Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
File: a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json)
Hash identifier: ExFPRWEXW+HUcMp/49Qx6r4se5qb0cnlsZDCAW5NLqw=
Subject key identifier: B9:B1:88:83:12:D2:DE:0A:A9:0C:AD:5E:11:E2:28:8B:E5:02:99:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 558D16C8DF51DD6CAEE139CB4734CFDBE757C3C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
Signing time: Sat 28 Feb 2026 05:20:46 +0000
ROA not before: Sat 28 Feb 2026 05:20:46 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8d:16:c8:df:51:dd:6c:ae:e1:39:cb:47:34:cf:db:e7:57:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:46 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=4b44c2ee4e5c8d97aac2648d9349b18995f82b463e72f2b445bc154d67ab7cdf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:da:a0:b2:eb:6b:5b:47:7a:d9:ed:07:d2:
7b:58:a3:ca:46:48:1c:31:26:67:a7:21:f6:88:6d:
92:4a:65:1a:4c:84:f4:d4:3d:59:85:84:35:36:3b:
df:94:09:af:4f:07:9a:fb:17:92:39:f0:cd:29:d5:
cc:77:18:3c:27:10:39:be:ea:a0:47:b9:14:2b:f8:
3d:ad:b2:3d:5d:66:82:75:1a:90:f9:dc:20:12:43:
d8:cb:d9:ad:e7:85:0e:cf:1d:36:33:c3:02:f7:20:
64:38:8d:35:72:c4:cd:c1:00:ce:d4:c6:7e:2e:75:
ba:04:fc:03:59:3e:7d:f0:24:9c:c0:f5:27:05:d3:
ad:4f:61:e7:d1:c0:00:6c:8b:99:f3:d7:3e:80:d4:
10:58:d4:8f:d6:87:35:21:d0:1e:f8:96:3d:8a:ca:
7c:ba:ed:49:16:c9:14:5a:29:1d:b9:84:d7:68:50:
be:9d:2b:26:f8:e1:c1:d4:d5:9e:4b:f9:d2:b7:d1:
87:d3:30:97:21:1d:d4:fe:bf:98:d8:e4:b6:c1:9e:
83:af:53:48:a0:ec:0f:6b:cf:11:1b:d2:99:a5:3c:
d0:e7:d9:46:f4:94:a5:b7:56:ac:50:1f:1f:58:a6:
31:77:ba:93:89:f7:22:2a:1d:b3:cc:80:44:95:8b:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:88:83:12:D2:DE:0A:A9:0C:AD:5E:11:E2:28:8B:E5:02:99:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
af:dd:ab:11:ca:d4:fe:ee:92:2d:4b:2f:8c:4e:01:ef:fc:b2:
35:f4:18:3a:35:97:ca:b8:85:92:26:a8:45:72:b5:3d:5f:eb:
1d:6c:20:96:6c:72:29:a1:5a:e1:25:9c:89:63:65:a5:65:1f:
3f:b0:8c:36:22:e3:b9:d0:5c:70:28:97:e6:43:b4:40:48:32:
c1:1c:e3:78:4a:5a:86:ea:7f:a4:c7:94:17:7b:85:29:f4:cf:
46:d4:36:a9:53:7c:1e:7a:cf:c4:d9:4f:84:4b:2d:c3:d5:b6:
9c:b7:30:b1:d7:9a:6a:11:2d:24:fb:d5:8b:cd:5e:da:49:de:
52:13:78:6b:bb:49:65:0a:a8:c9:31:98:77:d4:33:38:3d:b7:
78:6b:1c:15:66:4d:f1:c6:63:67:7b:9a:7a:42:b7:5e:59:50:
0c:32:4f:86:d4:a4:20:9b:c0:48:c0:da:89:a0:b4:64:4d:86:
4c:ed:22:b1:3b:e9:94:40:d9:5a:af:a0:e5:d6:e8:df:00:0d:
0a:97:f1:ec:41:45:9b:ee:c6:91:b7:5a:69:43:6d:e2:e5:9d:
fb:1a:d1:1f:bb:f1:4e:f6:eb:8f:da:42:ab:a8:19:1d:3a:36:
01:75:ad:7a:79:c4:d8:e9:fa:34:12:9d:a9:80:d8:0d:e3:83:
00:1b:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:56 2026 by rpki-client