Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
File: 8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa (raw, json)
Hash identifier: rl7fEJKFDPrrO8JPt2bztrdyX8XmPJ7L6Ne+F4zydFU=
Subject key identifier: AC:B8:8A:99:B5:7A:13:43:E9:D0:2F:F2:7E:49:A3:92:F0:1F:9A:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 348C3A28387BC0E110A96D91895952B9E9658DF3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
Signing time: Sat 28 Feb 2026 06:00:35 +0000
ROA not before: Sat 28 Feb 2026 06:00:35 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8c:3a:28:38:7b:c0:e1:10:a9:6d:91:89:59:52:b9:e9:65:8d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:00:35 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=cb80dff30cca0c11370e1f2a6d746411b61645a9960295b26cf5c894e241a62e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:54:c5:37:dd:41:25:b3:9e:03:49:93:d8:
4e:51:25:39:53:50:81:34:a7:88:66:b4:63:a9:67:
e9:73:e0:ca:b1:55:68:64:f9:ae:51:0a:19:5e:bd:
02:9f:61:f1:46:18:ec:e4:25:4f:e5:2c:d9:b7:6c:
5b:9d:74:78:08:ce:03:d4:a1:c3:94:42:6f:15:f0:
c4:81:26:68:9d:c5:17:29:12:54:0a:60:51:17:e1:
9e:35:45:d6:24:ca:38:51:40:78:ee:ac:95:cf:48:
17:4d:6e:ac:aa:12:a5:b5:14:fe:56:75:5d:c4:b5:
bf:cc:84:48:d2:c2:a3:a0:01:1a:30:55:82:77:d3:
09:86:28:bd:36:71:71:27:ea:d2:82:7d:80:09:2b:
2b:1e:33:b0:df:9a:96:9f:07:ec:cb:7e:c7:3c:7e:
40:f8:ce:45:9b:ee:ee:a5:0d:bd:9f:3f:06:f4:63:
4f:5c:7e:01:ba:3a:66:79:e7:89:3e:33:d6:fe:74:
65:9a:19:0d:a7:19:69:e1:9c:3a:6a:97:5b:fe:25:
b2:5e:b1:62:38:cc:a9:27:0c:ca:2b:6c:9b:fe:78:
f0:46:e8:24:46:0d:55:04:29:4a:c1:49:88:a2:58:
61:ba:c0:f6:42:95:f0:7c:d0:fc:af:e3:a8:ea:72:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:8A:99:B5:7A:13:43:E9:D0:2F:F2:7E:49:A3:92:F0:1F:9A:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:0f:45:a4:69:d1:d4:5d:4c:f7:6c:eb:d0:f3:c6:5a:a8:38:
83:63:0d:9e:1f:8a:bb:d9:eb:d8:38:68:1a:b2:ba:66:0d:4f:
5b:5e:95:a8:8d:e0:99:96:13:7e:ff:26:0e:a8:41:f6:d6:bf:
1f:65:63:3f:72:8b:ab:f4:b7:9c:65:f1:81:90:22:0a:a9:1e:
14:9d:41:a1:19:f3:f3:0b:4f:2b:84:2a:c1:d5:cc:f6:a8:73:
ef:f8:84:36:34:a1:b1:dd:2d:59:a8:3b:f0:73:d0:fb:12:0d:
9b:e5:3a:a0:a4:e3:b8:d4:0c:2b:da:fa:b6:82:94:99:76:e3:
1e:21:49:23:d4:fb:d5:bc:bc:40:ec:ec:f1:93:88:8e:a4:36:
67:70:bf:bc:df:43:4c:bd:31:5d:a2:8d:a9:f0:f7:39:32:50:
68:89:a8:56:51:d9:b1:18:66:e4:0d:78:a9:40:7d:e0:f0:7d:
c4:83:69:9e:4a:f4:47:f7:0c:74:cd:31:f8:c2:98:de:11:40:
f5:e3:e5:6d:6d:15:95:6f:06:aa:a4:e4:d5:f9:d2:17:4a:cb:
8c:2a:29:3e:d7:cf:4c:51:98:f3:54:75:d8:67:88:4d:43:b4:
88:86:a3:ef:5e:f2:5a:52:38:c1:62:29:93:09:75:49:c3:88:
ce:d1:34:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:47 2026 by rpki-client