Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
File: b41919f2-4e07-4adf-8fc6-43f8940080d4.roa (raw, json)
Hash identifier: ZRVA++UtuoVfesUR4vqVPIHTqDRgwBrZJF2ZROR8zFA=
Subject key identifier: 57:A9:88:73:B3:B4:CC:F2:17:13:3A:A7:7C:BB:6F:77:FF:D2:2C:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3825146F70080005608121F336F4D861F30BFEA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
Signing time: Fri 20 Feb 2026 01:40:04 +0000
ROA not before: Fri 20 Feb 2026 01:40:04 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:25:14:6f:70:08:00:05:60:81:21:f3:36:f4:d8:61:f3:0b:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 20 01:40:04 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=3cefea31082cc6c6802bc1898336514c1d6ad0841018e1cd7ae41d3e80f7b155, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:89:5e:22:02:1c:14:ed:10:3c:c3:17:17:
1a:13:30:9a:ed:64:0a:b4:5a:c1:d1:dd:6a:c8:27:
b1:91:9f:fa:fa:ff:fb:f3:03:be:11:5d:af:5f:5b:
01:21:f4:d1:50:a4:04:d9:4b:76:75:98:7a:a2:e0:
75:8e:94:0a:55:ed:c3:cb:d9:a9:c6:ff:47:1d:96:
c2:25:2c:2e:bb:98:8f:8e:a2:08:9c:17:f4:63:ea:
c2:08:01:3e:b2:f3:e2:56:14:6c:0b:14:b3:e9:2c:
81:db:7d:e8:15:65:41:83:53:16:de:54:ee:04:85:
a2:c0:0c:d0:26:7d:b1:a4:90:10:21:78:31:f7:3b:
1b:87:fd:2d:79:c9:b7:c8:65:a4:59:4c:7d:d8:bc:
9e:f2:b4:f1:bb:b0:35:2a:e4:6c:e6:96:34:0a:86:
92:27:e5:78:55:7c:00:a5:e9:7b:d3:24:c9:40:b6:
70:95:fd:ea:07:dd:31:55:9f:25:11:60:b4:af:e3:
62:f8:fe:06:11:4c:5b:fb:c8:d3:5c:e5:6f:2f:6f:
45:96:2e:8e:41:23:e3:1c:2b:e6:ac:8f:f6:a5:59:
50:d5:96:df:fe:fb:63:bb:64:ee:6c:20:aa:bd:ca:
dd:41:25:c2:dd:72:6c:f9:07:41:cd:ab:ea:33:95:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:88:73:B3:B4:CC:F2:17:13:3A:A7:7C:BB:6F:77:FF:D2:2C:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:89:23:b6:a9:ec:ab:b2:0b:cc:be:47:0b:73:28:86:51:e2:
07:7a:35:12:cb:85:5e:95:87:84:ea:05:ce:fa:b9:da:48:06:
f6:32:3c:c6:aa:3d:39:e4:c6:c9:5e:21:80:1c:3b:29:ae:8f:
9a:4c:d4:ab:37:63:e8:47:09:a7:87:94:0c:4e:69:8d:fe:69:
33:2f:29:6e:44:f3:e5:fc:89:85:e4:77:a0:71:09:02:a7:4b:
91:35:b2:3a:e9:1b:82:5b:b6:69:3d:8b:b3:00:c2:be:22:cf:
d0:80:5d:54:f2:45:c4:d6:b8:42:5b:55:8e:b1:08:65:89:20:
b0:40:66:6d:24:1b:fb:fb:be:2d:e4:1a:4a:dc:76:d3:aa:68:
38:b5:8e:85:b2:7b:3f:af:49:bc:ed:e3:97:cc:68:ca:3e:94:
e5:79:53:c2:9f:a4:f5:2e:f1:fa:37:e3:a7:49:13:4c:45:f8:
ef:c1:6e:74:3d:f3:1a:a3:a4:eb:fd:67:d0:2d:c8:00:e5:60:
10:6e:23:3c:77:c6:3e:a3:cd:72:47:5e:ab:a3:ce:64:59:4e:
63:e6:dc:66:c5:9b:6a:8b:37:7f:4e:82:02:13:82:1a:c0:d0:
52:0b:35:53:04:5e:b3:de:ad:c1:47:74:3a:60:90:6f:ef:b0:
c6:61:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:44:54 2026 by rpki-client