Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d791d74-cfd7-4000-a1e5-34325a5e1541.roa
File: 9d791d74-cfd7-4000-a1e5-34325a5e1541.roa (raw, json)
Hash identifier: 0vXq0UQKRBmMwjVVjpUO0aRGh2A2f1997Cqv8cRqZFg=
Subject key identifier: 56:C8:DC:A8:E3:E0:F6:AA:49:CC:3F:C1:E6:3A:37:DD:EC:81:95:E9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40F9D1FC64D4542C84FA109C937C146DBB559D81
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d791d74-cfd7-4000-a1e5-34325a5e1541.roa
Signing time: Tue 17 Feb 2026 03:00:06 +0000
ROA not before: Tue 17 Feb 2026 03:00:06 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f9:d1:fc:64:d4:54:2c:84:fa:10:9c:93:7c:14:6d:bb:55:9d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:00:06 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=bc6c925dc5d2fac760e1cd66107740640a9969b6553b8f1a03f6d30ea3820a2d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:9d:66:8f:8b:2d:53:49:53:c6:40:65:13:
a5:d6:66:50:f5:a1:7f:f1:ac:5e:91:a3:e9:ab:f2:
c9:7d:09:78:18:8a:f3:e8:b5:4f:cf:71:30:a3:aa:
a3:84:11:fd:99:a1:2c:6f:5b:61:ee:44:47:c4:14:
70:73:f4:ef:9c:b5:19:3d:1f:a5:4d:c6:e4:5e:50:
47:d2:50:fc:34:07:df:99:76:5f:12:ab:95:fb:1f:
1d:da:3f:f5:e4:f2:61:75:fd:4c:b4:1f:af:ce:41:
76:3e:54:72:f0:4d:67:b2:ac:d0:06:d9:93:a1:54:
c2:e7:b6:83:a4:42:51:3f:93:86:3c:81:06:42:09:
af:d7:b2:5a:7a:ba:c5:fd:43:29:2e:b7:2d:c0:df:
fb:36:03:9f:ba:77:17:27:75:9b:73:5f:b7:56:2d:
3d:fb:6d:8e:a4:1d:ca:60:18:7f:31:d3:4c:b7:33:
1e:d5:2d:29:73:cb:56:66:fa:a9:be:42:ea:89:54:
82:f7:46:84:f7:55:ce:7b:e5:a7:65:9f:01:21:17:
9e:68:87:b2:81:86:2f:a1:ac:ab:23:f9:68:bd:c8:
c4:8c:d4:fb:61:6d:28:3b:b4:3a:05:5d:11:24:ac:
38:60:3e:87:a1:4c:da:9a:0b:bd:4b:5a:b8:1c:96:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C8:DC:A8:E3:E0:F6:AA:49:CC:3F:C1:E6:3A:37:DD:EC:81:95:E9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d791d74-cfd7-4000-a1e5-34325a5e1541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5000::/40
Signature Algorithm: sha256WithRSAEncryption
02:76:7d:3d:1b:94:e2:cf:6b:2c:36:32:82:96:98:59:66:0e:
55:cb:07:4f:8f:a8:2b:6d:c8:e6:6d:38:69:80:42:63:9e:c4:
75:ad:73:74:ee:16:cb:cc:c3:2b:78:67:7d:92:01:3a:fa:b7:
d7:20:a1:84:22:38:f0:07:c2:e6:23:03:a0:70:49:b8:94:20:
9a:92:9b:f4:af:fc:9d:33:bd:db:a9:e3:70:a9:3d:dc:42:73:
2c:12:00:8d:d2:be:0a:3c:96:6d:20:05:69:95:24:93:f5:b2:
32:e0:ca:1c:a1:d8:50:23:43:18:28:a1:cd:8d:ce:fa:8c:c1:
28:c9:70:92:83:4c:c6:38:e8:22:d8:05:27:ee:61:c0:bd:07:
44:fc:1c:7f:a4:45:c4:cf:63:ad:36:4f:12:f2:8b:49:3f:0f:
f7:45:b4:d8:0a:c4:fc:87:e0:da:89:ba:76:bc:19:c3:6b:da:
f6:f0:eb:df:79:0c:1d:94:11:3e:a6:5c:d2:5b:d0:fd:0d:62:
6d:e3:35:89:15:3a:b3:e3:ac:a7:50:e0:41:53:c4:f4:79:8c:
46:01:f8:78:d8:b4:78:78:83:9e:86:cb:1c:88:d2:3b:35:10:
08:d4:b6:26:1e:ef:8c:17:d5:d9:99:db:0e:98:3f:6c:b7:f4:
7f:66:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:12:42 2026 by rpki-client