Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
File: a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa (raw, json)
Hash identifier: k5CduGoqjs9l/AvhYJqm/a1HZcCzz7M1DcA0roy8oCM=
Subject key identifier: B7:DF:90:D6:F0:6A:8B:05:18:92:2C:4C:BB:29:68:76:FC:13:F0:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 790D23464ADF69DF80594582FE2D3AFE68731757
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
Signing time: Tue 17 Feb 2026 03:10:25 +0000
ROA not before: Tue 17 Feb 2026 03:10:25 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0d:23:46:4a:df:69:df:80:59:45:82:fe:2d:3a:fe:68:73:17:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:10:25 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=85c4b15da876a0ff36a47c284474a7f9b71b7027ee7a2064881ab441eada856e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:2d:29:91:11:2d:e0:1b:37:a9:bd:64:10:
fe:35:23:a9:65:18:39:b3:b6:79:2e:c7:2e:a1:fe:
8b:b8:d4:e4:ed:39:d8:98:33:5f:eb:6e:5c:dd:95:
b2:e4:9d:1a:ad:d5:12:61:f1:50:1d:1b:c0:28:2a:
21:ad:ab:83:04:03:fd:31:4a:b8:99:97:e7:f2:77:
5e:ae:e5:f6:7e:a1:12:89:35:52:22:07:53:a9:b8:
bb:1e:64:c1:0d:e6:73:57:38:ce:0b:50:e7:e1:56:
0d:9c:c6:d8:3a:d4:c5:a1:d0:c7:48:0f:45:a4:1a:
86:65:91:b8:7a:4d:45:51:8b:52:3e:93:58:f1:0f:
a0:66:d4:fd:60:8c:6f:c7:0f:f1:e7:ae:4d:2b:ad:
34:63:74:bf:43:cf:57:d3:64:ec:30:21:8b:8c:69:
97:97:26:dd:d7:24:8d:ee:4c:0b:43:1a:12:72:70:
7b:c9:5c:6c:a5:d0:10:2d:28:ed:69:84:03:43:eb:
03:46:29:a0:db:9e:13:3e:a9:b7:36:97:d9:8c:ed:
f9:15:d9:df:e5:dc:58:ae:1f:04:2b:ba:40:02:0d:
b5:4c:07:c0:3b:00:2c:08:9c:fc:94:5f:1d:66:3c:
c8:8e:66:82:f0:2e:11:1e:6d:a4:fb:9f:b6:92:be:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:90:D6:F0:6A:8B:05:18:92:2C:4C:BB:29:68:76:FC:13:F0:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b::/32
Signature Algorithm: sha256WithRSAEncryption
41:b8:5a:7c:59:42:3a:c1:f3:b8:fc:d8:46:df:94:22:b5:55:
fd:20:8d:74:6d:d5:40:44:ed:28:04:d8:71:0c:4c:ad:b0:c4:
5c:e2:0e:c4:e0:42:7e:ff:e0:44:1a:e3:9d:f1:c4:5a:d5:8a:
de:12:d5:da:a2:d3:db:43:1f:10:92:15:ae:89:7d:d8:d3:58:
da:d9:f4:68:c6:32:dc:5c:63:d6:52:da:71:dd:2e:2c:14:da:
d5:37:a4:2f:0c:4f:15:b1:f5:79:78:fd:52:48:23:69:0f:75:
87:ea:b3:c8:18:3a:ea:f0:bb:0f:3e:28:19:be:b9:e1:81:02:
17:38:5e:37:ca:73:ff:0a:ed:8b:6c:53:c9:99:d7:77:9e:a1:
61:a1:c5:af:4f:08:c9:3f:b0:1b:96:96:bc:0a:2b:b4:8b:a7:
51:15:aa:13:1d:2f:8e:a2:e6:71:d6:bd:c8:07:3b:b3:f3:ea:
1e:f8:a8:cf:c2:34:fe:4a:8f:5c:93:77:3a:f7:19:a8:8d:f1:
57:4c:c3:32:7e:27:cf:dd:2f:ab:38:32:cb:f3:23:87:33:4f:
92:1c:8b:f2:a3:6c:69:68:50:0d:35:b8:bf:50:13:86:ca:f0:
cb:80:9c:7d:b2:92:e2:8f:8c:91:2d:6a:c6:1f:37:dc:15:43:
29:08:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:34 2026 by rpki-client