Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6b5f2f6-236d-447e-aeb1-24c947937396.roa
File: b6b5f2f6-236d-447e-aeb1-24c947937396.roa (raw, json)
Hash identifier: AqnLqDAoM3vDW2Hxv1Z45HJKVIzkmZ1G9bhS5KEuSiw=
Subject key identifier: 32:71:B7:74:BE:99:09:11:20:A1:E0:0B:AB:E0:63:CD:3D:E7:F5:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56132F19365ADBDDFE5184A581D326254B0301C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6b5f2f6-236d-447e-aeb1-24c947937396.roa
Signing time: Fri 06 Feb 2026 00:30:17 +0000
ROA not before: Fri 06 Feb 2026 00:30:17 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:13:2f:19:36:5a:db:dd:fe:51:84:a5:81:d3:26:25:4b:03:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:17 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=2b73deddb368c5750cb442b2cc7e8dbdb8c4aceb6514c1d6301c811ff5b9f170, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:a9:82:65:4c:84:7d:45:6f:7b:1a:c7:fa:
45:69:a8:b0:9b:96:91:80:e3:ca:9d:74:42:24:d4:
c9:8a:c2:ae:d5:93:0f:bf:6d:cc:07:20:6a:6b:75:
79:98:b2:f8:38:64:e7:5a:15:61:ba:f4:5c:dc:55:
6b:8b:9b:fd:a1:bc:f6:15:42:3b:e2:aa:b8:d9:f2:
89:c2:18:15:80:ee:42:01:0d:ce:a3:48:2f:77:37:
6b:2a:f7:c0:53:d9:4e:4c:98:fe:34:5c:78:4d:3a:
e4:d0:05:8e:bf:47:25:dd:2a:1e:38:3a:f2:fa:98:
c6:38:35:1e:b6:5b:0a:07:a0:0d:a9:5b:3b:2f:ac:
05:66:f3:70:2e:a0:b1:ff:42:9b:8c:7f:6b:d8:00:
9a:dd:8b:72:77:10:fe:82:ff:ce:42:d2:2a:ea:3c:
85:6e:e1:22:79:fe:0c:e4:13:9c:e7:d6:db:d5:ac:
cc:92:e9:90:d4:dc:e6:e2:6b:81:82:bd:37:46:e4:
ba:c6:cb:2e:03:bb:51:08:ef:8d:cd:a1:5d:80:88:
81:c3:ae:22:bb:96:cf:36:c3:42:3a:80:10:71:c0:
e8:ae:f4:c0:aa:8d:63:3d:f2:b0:11:01:f0:15:0d:
d6:2b:5d:97:8d:e9:f5:c1:d9:fc:d8:74:6a:10:f7:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:B7:74:BE:99:09:11:20:A1:E0:0B:AB:E0:63:CD:3D:E7:F5:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6b5f2f6-236d-447e-aeb1-24c947937396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:3f:fa:ce:8a:68:61:cb:8f:d1:b0:7e:f1:83:3b:2f:69:d1:
0e:ad:a6:43:39:1a:14:19:68:dc:86:60:64:fb:3a:f3:c0:ad:
0b:52:fe:ea:66:4c:28:08:ad:2c:88:b9:e0:53:94:90:ef:f7:
dd:20:c6:02:49:ce:2e:e1:21:b7:28:19:6a:69:b9:ff:7e:7e:
4f:e7:35:81:29:74:9a:7a:d9:23:9b:5a:7c:d8:df:97:54:27:
bb:ad:18:c1:c3:4b:11:c6:85:a3:44:6c:a1:db:77:07:8c:53:
81:a0:0e:3e:4e:e2:3c:22:01:66:44:a0:48:66:cd:e2:e7:97:
ac:07:c9:60:43:e7:de:b5:70:2e:35:31:fd:5b:c3:7c:9f:97:
dd:af:ef:90:6e:cf:78:fc:3b:b1:fd:22:2d:bd:61:83:c5:14:
53:23:f3:14:7e:42:a9:19:9d:65:09:de:a7:37:6d:2d:d3:28:
66:18:bf:d9:74:fd:0b:7a:0e:b8:0b:05:0c:38:07:a8:ba:12:
a8:14:93:3f:72:ba:df:11:16:2a:a3:92:a6:2d:de:b0:b5:6c:
10:2e:39:26:41:1b:44:2f:b7:e9:ed:45:23:75:ee:4e:bd:89:
83:6a:51:72:af:92:12:35:42:6c:95:36:3f:51:bc:23:be:f8:
16:35:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:57 2026 by rpki-client