9f:21:65:da:ed:
f9:ad:a6:87:2b:2b:33:ed:1d:2c:bc:bd:fd:32:61:
3d:cd:f2:76:33:bd:f5:00:9e:85:d9:13:80:fe:80:
47:85:ed:98:a6:df:ff:0d:0c:86:48:28:3f:e3:b6:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:A4:BD:B4:28:95:E3:AC:64:D6:6A:BB:20:E4:EA:9A:4D:A5:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b080::/46
Signature Algorithm: sha256WithRSAEncryption
54:66:10:ad:ba:62:01:61:36:ae:4a:68:7b:ca:21:05:20:6c:
d6:d5:ee:58:da:dd:24:5d:46:52:95:35:74:cc:ee:1e:15:f1:
9d:42:9b:85:25:51:90:4e:4e:6c:ca:ec:4d:2e:25:fd:0d:79:
b9:d0:c3:2f:9c:1d:b3:69:0d:26:9c:22:d4:c7:cd:8b:3d:22:
5e:fa:eb:e6:66:8a:4e:02:e4:de:2e:41:55:03:cc:ce:12:d1:
e2:c1:03:c9:b3:36:f9:7a:1c:f6:1d:ed:82:3b:6b:c9:de:de:
ed:10:ca:67:0d:54:30:bc:49:73:d6:6a:b2:14:aa:45:99:71:
62:4d:e8:07:9a:10:cd:34:27:27:59:8f:fb:ed:8c:0e:b1:7d:
3f:70:90:52:90:78:ee:f7:24:27:35:e0:4b:9e:7b:c1:14:9b:
25:2c:4f:2c:94:1c:30:22:c9:c8:cc:58:a2:7f:cd:24:d8:5a:
33:d1:8b:17:13:cd:68:6e:bf:5a:67:93:59:e7:d9:8b:29:d4:
07:91:c3:69:69:ad:6c:11:cf:d5:06:b5:10:7b:c4:65:1b:63:
1a:e2:5b:ec:87:5d:45:30:18:09:d9:87:dd:22:d1:99:b1:1c:
cd:fd:94:0e:4f:50:f6:cb:2a:1e:48:af:0c:08:c3:7d:e4:b4:
8e:0e:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:08 2026 by rpki-client