Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a507fd37-f907-46ea-8c80-857b97a67610.roa
File: a507fd37-f907-46ea-8c80-857b97a67610.roa (raw, json)
Hash identifier: a+4Hy8sT1kEVzlUyAzSsbdiGZIEFyG3TWAn2vsH9Qmc=
Subject key identifier: BB:F4:4C:BC:93:FA:6D:4E:6C:29:94:C7:94:46:8E:A3:AA:2B:4E:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46E0BA68D9F281614462B8066EEC08332F661A3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a507fd37-f907-46ea-8c80-857b97a67610.roa
Signing time: Sat 28 Feb 2026 06:10:31 +0000
ROA not before: Sat 28 Feb 2026 06:10:31 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e0:ba:68:d9:f2:81:61:44:62:b8:06:6e:ec:08:33:2f:66:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:10:31 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=063fac434ccabac970bcd298219067557fe41c10b0ec1bac9f2a688a5f3d0958, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:63:8d:53:42:87:db:59:df:76:68:9a:5f:
00:ae:00:09:49:d2:39:62:5a:f0:71:ca:4e:b0:b1:
c5:e4:53:82:d5:30:e0:5b:4b:46:3d:5b:6c:01:32:
ac:c2:54:82:bd:ef:4b:f1:2d:18:c5:47:fd:2f:f1:
7d:96:93:b1:86:4d:76:a2:1e:00:5d:4a:7e:7d:f6:
0f:36:2b:ae:75:17:06:eb:ee:dc:c3:48:df:01:06:
a8:0a:c5:df:e1:fc:7d:0d:9b:28:91:d0:e7:84:5c:
03:fe:6c:ec:c5:f5:65:42:33:e9:ed:7f:80:61:20:
45:4c:b5:2f:f8:c7:32:43:b5:e8:53:ef:b4:2a:9d:
ef:d2:ab:02:04:3c:0d:50:83:a2:e9:af:18:f4:3c:
15:f7:28:16:2a:16:1d:cf:ad:17:9a:45:30:11:78:
da:cc:cf:b5:62:6c:e4:26:fa:b3:d5:e2:f2:f0:a8:
7b:ac:71:b3:ff:a6:64:ea:2d:4d:72:6d:03:38:db:
b3:7d:f2:8a:05:74:76:a1:9a:7f:ce:29:e9:41:8f:
9d:0b:48:d6:44:d9:ee:89:ba:71:ac:0b:da:a1:b5:
f2:dc:64:6e:c1:58:9e:58:18:47:ed:70:9e:e6:dd:
5a:22:dc:af:45:61:88:1c:c1:c0:d4:4e:11:46:91:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:4C:BC:93:FA:6D:4E:6C:29:94:C7:94:46:8E:A3:AA:2B:4E:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a507fd37-f907-46ea-8c80-857b97a67610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:ea:78:c4:d0:d7:9b:33:96:15:ff:2c:25:5e:47:a9:f0:2a:
91:b1:96:8c:4e:cc:e1:b3:a5:77:f5:96:eb:6c:8a:27:69:f6:
30:ed:7a:9c:bb:5b:32:c3:e7:76:75:06:df:5b:42:ad:03:01:
af:f6:03:ed:0c:90:88:53:72:b0:3a:42:9b:21:ec:3d:b8:2e:
55:fa:0a:fa:e6:0c:49:4c:c1:fa:3f:40:ec:d9:67:2e:2d:66:
c3:b1:3e:6e:38:80:f3:47:c3:9b:e5:74:01:3e:c6:d4:f3:9b:
2b:49:3a:4d:ea:0b:92:b7:a4:07:46:90:ec:c4:68:7b:1a:dc:
c6:80:e8:ac:3b:c2:f9:31:18:22:ba:26:a9:9d:6a:fc:88:a2:
c2:af:ab:eb:3e:27:a4:6c:05:c4:5e:c5:7c:51:2c:12:f2:50:
9d:1b:ab:c6:4e:28:21:71:39:31:6f:bb:67:7d:b9:6e:11:60:
e3:a6:13:48:16:e3:22:22:7f:05:8c:e7:13:11:a8:3b:f6:91:
52:5c:f9:80:a5:82:80:c7:22:00:64:cf:0f:6c:79:63:11:34:
20:88:75:ad:07:fb:35:68:60:3b:7b:96:20:f2:e0:e5:f2:fd:
03:33:aa:65:57:ba:6f:2a:ae:47:0a:dd:ea:63:de:5f:ce:e2:
83:a5:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:39 2026 by rpki-client