Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
File: 9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa (raw, json)
Hash identifier: WFV6tmSZbISGhnISfQVJzqAr2FCY2LrfNyf/HQWpLiU=
Subject key identifier: EC:B0:12:A4:BD:7F:87:29:5B:B0:21:DF:31:13:82:F8:27:10:8C:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1281CF10C795DD7DEF764850A8621AFBD437E34C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
Signing time: Tue 24 Feb 2026 04:10:39 +0000
ROA not before: Tue 24 Feb 2026 04:10:39 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:81:cf:10:c7:95:dd:7d:ef:76:48:50:a8:62:1a:fb:d4:37:e3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 04:10:39 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=4d17756693e581a26e55bbb74982947415478e3a70d4b060cbeb3d33ad6df509, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:5c:90:9a:a7:ad:d1:e9:fc:2a:a4:b9:5b:
8d:35:17:80:91:02:6e:25:ce:45:fc:14:d6:51:94:
fa:67:cb:a7:52:ba:73:e0:e3:e2:41:15:8d:2b:a8:
e9:c6:55:75:f1:be:d1:2e:32:ad:53:03:f4:09:02:
73:a7:fb:b0:7e:c0:e7:82:60:14:5d:51:eb:f8:09:
f3:a8:43:0d:c5:d3:bf:9b:7f:32:43:df:75:2f:02:
61:19:e0:c3:77:cb:cc:81:98:cd:0c:e7:88:62:50:
34:34:1b:5d:38:11:8f:6e:ea:48:91:94:af:22:de:
e6:b4:95:3a:c2:f6:86:97:d6:5a:32:33:62:23:f4:
14:13:bc:c1:d2:22:84:41:5d:36:d1:8a:3e:ef:08:
4b:db:93:f4:18:5d:26:91:90:89:a6:1a:b2:c5:6e:
0d:4f:98:c6:d0:35:c7:79:c2:7c:81:31:27:48:40:
1b:e8:6d:02:49:23:8a:9e:23:4f:ee:b7:41:b8:b3:
b0:a0:09:a7:24:39:59:74:be:eb:cb:0a:fa:70:45:
dc:20:31:3d:23:91:0a:ea:7e:b4:6c:54:8f:a8:73:
a1:32:19:7f:23:e3:90:52:3e:25:90:7f:10:4b:83:
b4:c3:05:0a:ad:44:69:b2:42:b4:87:b4:07:56:5b:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:12:A4:BD:7F:87:29:5B:B0:21:DF:31:13:82:F8:27:10:8C:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:4000::/48
Signature Algorithm: sha256WithRSAEncryption
39:35:fa:30:a4:a6:67:ec:72:7d:68:cd:bc:37:2f:4b:65:8d:
bf:ac:bf:48:40:68:6f:be:04:b3:e7:4c:9b:fd:a0:e8:f1:72:
ee:dd:0c:14:11:7d:b1:7f:56:c3:a5:c2:c2:03:3b:cd:30:33:
1e:e5:37:2b:89:01:9e:31:c8:70:84:cf:75:a1:15:00:1a:e9:
a1:e0:16:52:cc:d3:5f:6a:29:43:e7:35:c3:59:9d:a7:73:69:
6c:77:fc:df:f0:68:84:e2:2c:d5:46:a3:65:04:94:07:38:5b:
30:eb:7d:70:2e:7f:48:d4:65:91:8c:20:6a:d6:bc:05:e2:4b:
06:fd:08:49:fc:7c:11:d1:7e:55:00:12:8a:a0:ce:d1:14:06:
23:4c:c7:33:7a:4b:ed:09:fa:59:b5:f5:67:ad:2b:fe:38:dc:
8b:5e:71:c9:67:3b:59:77:71:fb:28:6f:79:74:74:f7:77:c4:
7f:a5:f2:23:de:35:e3:9d:43:3e:57:35:f2:0e:72:34:1f:a2:
32:0c:12:47:a2:c9:c9:73:35:aa:81:41:da:2c:3c:bd:cc:ce:
2d:62:1e:6c:6a:3a:60:fc:79:44:8f:d6:b9:01:a8:69:97:53:
ab:4b:68:c6:44:92:15:8f:71:70:14:93:1d:c6:18:4c:c5:fb:
47:14:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:27 2026 by rpki-client