Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
File: 9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa (raw, json)
Hash identifier: e1Vt8oRrB+oRTwgJTWbw+5JLzLAi4P2sapNbi75JgUY=
Subject key identifier: 16:02:4F:96:73:F9:2E:F4:81:D8:77:98:DB:68:6A:D8:2F:9F:35:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B69882757E4F9C4ED251C9D96FD5DE49FBD1EEA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
Signing time: Sat 28 Feb 2026 06:20:05 +0000
ROA not before: Sat 28 Feb 2026 06:20:05 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:69:88:27:57:e4:f9:c4:ed:25:1c:9d:96:fd:5d:e4:9f:bd:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:20:05 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=e2fcb0119f8d6fd89a2211273ac850ff44ab6784efc28521c63840e330379b93, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:8f:1a:03:bb:36:65:36:b2:09:e5:dc:ee:
f9:70:ae:89:61:05:56:39:ba:47:db:24:bf:63:71:
e8:b6:7f:3a:09:44:ba:23:9b:51:91:83:00:97:33:
b0:0b:1d:5f:a2:cd:e9:a6:02:22:51:f1:66:2e:3a:
ce:c3:ae:4d:55:9b:ba:be:d2:15:5c:0f:82:10:6f:
7c:5f:84:25:87:fd:a8:de:cf:d1:03:36:f7:65:dd:
f7:25:ea:1b:34:72:86:ff:dc:61:0f:90:2b:4d:93:
29:fe:1e:9d:38:a1:45:8f:6b:bc:16:c8:d5:db:01:
56:21:a7:3c:ed:d7:31:92:c5:67:df:16:d2:99:b1:
13:6b:24:47:53:a5:99:54:1e:5b:f3:30:0a:03:8f:
5e:b0:a9:69:15:86:65:57:8f:c9:df:da:56:91:85:
d0:5d:bc:40:bb:f5:21:a5:37:a5:a3:77:99:6c:e7:
e9:07:3f:f7:3a:ef:da:63:f2:83:c5:a1:84:7b:09:
5d:b4:8f:bb:fb:6f:09:ab:3f:cd:a1:43:ff:ef:3f:
7e:84:78:d5:33:ba:90:80:26:68:dc:7c:d1:58:e3:
74:d2:65:44:ce:a7:5a:ff:c9:3f:05:13:fa:fa:f5:
a8:0f:7f:bf:f2:13:b4:f5:e0:15:41:43:fc:e2:34:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:4F:96:73:F9:2E:F4:81:D8:77:98:DB:68:6A:D8:2F:9F:35:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011::/36
Signature Algorithm: sha256WithRSAEncryption
9d:0b:48:2e:dc:fb:75:48:5a:46:5c:6b:15:1c:fb:1a:0a:7a:
60:a4:e9:59:2f:cf:3f:09:71:fc:70:65:9c:46:bf:2c:86:26:
d3:8d:d9:b5:70:79:f5:5a:f8:6c:91:f0:64:f0:52:95:32:f9:
a9:9b:6c:41:d0:90:c6:ab:2e:12:87:28:b7:1f:a5:c3:e6:24:
e6:1e:7c:ba:4a:1a:34:cd:fd:1d:bd:8f:b6:08:18:37:2d:e1:
d3:c0:e8:a6:e1:0f:90:06:64:ae:1e:b5:84:07:57:05:72:94:
0d:93:d2:89:15:ad:52:0a:16:f4:9e:1a:5f:35:fe:97:e4:f8:
82:ad:8a:8d:42:ee:2d:d9:7c:6d:8e:f9:cb:f4:68:bd:1d:0c:
4a:e9:b9:71:3a:e0:40:3d:0b:07:9f:17:1a:55:78:63:d2:02:
33:3e:cb:1b:e8:28:74:91:47:c9:27:bf:c8:00:7c:7e:1f:96:
45:47:5d:77:07:b5:9e:cc:19:e4:a9:33:45:d6:e7:91:df:84:
34:ae:e1:d4:94:7f:fa:9a:87:4b:ae:f8:b8:b7:f0:63:ee:fb:
29:79:de:c8:5d:a5:6b:ea:42:7c:b9:8e:ab:5a:45:56:6b:2c:
6b:6a:dc:d3:2b:59:96:20:23:ca:ae:da:68:2d:f8:f8:6e:07:
02:e8:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:34 2026 by rpki-client