Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
File: a039a10b-545b-441d-bef2-b67325de50a1.roa (raw, json)
Hash identifier: gHZsfGrz2DtOIf6rzc5ARC06ktKbMXslpC6wWOI74N8=
Subject key identifier: 71:38:AF:35:FF:BE:CD:46:16:09:F6:2E:EF:EA:6A:54:7F:BF:A8:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D82424DF2602224408662A55641A0A10481E87B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
Signing time: Sat 28 Feb 2026 05:31:13 +0000
ROA not before: Sat 28 Feb 2026 05:31:13 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:82:42:4d:f2:60:22:24:40:86:62:a5:56:41:a0:a1:04:81:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:31:13 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=764bec7f5bd5e7111602d5b0c489fcd27335dc51623551c70b3efa61c0ec381b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:9d:f0:12:22:ee:f3:19:c0:a1:be:79:56:
0b:92:f4:04:79:fa:4c:42:3c:17:5e:88:99:b7:46:
1b:36:7a:61:cc:ab:5e:33:b1:89:55:ac:85:d7:c9:
d9:6b:3f:cc:ab:f9:99:b6:a6:ab:c3:a3:b8:92:91:
e1:4e:ee:03:ae:32:0f:35:88:0c:a8:d3:10:7d:3c:
1c:59:d8:4f:75:c4:7f:8c:40:02:48:08:29:ae:62:
e5:53:dc:bf:88:7d:e3:e8:1a:8a:97:3a:62:82:64:
bd:15:1f:cf:a7:8e:7c:24:89:2f:c7:a1:d8:86:86:
ae:23:ff:06:83:0f:cd:fa:ad:d6:ac:34:e8:85:e8:
52:c6:82:1e:80:54:5a:77:5e:91:a2:46:62:a5:25:
d1:11:82:08:2d:1f:2d:a6:4c:24:d9:50:1e:dc:d4:
c0:16:5a:e1:23:e8:c3:75:3c:ec:71:b4:ff:57:0d:
89:01:d2:c0:c6:05:65:52:2b:e1:ed:55:a5:cc:f2:
40:2e:b4:a5:7e:f3:0b:a1:7d:ce:e8:b0:cd:49:67:
2d:8c:91:47:25:d6:86:ec:89:a0:8f:74:64:5c:76:
89:a1:11:12:f9:19:f5:59:9a:af:20:12:ac:b3:73:
28:28:d9:e1:87:ad:74:b4:67:10:17:80:14:0e:77:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:38:AF:35:FF:BE:CD:46:16:09:F6:2E:EF:EA:6A:54:7F:BF:A8:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:6000::/40
Signature Algorithm: sha256WithRSAEncryption
43:2d:9a:ea:d3:91:31:a9:38:3b:47:a9:16:84:20:2c:8d:34:
31:4e:fd:4f:c4:53:d6:ac:63:f7:33:c0:27:0b:5b:f9:98:c2:
38:21:79:cd:77:25:e4:ac:09:de:83:94:2d:90:8f:39:4c:0e:
7f:db:da:37:6f:f7:f9:7b:03:06:65:64:6c:84:68:35:61:a3:
47:24:3d:13:eb:c6:e4:ea:33:c3:0d:86:f0:4a:b3:3c:ae:48:
1b:61:f7:b9:45:4b:0d:13:aa:79:1f:9e:74:be:56:fd:0c:0b:
dd:16:26:1d:ec:23:65:98:dd:b0:ae:9e:39:e7:82:4e:8f:3e:
19:2b:f2:72:b4:16:db:a6:00:17:f0:66:ce:e5:57:a6:17:af:
7b:20:98:fa:5c:e2:20:67:06:fa:e3:e7:3e:4c:e3:44:49:34:
9b:62:f2:ca:f9:7b:25:ac:39:1f:e6:59:39:7a:24:b8:fd:11:
b3:37:1f:fd:e2:61:07:a7:7c:e8:3d:5d:cd:7a:5e:f8:39:7f:
23:5c:a5:76:70:a1:81:3c:de:dd:0e:5a:c5:ee:4e:be:b4:29:
98:2c:46:99:72:54:d5:93:ae:95:67:e7:ba:19:60:39:fa:98:
ca:02:bc:1a:0c:f8:90:ae:a6:22:13:db:45:0a:7b:85:f5:00:
42:75:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:42 2026 by rpki-client