Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
File: ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa (raw, json)
Hash identifier: 4g5piMTNqiPMXJ3ULYRflAZlfTmrQj7JtnxToC1wESQ=
Subject key identifier: 3C:AE:DC:CC:02:E6:3C:98:3A:08:AA:A1:C8:CC:9E:8F:47:80:EF:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AA24BCDCEBB8514DF0E232A819E2A19725C7906
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
Signing time: Sat 28 Feb 2026 05:31:10 +0000
ROA not before: Sat 28 Feb 2026 05:31:10 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a2:4b:cd:ce:bb:85:14:df:0e:23:2a:81:9e:2a:19:72:5c:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:31:10 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=772fc14b042ca015c0ec4d3b50887660bff5daafe9c40776cd5df4e8df11397c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:b4:55:f6:07:12:b2:8b:39:3c:b0:0d:7c:
83:28:df:1a:3d:cb:b8:00:77:2c:a9:c6:74:08:fd:
21:91:29:34:cf:88:80:0c:3e:21:3b:e4:50:4c:8d:
f9:60:f0:56:20:78:41:2e:9c:61:34:6e:d5:db:5a:
12:b7:52:c0:45:d4:f3:4c:ab:00:3d:ef:a3:4c:da:
6d:bc:0d:57:82:9d:f9:1b:d8:60:c5:70:08:13:d6:
cd:11:c5:98:dc:ea:8c:22:2b:47:a0:2a:8b:af:42:
aa:99:fd:22:f4:74:2d:a3:d1:ac:33:97:69:a5:e3:
c1:9b:f0:60:f6:62:1c:98:c1:43:38:4c:c4:6c:0b:
7d:d4:d8:fa:7b:7d:cf:31:4c:26:bf:74:d7:c6:b7:
a9:56:cc:32:57:ae:7b:b3:ae:30:d5:10:3c:07:fb:
5e:68:67:54:8c:7d:39:c1:0a:9b:fa:9d:f8:69:2f:
ea:29:c3:f2:7f:3d:81:0b:9e:b9:8b:40:3e:a8:a2:
34:a5:ed:94:0d:65:e8:30:44:66:d7:26:78:9f:ae:
a9:58:90:16:fe:9d:c0:90:6c:9e:b7:cc:b4:87:4e:
02:54:a3:19:cb:e9:76:ef:fb:d1:73:e1:8e:ae:2a:
d8:c2:0a:94:85:cd:51:56:0c:fd:86:32:a9:27:49:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:DC:CC:02:E6:3C:98:3A:08:AA:A1:C8:CC:9E:8F:47:80:EF:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:1000::/40
Signature Algorithm: sha256WithRSAEncryption
17:bb:54:fe:e7:87:cb:41:3e:8f:d9:6d:6b:bf:3e:95:b4:e2:
df:02:4d:c7:59:27:fd:d6:0a:26:41:ce:69:80:ab:b4:46:c4:
61:c9:b4:3c:70:d2:c0:bf:3b:1a:74:58:45:2b:aa:17:ad:73:
67:7d:b3:fd:50:4c:f4:0d:b4:c2:fe:bb:47:97:1a:53:04:34:
c3:9a:94:37:b7:26:94:7f:d9:f7:e5:ff:40:43:48:ec:9b:f5:
c0:e1:5e:cb:84:e2:15:7f:f8:4d:41:88:c4:52:1a:c4:7d:24:
3a:d7:2a:30:79:b9:20:b2:39:3e:00:13:c3:cc:58:f1:1c:66:
e0:d5:d3:49:ac:e5:c9:a7:23:72:43:ff:a2:2f:cd:62:43:64:
30:d9:e9:c4:74:ee:92:3b:cc:f4:a7:dd:16:d7:3e:62:71:0d:
70:89:ac:b2:5a:9d:8d:96:48:79:0a:f3:a9:24:b8:80:ce:42:
80:a7:8a:46:1c:09:b9:da:4f:9b:b8:0a:f7:4d:2e:c4:8c:e0:
3b:3d:74:cf:48:73:ad:e9:d3:a5:10:f4:e0:1b:d7:0b:a0:df:
a6:9e:14:18:2d:b5:d7:d8:3e:66:cb:6a:46:db:f9:80:d1:ab:
2b:5d:f9:1b:ac:87:fa:24:af:74:21:82:7c:f9:be:e8:d7:e8:
77:a2:53:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:24 2026 by rpki-client