Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: ie3bKXBG4ECuB+6VK/Y41qf7ICsxMP4ZykfVyAvMV3M=
Subject key identifier: 0A:DA:15:27:B7:56:EB:1E:0F:41:A6:31:37:B2:49:65:E5:30:A3:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E612B28CF0A521F4A2E04575049F1756964F508
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Sat 28 Feb 2026 06:00:08 +0000
ROA not before: Sat 28 Feb 2026 06:00:08 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:61:2b:28:cf:0a:52:1f:4a:2e:04:57:50:49:f1:75:69:64:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:00:08 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=67abcf4ca1f4778a003ffdfafd4017621ce33c08b00520acab3810e789b08f77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:a5:c7:07:fa:02:d1:09:0c:bd:1b:68:02:
71:27:9e:97:d6:19:4b:f7:c6:59:11:76:96:8c:13:
92:13:09:96:74:16:af:13:8a:8a:d2:9a:5a:92:34:
c5:66:46:05:32:3a:e5:a4:e2:90:53:0a:fc:21:e1:
ce:0e:9e:f4:ef:bb:e9:c0:7f:9a:d1:a8:94:a8:fe:
5e:f5:e4:12:6e:5d:e6:d4:85:d8:f9:09:9f:51:38:
78:11:9d:c0:28:e1:39:27:fa:87:22:04:09:e4:54:
30:c7:d0:02:01:ce:b7:e9:1e:ed:92:fd:f6:f0:b0:
26:40:04:3d:48:80:80:27:11:60:d9:6f:8a:6a:c4:
7a:3e:37:52:d3:91:72:db:95:04:11:64:df:38:d4:
04:b5:2c:bc:f7:43:3a:0d:a3:a5:c8:6e:5e:e8:b8:
1c:85:3e:16:1d:4b:c3:8b:72:c5:82:ce:02:68:63:
23:6b:8a:70:4c:a6:93:6c:b4:78:3d:52:ba:02:7b:
c3:d5:43:0d:7c:05:35:7b:1c:ad:22:59:b3:88:ff:
cf:7f:77:a1:6f:5c:72:fd:a8:a1:51:95:ed:fb:bc:
1b:90:70:6d:0d:f9:e4:1d:c6:3f:9f:9d:95:8f:fe:
a5:6c:56:a7:d0:28:8c:42:da:e0:4a:6f:a2:50:75:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:15:27:B7:56:EB:1E:0F:41:A6:31:37:B2:49:65:E5:30:A3:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
7d:1e:59:04:fe:cd:be:f2:94:fc:47:6c:64:d2:a3:c1:1c:3b:
c8:1a:7a:a8:03:44:47:d5:ed:61:f9:70:7c:54:ad:58:fa:0f:
83:4d:34:3f:e4:92:b0:d5:0c:dc:72:91:43:1b:f0:ef:3d:4b:
48:60:86:c5:3e:07:fe:34:cd:59:10:8a:80:9b:eb:72:93:c1:
66:d3:cc:c3:09:6c:40:59:5d:87:2d:1f:be:2c:f8:4d:67:78:
3f:bf:a0:9e:61:c9:02:41:94:55:ff:40:ea:9d:9f:7e:36:7e:
d0:e6:5f:00:6b:c8:5f:0b:e4:7b:25:c6:76:61:94:ca:5d:45:
9c:01:67:9a:34:f9:43:1b:97:88:98:d9:d9:42:f1:45:33:83:
be:10:c2:bc:71:4b:92:99:d5:11:97:f6:9e:5c:0f:a2:71:39:
4a:ad:a6:df:1f:f7:7e:25:96:b1:15:99:51:d1:16:6b:9b:57:
8a:38:e4:9c:55:7d:e2:45:df:34:09:bf:98:8f:65:39:93:2c:
6d:6f:15:98:21:ed:2b:1a:44:ed:e1:d7:14:af:e9:82:50:ae:
0d:29:42:df:9c:e5:7a:26:40:5e:a2:d3:73:e3:e2:1b:1e:0d:
f0:78:fd:cf:2a:6c:e0:32:48:ad:ff:44:1f:16:59:26:0c:19:
ef:f3:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:47 2026 by rpki-client