Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
File: bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa (raw, json)
Hash identifier: 7R1Gyh0oNVstcTEVVA9fAyzGP39mtbRIdSD/wMGfYQI=
Subject key identifier: F2:73:2E:95:E9:A9:2F:AC:94:FD:A5:02:AF:F2:96:6E:5B:C1:85:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7621B55D24D0BE9FECD8418D3F68F13D652C466F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
Signing time: Sat 28 Feb 2026 05:51:29 +0000
ROA not before: Sat 28 Feb 2026 05:51:29 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:21:b5:5d:24:d0:be:9f:ec:d8:41:8d:3f:68:f1:3d:65:2c:46:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:51:29 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=b019bfcd54714c0c0e574b20c4a195e026df766f99a67e14b519d0e3fcec7d87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:d3:39:f6:83:35:f1:2c:78:c2:34:1c:ec:
80:7b:16:32:16:eb:d5:75:15:d9:79:e0:50:0e:6c:
8a:07:c1:42:01:67:15:fc:ad:4a:2c:3e:32:f9:f8:
8a:24:ab:4a:e9:d6:90:db:91:c5:8a:b8:87:40:0f:
de:89:23:8c:e6:b4:5b:6d:08:b2:42:28:8d:3a:1b:
9f:94:e0:f5:e0:69:c6:15:5e:f8:b9:32:86:ed:17:
10:22:b6:6d:55:da:08:20:9a:65:49:74:2f:55:b3:
8e:fc:cd:85:95:ee:34:db:92:13:da:56:21:4f:51:
aa:e4:02:eb:7b:74:0f:c5:8b:73:48:06:78:6b:90:
81:27:51:38:1b:7f:e1:a6:7a:66:d6:b8:fd:3d:4c:
a8:91:f5:f3:48:75:1e:06:cb:ff:d6:36:cb:be:98:
ed:a3:f3:00:f5:fd:12:23:af:4f:d8:18:76:ae:f3:
32:38:03:2a:32:59:eb:6e:eb:38:74:00:99:40:45:
7c:fe:99:2d:36:d9:6d:a2:c0:63:71:ea:aa:66:96:
ce:9b:22:d1:16:35:85:38:54:f4:fa:df:6d:bf:eb:
ba:f6:33:ca:8c:f4:c1:1b:92:8e:ce:7b:12:7c:82:
3c:37:a3:e1:3a:88:a7:78:81:56:e1:30:87:7d:ef:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:2E:95:E9:A9:2F:AC:94:FD:A5:02:AF:F2:96:6E:5B:C1:85:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:b000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:6c:36:bd:37:6f:2d:31:03:60:8b:b8:b2:30:3f:4d:9a:dd:
d1:af:80:b8:c2:5e:75:63:de:f8:e2:c8:06:39:44:6c:2a:32:
28:8a:d1:a9:3b:39:a9:dd:b7:09:1c:8d:59:38:20:3e:c2:cd:
8d:1b:ba:fa:08:7b:04:d5:07:91:7f:e3:17:06:07:2a:dc:25:
1f:2e:a1:a7:bf:48:eb:04:50:3a:bc:82:0b:93:bd:b2:9c:0b:
e3:4e:14:f9:86:4c:92:f1:a7:64:1b:55:0a:a7:fd:e0:3c:93:
ab:18:e2:e8:3c:e4:76:38:01:db:8d:b9:60:43:6c:b6:5d:85:
a0:bf:db:8b:12:d7:e1:0e:4b:48:13:e4:b1:13:7a:7b:2b:21:
1a:eb:db:bf:cf:47:3a:9d:64:6c:fb:be:25:b4:96:21:fa:de:
89:ee:42:cd:8b:14:14:a2:44:1a:18:cd:43:dc:28:d5:cd:b0:
11:74:fa:74:24:c7:b2:0f:83:67:fc:9c:83:a8:46:57:f0:07:
e0:68:13:48:13:5c:26:f6:48:a4:d1:a1:95:5d:11:73:e2:b9:
3d:42:08:d6:85:42:95:74:cf:c0:14:5a:99:65:2d:4e:63:30:
d7:bf:40:5f:cd:a6:3f:1e:af:ae:99:22:a0:53:ed:48:1e:88:
d9:b1:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:45 2026 by rpki-client