Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
File: bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa (raw, json)
Hash identifier: 47NLa8ovOpAnIupXBjL0/DYIc6zpinEl7FGn/v8he4E=
Subject key identifier: A9:0E:CD:B6:6C:22:F8:01:2B:F5:52:ED:34:28:1E:B4:55:36:EF:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 456DC66C50CA35C40F55F98E0CEEE185BDCC98D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
Signing time: Wed 11 Feb 2026 01:20:12 +0000
ROA not before: Wed 11 Feb 2026 01:20:12 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6d:c6:6c:50:ca:35:c4:0f:55:f9:8e:0c:ee:e1:85:bd:cc:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:20:12 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=71a9a8a5b93f993bad3b39580ada0095995d6940afe2d75d16fb61dc8403164e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ac:10:e7:2e:ea:21:4f:06:70:f1:06:aa:c4:
1f:a3:3f:df:04:44:14:25:75:9c:30:18:32:31:53:
67:0a:e5:b0:5f:41:1a:98:f3:6d:04:c2:21:c5:2d:
fb:a1:c3:fc:78:70:3d:c4:4e:ce:4d:07:7e:77:08:
ed:b2:e1:4a:0e:d2:4e:8b:12:6a:ef:6c:ac:39:a3:
c6:28:bd:8c:ed:dc:0c:e8:60:9a:53:1d:36:3f:c7:
ce:81:37:85:4a:6c:0d:04:6f:02:f5:ae:62:8f:dc:
5d:ba:3b:b0:78:94:ba:2f:ec:84:57:43:62:73:ab:
39:0d:c7:22:b1:b7:2a:33:90:53:5d:3b:ce:4d:a7:
4d:7c:b0:9a:6b:3f:8d:4f:19:ef:0c:61:e1:f0:25:
d8:d3:4c:d9:a4:cb:62:02:a4:42:fe:3f:f6:18:0d:
9f:53:d8:af:47:80:c7:8e:5c:79:cf:27:41:82:45:
7e:ef:0b:90:f9:3a:77:24:37:ce:0c:1c:5d:be:18:
75:f8:10:1c:a9:c9:e2:de:64:87:2f:40:98:04:ad:
d2:79:8c:fe:40:fa:65:b3:36:92:aa:5e:a9:f0:ee:
30:cd:9a:e2:3a:82:c3:02:e1:87:00:03:a7:71:27:
14:e2:06:b6:41:3c:56:49:c3:a4:f0:c1:8a:b7:cd:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:CD:B6:6C:22:F8:01:2B:F5:52:ED:34:28:1E:B4:55:36:EF:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:1040::/48
Signature Algorithm: sha256WithRSAEncryption
08:f4:a3:ff:2a:03:f7:c3:4e:69:76:8d:79:37:36:a5:fd:ba:
be:a0:5a:64:9b:d8:37:b1:87:15:42:33:ef:2b:a1:05:7a:16:
d6:34:84:7b:a7:57:52:6a:6e:95:b2:6a:44:c6:7b:72:48:68:
7a:e9:dd:99:0b:ea:d7:a2:5d:7f:90:22:ff:da:9a:41:4a:38:
d0:cf:63:5b:ed:a0:65:57:d6:fc:d4:38:95:4b:af:96:5e:99:
3c:ed:bf:01:3d:17:1f:8e:c1:47:9d:b9:43:d0:fa:32:dd:f0:
8b:47:e6:d9:7d:57:a9:1c:4d:73:ec:db:e4:62:4e:d8:4a:cc:
bd:3b:84:7c:26:08:3e:bd:5b:08:b3:4f:c1:cc:6d:61:cd:8c:
8b:d7:36:e7:0a:7b:62:64:19:b4:16:be:f7:de:17:71:1b:78:
8e:4b:5e:cb:01:e8:fc:21:56:84:9c:5b:b8:8a:98:2c:48:67:
d0:1e:3b:a8:56:88:a9:a0:b9:10:70:47:31:e9:22:c1:c5:54:
19:14:19:69:41:f5:f8:a8:d7:36:e4:3c:04:c9:b6:d8:3c:25:
1b:d3:d6:d6:50:f3:33:72:54:9c:d6:a2:6c:ab:3e:61:0d:47:
ee:44:c1:b5:65:b8:d5:91:cf:28:0a:10:b4:6a:8e:c9:3f:c2:
f9:9a:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:44:57 2026 by rpki-client