Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
File: 8615f258-46a8-450c-972c-84b27581bb43.roa (raw, json)
Hash identifier: cQ6qzocibztKrZ1yWWqYyNmWQ30Y5Vc/finJu12aUac=
Subject key identifier: 2A:18:B2:3F:12:D0:23:52:6B:8E:54:24:2E:FB:08:F5:DF:7C:83:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3ADD594D539F791A02EDA8DBF6043F71F3BEFC20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
Signing time: Sat 28 Feb 2026 05:30:58 +0000
ROA not before: Sat 28 Feb 2026 05:30:58 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:dd:59:4d:53:9f:79:1a:02:ed:a8:db:f6:04:3f:71:f3:be:fc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:30:58 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=9f1c9ee962c17bcf19f474e7ebf245fb03f30bfc8506af0787a8022e35642834, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:be:14:1c:7c:43:ed:18:5a:c4:30:a8:e8:
dc:86:10:aa:37:c5:36:cc:23:5f:37:26:b3:d3:7f:
77:d9:c4:e1:bb:4c:20:38:6d:bf:89:b2:5e:54:cc:
37:da:37:20:d0:4d:30:3a:10:48:47:70:1b:09:d3:
9d:e6:96:b7:15:a9:06:c3:a2:b0:21:74:23:45:b2:
0b:25:d7:2c:33:f7:a5:f3:93:1b:42:2d:bd:98:c6:
81:bd:ed:97:b7:c3:e4:69:22:da:14:1f:31:f9:72:
36:62:22:bd:7e:0b:ea:0e:a2:38:88:ba:65:64:03:
f4:71:72:72:27:b4:d4:a5:c8:db:84:1f:c6:4f:2e:
0c:1e:fa:86:ad:4b:b2:d2:72:53:a4:8f:d7:c5:cb:
b0:e0:9f:cf:49:41:5d:6d:13:e8:b4:ce:a2:3c:56:
ea:b0:d1:ac:5b:99:00:3f:81:a4:2e:95:da:99:08:
f5:73:84:59:30:23:52:4f:51:7b:12:1e:d1:bb:81:
6b:b2:c6:77:29:d1:7c:e1:41:97:1a:5c:ec:aa:d1:
25:8e:a5:90:e2:28:5d:14:c5:ec:ec:05:44:ec:d5:
48:e6:5f:56:36:c6:19:cb:19:24:48:70:af:d5:bd:
7f:44:4a:f2:1a:86:bb:e1:7a:41:ef:bb:b0:45:bb:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:B2:3F:12:D0:23:52:6B:8E:54:24:2E:FB:08:F5:DF:7C:83:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/36
Signature Algorithm: sha256WithRSAEncryption
7e:04:99:70:f3:c4:5e:f1:99:f6:20:c4:76:fd:c3:4d:3f:0b:
65:a6:26:97:37:10:ff:c8:61:b1:11:de:bf:cb:98:6d:5b:05:
5c:4f:30:ec:af:4e:24:7b:63:2c:d5:43:2e:10:6c:c8:5d:0d:
4c:3d:d8:40:dd:89:d5:66:91:9c:58:24:d9:8e:df:50:58:24:
8c:e0:a5:da:4a:7c:f7:ea:cc:24:bf:6f:8a:8a:5c:f2:56:1e:
66:6b:32:38:1b:32:8e:96:7c:5d:b3:6e:c4:ca:f5:57:9d:b2:
34:62:83:56:f0:b8:ef:89:c1:0e:58:7f:c0:9e:d4:c5:7c:7c:
bc:e2:e3:8d:c5:e4:ed:5d:80:98:a1:71:56:38:e0:96:1b:bc:
b3:24:ee:f5:37:9a:50:57:99:21:75:7b:83:a5:02:6b:0b:fc:
fa:8e:d2:f3:e8:b8:87:ae:92:7c:b3:79:4c:3b:73:93:e7:94:
83:5f:de:ff:dc:81:44:cb:23:f7:f6:99:4f:fb:e9:5a:dc:77:
fe:c5:bd:51:dc:c9:49:c8:46:39:97:5e:c4:33:62:ec:77:3f:
cf:14:a8:0e:5d:90:2c:24:5c:3f:a8:ad:98:0c:bc:80:b9:14:
48:83:e4:ce:2f:71:5c:fc:cc:8d:64:58:5e:98:7a:a0:8b:de:
ed:3a:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:40:22 2026 by rpki-client