Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8047dd7-4c66-4d8c-87e5-70ed6859cef4.roa
File: b8047dd7-4c66-4d8c-87e5-70ed6859cef4.roa (raw, json)
Hash identifier: 1lKi214AERo9JAWvwfEe0ycO14+9S4xhrECx4UxP4Wg=
Subject key identifier: 6F:E8:1D:55:DA:BB:3F:B3:85:F3:C7:A9:09:5C:89:1B:F1:DF:1D:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E46BEC3384A9C5DD51D3AE8B8B24B7731A337D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8047dd7-4c66-4d8c-87e5-70ed6859cef4.roa
Signing time: Wed 11 Feb 2026 01:20:11 +0000
ROA not before: Wed 11 Feb 2026 01:20:11 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:46:be:c3:38:4a:9c:5d:d5:1d:3a:e8:b8:b2:4b:77:31:a3:37:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:20:11 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=b2a1e529b055a5f8ed135651d23f46a5322c74599f781eff26e6f2138c759f2b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:24:6b:bd:f9:eb:65:6d:42:12:f1:a0:bd:
5a:67:2a:3a:e1:8b:d7:9f:fe:4e:96:2f:59:3f:1c:
9a:54:01:79:28:c6:f6:93:63:f0:38:24:00:81:89:
19:79:f0:2b:ca:f8:5e:db:a2:e3:5c:d7:9c:75:bc:
ec:06:5c:63:26:cb:68:b3:5c:76:d1:92:b0:be:5d:
7d:16:bb:9a:02:64:26:44:b3:f7:84:08:c0:d5:1e:
c5:f5:73:23:c8:b6:89:5b:dd:8b:6a:60:f6:8e:53:
1d:53:88:61:e6:a0:ef:bc:85:d9:69:8a:4a:3b:5f:
e1:ec:a5:8c:67:e6:13:ca:ed:6d:de:30:4a:d4:c5:
c6:f1:cb:ee:14:66:05:c8:ec:c1:90:e9:f2:2b:30:
ba:18:39:bf:53:62:8d:8c:a6:91:bf:bc:77:0a:51:
76:c6:b5:18:03:54:d4:b2:8a:e1:95:a6:e6:06:cd:
e4:fa:f9:46:df:0c:99:38:28:3e:b0:6d:08:60:68:
eb:ee:d8:31:36:7c:91:dd:71:93:8f:ec:dc:86:c0:
fc:9d:e5:d5:a3:cb:9f:34:c1:85:98:0f:c3:85:d3:
a4:d5:14:49:b6:f7:e7:33:a1:01:68:97:b9:7f:ed:
dc:ba:7b:08:9b:99:4f:59:65:47:1e:86:6b:30:51:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E8:1D:55:DA:BB:3F:B3:85:F3:C7:A9:09:5C:89:1B:F1:DF:1D:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8047dd7-4c66-4d8c-87e5-70ed6859cef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:840::/48
Signature Algorithm: sha256WithRSAEncryption
2e:17:46:ce:d7:ba:bc:2c:b5:e9:85:ed:23:d9:b3:80:83:f7:
93:fc:36:d6:0a:6e:c5:3d:89:2b:65:59:2b:cc:75:75:74:9c:
3d:a9:8f:fb:9e:c3:c4:6d:29:b6:9f:d0:48:22:5f:fb:f7:79:
f4:f7:e7:93:38:53:d0:83:8c:06:b7:a2:5a:27:a1:0e:72:de:
2e:35:36:dd:7c:4d:04:26:da:71:1c:f7:bd:81:f6:73:fe:e3:
8c:d7:cf:d3:af:92:51:35:ca:dc:dc:df:9b:5f:28:12:a7:ae:
61:6d:9f:bd:2e:bd:7c:60:61:53:aa:ac:65:50:df:08:5e:00:
b7:c7:25:bc:7b:fd:27:13:6f:a5:e9:74:e5:7c:ec:fd:7d:5f:
fd:bd:ab:62:07:d2:d1:6c:49:88:4c:12:d5:62:70:ac:4b:9d:
a2:a9:96:e5:85:0d:22:11:39:62:78:3d:c1:f2:d2:e5:38:e1:
16:3a:a6:8f:b1:cf:16:73:7a:20:f5:bb:a8:00:b4:96:e1:68:
f9:68:de:48:45:5a:95:0d:79:f2:7f:ab:80:01:33:ea:fe:1d:
21:99:b1:0f:d5:1a:39:00:2b:2f:84:00:06:46:7d:bf:83:8b:
26:bf:47:f9:cc:82:57:24:8e:1e:c7:6f:fa:c0:b3:92:82:06:
e8:0d:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:19 2026 by rpki-client