Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: wHIjNhpcfoh5OdZcRBHmwZf61AOzHztvmkB77LesNDA=
Subject key identifier: 1D:C7:29:FF:2B:AE:CC:BC:E3:F7:94:31:9C:8A:05:A4:DE:35:1B:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65AE70F5CD3DBF71048D083A0BAA3225A5F3B8BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Sat 28 Feb 2026 05:50:41 +0000
ROA not before: Sat 28 Feb 2026 05:50:41 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ae:70:f5:cd:3d:bf:71:04:8d:08:3a:0b:aa:32:25:a5:f3:b8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:50:41 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=d8525bba9e26df63eef89b673756a16661ac7979809ac1e3899c7903ca2b2401, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:d9:dd:df:83:9b:3b:4f:8a:e2:b3:4e:e7:
2a:9b:53:6b:5e:24:aa:26:73:a9:4b:54:2f:0a:75:
b1:72:05:47:f7:0b:2d:a1:78:53:ec:8f:75:a6:19:
5e:15:6c:00:ff:37:0c:5b:46:00:74:c1:31:b9:41:
1d:f7:34:91:ba:8d:a4:44:77:e8:f0:fe:d0:dc:34:
7f:36:35:3a:21:57:fe:13:13:19:9b:b5:69:6e:43:
b8:34:ef:23:31:b1:48:a3:00:95:8f:bc:fa:05:9b:
71:e0:4f:4e:19:d6:4e:2d:4f:fb:46:79:0c:23:5b:
d5:ff:c2:66:f0:45:67:c9:2e:8a:0f:1f:7a:13:01:
0c:89:77:d8:75:8d:82:64:e9:45:8c:d6:d0:97:4f:
da:05:ba:76:1f:8e:c9:b4:3f:ef:82:43:13:c6:00:
48:d6:23:15:4c:51:8d:36:20:09:0a:c0:70:76:82:
22:d0:30:13:52:59:bb:fd:43:db:75:f4:53:48:23:
d1:a5:21:11:f2:4e:9a:30:f0:5d:18:44:6d:82:f3:
80:7d:bb:33:3e:0c:89:35:47:ed:a4:60:37:9d:4c:
0f:d9:ad:26:2f:d1:0c:f8:39:99:23:6d:02:2e:9c:
1b:28:8d:47:08:9c:ef:c2:bd:b7:dd:12:ac:6c:80:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:29:FF:2B:AE:CC:BC:E3:F7:94:31:9C:8A:05:A4:DE:35:1B:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
c4:de:c8:de:78:b0:bf:a6:44:5f:82:77:80:e8:db:b2:aa:80:
1e:17:78:ec:80:0b:0f:40:03:f9:87:f9:41:9b:1a:3a:ae:2a:
8a:1f:95:d2:4c:db:a3:27:31:11:77:5c:ae:c5:31:82:a3:29:
ad:f0:42:fe:9f:22:b4:6b:43:a4:16:48:c5:62:cd:9e:7a:d0:
c3:dc:43:92:cc:86:06:92:17:18:95:ec:0e:ec:8b:f5:ee:f1:
de:fd:40:e8:72:27:68:30:07:d1:58:4a:5c:b2:d7:7a:aa:9d:
28:77:35:de:04:42:0a:57:25:88:25:e0:b0:52:a8:bd:85:11:
ea:c8:c4:ad:59:fc:18:c0:d2:55:84:79:68:9e:30:ec:1b:91:
dd:91:a3:2e:c6:ca:c9:8c:71:aa:5a:26:b3:f3:08:4d:26:f6:
64:0c:aa:46:a1:b3:a4:48:34:86:44:a6:64:3a:1e:8e:a8:81:
e0:a1:62:a1:90:04:98:bb:28:d7:2b:2a:17:7e:75:98:57:6c:
51:65:05:6f:a7:44:79:63:80:d0:da:87:dd:7a:88:08:2d:2d:
8d:aa:de:dc:2f:25:f7:a4:2c:2a:d3:c7:7a:c3:47:0b:04:1c:
69:1c:f9:07:cd:c3:29:7e:6d:cc:90:fb:81:de:0a:df:37:4e:
73:e7:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:43 2026 by rpki-client