Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa
File: 73488a43-875c-415a-9969-c278b245b9fb.roa (raw, json)
Hash identifier: o823OtJjn66Vr7Ma4vWcA+cRfJkH8hO9NpsBZJp85ks=
Subject key identifier: AD:CA:4A:A7:A2:D4:DC:E4:FA:53:FD:5B:33:2D:9D:5A:30:6A:80:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40D8E62D873C45A03930F108A65D787618836C86
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa
Signing time: Sat 28 Feb 2026 06:30:09 +0000
ROA not before: Sat 28 Feb 2026 06:30:09 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d8:e6:2d:87:3c:45:a0:39:30:f1:08:a6:5d:78:76:18:83:6c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:30:09 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=5f89fba6554c29b61bff8c938cde88e572a7e6b11d421a2815855b4c58c0688a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:a6:75:d2:8e:f5:b1:a1:f7:4a:e7:1b:48:
1b:aa:8e:bf:a9:0f:b5:03:88:6e:a3:a6:b0:6d:c2:
c2:55:b4:47:a7:d1:65:56:be:f2:0c:2e:d2:d4:77:
73:be:10:f9:cc:6f:00:20:98:91:98:0c:3a:37:d8:
4f:22:23:cb:8f:22:fe:fb:f7:99:31:21:43:ee:97:
87:2e:a5:6e:42:3b:cd:54:17:cf:45:d4:f7:78:14:
ab:26:71:d5:dd:49:30:95:c6:ff:04:aa:2a:36:dd:
3a:b3:55:31:df:ea:29:15:6b:a9:46:ec:41:a5:fe:
d8:7d:c0:a6:ab:97:df:9e:c3:c0:7b:c8:d8:8f:84:
20:ac:ef:14:56:2d:76:32:1f:9d:6c:e9:d0:6e:27:
8e:d1:de:9a:22:d3:cf:b7:a3:40:a8:c8:8b:cf:02:
80:de:c7:42:24:72:b4:74:a0:5b:1b:1a:55:f0:7d:
61:70:3f:42:7f:14:6a:6d:61:dc:66:28:08:af:c4:
20:98:71:c7:ab:bc:79:c6:72:89:4c:93:a1:b6:43:
e4:4d:8a:b2:2f:de:ec:ef:7e:43:b9:a1:13:5d:72:
68:a0:97:7c:fe:c7:3b:17:22:0c:00:dd:ce:e5:81:
21:9c:c2:77:a8:80:8e:2a:65:74:e9:42:13:22:42:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:4A:A7:A2:D4:DC:E4:FA:53:FD:5B:33:2D:9D:5A:30:6A:80:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e080::/48
Signature Algorithm: sha256WithRSAEncryption
7a:dc:6a:e6:3f:74:67:c9:23:50:c9:a0:84:55:02:b9:bc:4e:
85:04:23:f2:81:6d:f6:74:07:6f:62:88:a0:88:63:d7:dd:73:
76:29:50:41:fd:d6:1e:b3:4d:a5:b1:a6:63:dc:0e:31:f1:dc:
aa:d0:21:6b:d8:68:5b:d0:dd:49:9e:0f:62:4c:d7:b4:06:d4:
d5:09:bb:9e:25:b5:ce:32:97:07:cd:bb:64:c2:82:18:20:13:
fa:69:65:e0:f7:b4:a9:68:2b:3f:e4:f0:f0:af:c5:a8:ff:9e:
4a:62:f9:83:4a:48:8a:01:68:d9:0f:14:10:b7:7d:77:ba:dc:
b2:e3:d1:e6:d1:0d:e7:26:39:d4:93:23:f0:18:77:9c:27:78:
f5:f9:b9:64:2f:8c:b6:46:fe:7b:01:76:ed:40:89:ab:4f:c9:
17:e3:78:12:3b:d9:71:03:01:1d:89:7c:21:27:ac:c0:c6:46:
8e:27:1f:c4:be:08:2a:c5:8e:25:2a:b1:88:a9:02:b9:7d:2a:
19:5a:b1:0c:e7:f9:9d:96:24:79:5d:f0:8e:9f:ca:7d:dd:a4:
99:cc:af:a1:5e:5a:88:ea:89:b0:24:c7:32:81:b0:fa:50:a8:
8d:41:27:f1:7e:4a:a3:66:69:be:54:fd:bb:06:ae:5b:e5:00:
59:69:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:29 2026 by rpki-client