Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
File: adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa (raw, json)
Hash identifier: XcyvKzLLkXi0cD8rvyZ/H4gmkpLy9t0b7Fp72JN8JPg=
Subject key identifier: D2:01:5F:BB:B2:20:19:0A:CB:89:E4:72:B6:82:1E:D2:58:FE:FC:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E5DFAE7D48AE4C2BC08A29A5B32D0E35207292D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
Signing time: Wed 11 Feb 2026 01:30:35 +0000
ROA not before: Wed 11 Feb 2026 01:30:35 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5d:fa:e7:d4:8a:e4:c2:bc:08:a2:9a:5b:32:d0:e3:52:07:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:30:35 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=77af1939ccf86082a906e9ad7e4f4c3ab850c94d00744e9df119864c803ea64b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:f4:b4:13:d4:d5:7f:ab:b9:50:a5:a3:c1:
d5:1d:ed:23:c7:7c:f0:fe:5f:87:a4:0f:98:cb:7b:
1e:a1:e2:c9:27:c4:cb:bf:c6:2b:be:ff:5a:51:3d:
fa:1a:41:ba:90:1b:6a:d7:34:b1:0c:83:da:3f:89:
aa:49:5d:47:03:df:03:40:70:97:c9:54:0f:38:c8:
a4:48:eb:0f:2a:21:16:6b:f4:cf:8b:e3:f2:a0:de:
82:81:48:5a:2d:36:0c:0b:2c:59:12:45:ff:de:83:
d0:0d:e8:fa:f0:2a:69:f7:6d:83:19:b8:e6:da:dd:
fc:bb:62:da:fd:30:a8:2e:54:65:ed:cc:cc:3b:98:
57:6a:88:02:ab:a2:dd:f2:24:95:e6:75:1c:ea:26:
31:b2:e5:9c:ce:ab:8e:0c:14:7d:c3:81:6e:e9:64:
f6:c9:69:53:c6:6b:11:05:58:a2:2b:46:05:08:67:
f5:8f:15:f3:43:3b:03:2a:84:57:62:d3:17:44:e4:
c1:c1:f2:af:8f:84:6e:a3:5f:e0:ad:af:05:58:fc:
38:0d:dc:ed:1e:e5:a7:53:87:77:c3:35:02:69:f7:
7d:c5:a2:af:b6:7d:38:c2:c3:f7:7a:ee:67:16:1b:
96:78:02:aa:6b:a1:4d:8b:db:11:c6:cb:05:2c:2f:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:5F:BB:B2:20:19:0A:CB:89:E4:72:B6:82:1E:D2:58:FE:FC:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4020::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d2:74:78:5e:ca:a9:4d:12:9e:17:f3:ee:27:8b:f1:63:7b:
23:f7:6a:ec:42:a8:00:68:bc:9a:a6:80:c8:6d:1a:3a:ff:a7:
65:8b:ae:ac:49:4e:57:1a:87:49:5c:cc:3b:64:dd:6e:a3:55:
cb:f7:d6:39:e5:be:2c:7b:55:20:75:e8:02:f6:38:8a:70:ef:
ed:76:a0:cd:cc:55:39:cf:ff:6b:87:ee:40:6e:37:ac:90:93:
61:e3:f7:7b:c8:1e:15:9f:87:a7:f5:44:22:f6:94:5b:e7:ca:
1c:cd:3f:d8:f3:ca:d6:11:fd:a1:e7:ec:5b:54:8b:f4:16:22:
1f:7c:ad:0a:83:51:ad:04:e0:4f:b9:1b:5b:34:9b:2f:58:82:
bb:b1:b6:0b:7e:87:a8:0a:9f:42:44:08:fa:f5:55:1a:63:4c:
b4:18:73:6d:fd:07:7a:9a:12:e6:80:e2:1b:37:66:2f:58:a1:
7f:9c:26:3b:b5:1b:1e:2f:6e:db:46:d1:30:a9:8f:cf:b5:a6:
6b:f7:92:b7:50:64:f5:3d:d9:29:fa:b4:c4:2c:b1:59:82:ce:
3c:06:ac:04:b9:79:36:63:c6:22:cf:d6:7a:f6:3c:7d:46:7d:
98:b1:01:21:4c:35:c6:b1:89:30:7c:73:fc:4b:ac:43:f1:5a:
63:1f:4a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:30 2026 by rpki-client