Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9096a2fe-35f1-45a6-987e-41fd25643cb7.roa
File: 9096a2fe-35f1-45a6-987e-41fd25643cb7.roa (raw, json)
Hash identifier: ufZ69EL8fSNSWCe0pwq508d5nPRZ7tLDCx4iYWwfWU8=
Subject key identifier: 45:26:E6:3F:26:99:E9:B4:20:EB:9A:31:E4:73:A6:9C:E1:EF:01:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A64B408E020B690C579ADDA45222FAEB3B906A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9096a2fe-35f1-45a6-987e-41fd25643cb7.roa
Signing time: Tue 17 Feb 2026 21:36:51 +0000
ROA not before: Tue 17 Feb 2026 21:36:51 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:64:b4:08:e0:20:b6:90:c5:79:ad:da:45:22:2f:ae:b3:b9:06:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 21:36:51 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=cf32f531e909e09825c838f55184ce93f6d32911e380c700da6dc26dc3ae7436, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:56:a2:72:b3:9f:80:d8:fa:32:41:94:71:
5a:e4:94:05:81:05:bd:8a:b2:eb:1a:36:bc:e8:30:
47:da:4f:0a:62:56:6d:f6:66:89:f7:c0:fd:89:99:
30:53:06:4a:92:00:c4:cd:07:b8:f3:f2:22:53:2f:
ea:1c:7f:c5:d8:b3:bf:48:82:63:a6:34:f7:bc:b1:
a3:00:7b:13:44:5e:ce:88:b4:3a:bb:e9:08:12:cf:
22:20:2e:07:68:0e:36:71:c6:b9:a5:c0:a3:18:00:
81:4a:f0:a3:13:d9:dc:39:b6:6b:d3:a8:22:69:de:
3b:c0:e8:7d:67:f1:d0:b8:95:e1:45:0a:95:94:5d:
16:91:a9:57:2c:c7:70:02:92:97:fa:cc:f5:d1:c8:
75:3d:d1:ef:d9:02:8a:f3:1d:29:39:16:9f:38:99:
be:23:ec:92:83:c3:48:c2:c4:4a:34:16:11:f1:b9:
2e:89:28:3b:d9:a3:fb:ca:58:7f:34:4e:fa:5a:dc:
20:a8:b2:8b:f2:a0:02:7f:07:24:50:6f:43:db:a9:
5c:57:37:3b:e7:de:5f:a9:5d:eb:f5:35:e5:92:ec:
11:fe:ea:b1:17:aa:05:dd:06:95:f4:f0:7d:a9:e1:
d9:07:f7:95:49:98:59:07:2b:ee:17:f3:fa:ee:a4:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:E6:3F:26:99:E9:B4:20:EB:9A:31:E4:73:A6:9C:E1:EF:01:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9096a2fe-35f1-45a6-987e-41fd25643cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
47:f7:bd:34:2b:5d:3e:c8:fb:80:68:10:57:01:fa:8a:d0:11:
5c:62:73:62:4d:35:cf:06:62:21:6b:64:39:10:71:54:d8:73:
b6:dd:dd:62:5f:f7:90:98:5c:49:f3:a5:eb:e7:7a:bf:a5:ff:
c2:ea:92:5f:fe:5d:2d:8d:21:f7:f1:af:ae:27:84:78:38:b4:
25:a1:a1:24:48:98:8e:b0:bb:ae:43:62:84:5b:fb:a0:9b:0a:
e8:52:b6:5d:7a:c0:8f:2f:9a:13:17:1d:a8:99:64:ff:e6:06:
83:9d:9f:76:c2:4c:4a:65:f8:ae:12:96:28:d6:ad:0f:a4:6e:
40:56:02:43:79:3d:67:82:cf:88:a1:6b:ae:39:eb:d5:d9:1c:
a9:25:e2:fc:02:d7:af:7f:f0:e1:46:c8:50:b3:bb:a4:3e:d3:
9a:3d:58:3c:77:d9:1f:2b:88:3e:2e:0b:b2:5b:9b:9e:46:60:
25:ec:57:5d:50:19:fe:6d:6a:bc:ef:ad:79:24:ac:fb:2b:f3:
4f:6f:a5:4c:1a:0c:8a:ad:dc:c4:31:5e:98:80:93:3d:86:e3:
c4:bc:ca:65:f1:6a:56:69:c8:89:27:96:97:ec:74:ec:45:4a:
da:45:48:76:9e:7a:27:26:f0:10:ea:fe:4e:a9:0f:56:63:22:
89:4a:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:03 2026 by rpki-client