Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
File: 7cde339d-568f-4b5b-98d4-9eca268d8a43.roa (raw, json)
Hash identifier: csXpndvqhGAOPve4fgMOODJb5yUQbf7lp80HZ5VEdkc=
Subject key identifier: 01:CA:1D:5D:EE:E8:4E:65:BF:48:A3:A6:D1:6A:43:D3:73:C8:7C:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C5C7072FFBF68F287A2D90BC37A97D07D318327
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
Signing time: Tue 17 Feb 2026 03:00:06 +0000
ROA not before: Tue 17 Feb 2026 03:00:06 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5c:70:72:ff:bf:68:f2:87:a2:d9:0b:c3:7a:97:d0:7d:31:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:00:06 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=8281c255d4add580c2e5a9cff7c3836909accb17aea2c7770f04c1a8f8e85579, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:92:f0:d3:a0:de:00:87:6e:61:cf:e5:fe:
17:82:ac:a1:71:d2:4a:e2:cc:59:c4:c4:1a:9f:ee:
15:7a:f5:21:5c:b1:08:38:f3:b7:6c:90:0d:bc:54:
89:67:34:ea:db:66:29:87:4e:e0:ac:cb:80:0d:fc:
30:ba:36:5a:93:1e:39:36:9a:6f:96:f3:5b:1c:02:
56:d4:95:1a:c2:91:23:46:67:85:3d:03:cf:53:29:
7e:c4:a2:2b:1e:95:4e:08:6d:d7:d1:b2:ec:7f:ae:
18:5f:84:ed:1d:6b:e8:89:13:33:27:44:52:d7:60:
02:2e:7b:53:c3:65:4b:da:26:62:6d:cd:88:d9:6f:
0e:ab:eb:92:a1:61:b7:4f:2b:d7:d2:68:fb:69:19:
2d:ef:6d:5e:5b:7f:f9:81:88:68:06:33:0b:49:99:
8d:be:f3:3e:9c:39:e4:31:de:e4:ac:1e:e5:f4:88:
9d:39:81:8f:ef:3e:e8:c6:30:c9:ed:dc:3f:86:b4:
2c:1f:c8:5c:68:af:bb:c5:d8:0b:0f:9a:0b:21:9a:
fc:fb:69:d2:71:b2:84:11:c2:06:92:fe:88:da:d8:
b5:8e:82:0d:f1:fd:b5:7f:42:83:15:ec:a2:1e:22:
49:40:c2:62:62:4d:98:80:00:f8:09:23:05:36:d3:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:1D:5D:EE:E8:4E:65:BF:48:A3:A6:D1:6A:43:D3:73:C8:7C:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:5e:79:5b:4b:7f:90:f0:fb:12:3a:04:98:18:8d:77:79:74:
4e:b7:83:b7:f3:15:06:ea:1e:6b:80:92:e5:62:5e:22:19:d2:
5b:e2:4a:20:5f:3c:3c:37:37:d9:b8:29:ed:5f:8d:62:5f:e6:
c7:5a:19:96:ca:2c:dc:7f:14:8f:5b:e2:4d:1d:35:6d:0b:d0:
25:f3:83:56:89:d9:09:0f:65:2b:db:dc:d6:95:5e:d7:7c:52:
61:db:65:63:13:0d:c6:dc:04:3b:80:d6:53:88:c3:e0:89:0b:
79:00:5f:b1:21:4b:ef:2e:b0:ae:9e:29:75:28:50:7b:e2:94:
2f:1c:dd:7e:5a:03:ca:88:2a:8c:45:47:14:0b:b1:69:aa:c3:
49:21:c7:a6:da:d5:2d:7b:65:10:96:d9:fc:09:b1:8c:c5:8e:
66:ec:2b:45:db:72:89:95:30:43:c1:35:6d:dd:1b:0f:ad:77:
1b:2a:5d:9d:e7:ab:d7:fd:bc:59:c8:fd:a8:cf:2e:cc:13:ea:
59:80:6f:ff:a0:53:b6:d9:1f:82:15:41:ab:6b:74:c8:95:9c:
2f:ea:6b:56:5a:e3:4f:e0:ab:ae:32:b5:44:c3:dd:9a:de:40:
a7:91:a9:16:4a:3c:b0:8c:f1:57:a5:bf:f6:7a:b9:f8:ef:a3:
6e:25:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:35:29 2026 by rpki-client