Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
File: b3515426-a058-439f-a8fc-e68eaafc8806.roa (raw, json)
Hash identifier: fD1vgSl7aXJ38mgVEXLA6++HrwYwQUtXz/SM0l5T0jY=
Subject key identifier: 57:9A:4E:CB:CF:0C:C6:7B:E3:69:3F:2E:14:D4:7D:A6:8E:5C:B8:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0BBF639CC54765D8F5B4F6510F639125D22C8341
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
Signing time: Sat 28 Feb 2026 06:10:29 +0000
ROA not before: Sat 28 Feb 2026 06:10:29 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:bf:63:9c:c5:47:65:d8:f5:b4:f6:51:0f:63:91:25:d2:2c:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:10:29 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=69ed0d7a0cbbc39f91e2c3c8613d19e0b98f6557ae25c449c1c37376d8eb4f52, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:a8:cf:ee:52:1e:af:e6:fa:56:0b:bb:af:
cf:6e:5e:e8:06:f3:5c:87:f7:e6:f0:12:62:5a:2f:
ed:12:d8:5d:e5:3b:18:12:49:d1:f3:4e:71:c9:71:
96:79:56:b1:82:92:a4:b6:e3:dc:5d:57:10:f3:6b:
43:77:f0:2d:21:ac:50:32:58:96:ad:45:fc:bd:a5:
6f:af:83:9c:a2:38:cb:5f:36:51:c9:0b:51:ad:64:
84:12:3c:2f:c3:95:d0:17:55:1d:2b:68:12:22:58:
10:14:37:96:ab:c3:c4:a3:74:ad:85:b1:49:ab:45:
9d:73:50:a0:74:8a:18:60:4b:b5:a3:5f:70:1a:04:
7b:d7:fa:55:a1:9d:87:90:2f:a0:e5:49:12:38:f4:
fa:7a:38:71:37:13:2d:0c:59:38:43:0b:94:b0:ab:
2b:81:90:b1:64:ac:6b:40:3c:54:e3:56:4f:ed:61:
a2:c7:b5:a5:bb:2e:70:34:5c:33:a3:2b:c7:b4:02:
0b:79:ff:42:49:5c:83:e8:d9:b2:50:17:2f:75:e2:
e9:d9:f3:9b:19:3e:95:72:10:3d:94:e6:ca:ae:b9:
b7:5a:5e:0a:42:31:d4:22:96:60:c0:b4:eb:c0:83:
3b:53:71:4c:e6:9c:64:34:c6:83:52:3b:66:d2:2c:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9A:4E:CB:CF:0C:C6:7B:E3:69:3F:2E:14:D4:7D:A6:8E:5C:B8:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:81:4b:e0:f2:d7:90:0d:58:aa:b7:4c:74:7e:4a:93:dc:8d:
3f:96:17:8e:f7:8a:30:18:0a:c0:e1:7f:29:a3:c8:a2:3a:d9:
05:5d:e1:6e:7f:c9:0d:c9:0b:97:cb:50:91:de:64:3b:22:d3:
09:ba:97:21:d8:12:9b:fd:ab:bb:79:39:9d:8f:35:e5:d9:c5:
94:d8:36:10:b4:e3:23:be:7b:f3:78:78:e1:62:e0:a6:48:2c:
ce:ec:31:10:f8:23:1e:d8:3f:28:db:4c:1c:0c:39:67:23:43:
75:a4:eb:54:0c:51:f0:b9:86:94:14:34:d6:72:60:50:ab:2c:
82:75:75:4b:6c:c0:f2:2d:e5:9c:28:4d:51:d2:cf:81:c4:cd:
d1:16:f9:68:b3:c6:69:50:d8:e6:6a:99:1c:01:d8:fb:e2:fa:
0d:09:e3:24:10:81:db:b8:e5:22:f8:51:1d:fe:12:20:8d:46:
6e:54:cb:b8:4a:6c:ff:6d:dc:51:66:8c:0f:81:58:09:6e:dd:
5f:9d:c6:16:dd:7a:3e:46:1c:b6:b5:66:f2:56:50:f7:ec:3e:
95:d9:23:fe:98:f1:72:2d:fe:70:9f:29:31:c8:82:ad:1f:72:
a9:93:10:c2:e4:b3:c6:cb:1d:b1:44:55:14:2b:18:22:d5:45:
84:0b:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:23 2026 by rpki-client