Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
File: c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa (raw, json)
Hash identifier: 5Cl9y5OF9GivUWtfx/UWbaCfuy9Jih/awtyhwS2IDLo=
Subject key identifier: 09:40:ED:51:28:A9:36:5D:60:73:12:ED:83:70:56:2A:95:46:42:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EACA9E4B147373FD5BC6B1E23963E03ADBAF421
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
Signing time: Tue 17 Feb 2026 03:10:22 +0000
ROA not before: Tue 17 Feb 2026 03:10:22 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ac:a9:e4:b1:47:37:3f:d5:bc:6b:1e:23:96:3e:03:ad:ba:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:10:22 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=46f1864527e67460b4b531348ee69e94562afb993774fc414afe3662f0ad6502, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:9f:df:27:1f:c7:43:bd:6e:94:9f:f4:e9:
8b:96:f2:41:4d:68:9c:d8:73:e2:08:5b:2a:9a:fa:
2a:4f:91:00:cd:c1:c7:d5:31:f8:33:ff:79:95:32:
bb:a6:a3:f7:91:3b:7f:33:ac:b2:36:de:77:17:13:
5e:76:63:2d:90:87:52:f5:33:66:36:f5:7f:f2:4c:
84:71:6d:7b:29:3f:84:a8:b7:3e:15:89:be:66:2a:
07:68:f6:86:3b:21:93:9c:e8:59:36:fc:0e:f7:f3:
34:28:a4:1a:79:37:35:52:3b:03:77:aa:56:ba:7f:
d5:0d:80:33:e0:6f:09:37:73:9c:42:ab:80:ae:c5:
a9:68:ab:59:04:cb:0d:20:37:7b:ab:28:b7:fa:9a:
df:65:c3:e9:ae:85:69:58:17:ac:31:d2:79:8b:1f:
a3:0f:72:64:45:dd:54:a0:9f:4b:2e:07:9c:09:a9:
f4:50:76:e4:19:9f:e1:c8:ea:3d:21:33:22:d7:67:
23:27:19:d9:55:d3:e0:35:fd:a8:6d:cc:ad:fb:88:
63:33:c7:d5:a1:37:f2:9f:7d:cc:54:e5:9b:2d:63:
3c:34:f3:e5:d1:f3:d0:82:f0:12:51:a3:56:16:bf:
a8:ed:68:64:b5:40:c1:b5:bb:ca:ea:ce:5b:ad:02:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:ED:51:28:A9:36:5D:60:73:12:ED:83:70:56:2A:95:46:42:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
41:35:b1:b0:05:ed:bb:4d:91:5f:5c:34:6d:08:a4:73:91:ff:
84:90:38:32:09:8b:eb:19:50:3e:08:6e:8b:bd:64:c1:ef:35:
a3:8c:be:62:c5:4c:80:20:87:92:c5:90:e3:ce:7e:6f:46:53:
b7:de:ad:63:ef:f0:5e:00:ee:00:cb:0f:84:e1:f6:1a:91:85:
18:1c:57:28:74:94:4e:38:a7:61:da:7d:1c:6d:c6:43:ce:bc:
c5:a8:82:53:60:7e:fe:f6:7d:f3:50:55:92:bd:dd:84:2a:ae:
80:bc:10:fa:59:15:c0:68:46:58:fe:8d:9a:12:6a:49:00:9d:
12:3f:01:69:c8:d1:d6:ee:9f:d1:5a:2a:49:99:30:d1:7e:f2:
e6:55:53:99:eb:28:56:99:88:c5:fd:07:39:15:13:e9:4d:17:
9c:d2:46:96:83:be:07:bf:0e:78:b8:3e:ae:20:fb:d3:88:c5:
50:ff:e3:81:6d:c6:35:4a:38:09:b8:d7:04:a8:1b:f8:a5:4f:
0d:64:a9:44:75:1d:76:f8:ca:68:cd:24:6d:4a:75:69:b8:72:
17:54:f2:36:c3:fc:8a:a4:fc:1c:af:12:93:2a:df:76:52:cb:
fb:f2:48:44:72:cc:b4:f2:3e:1c:c8:bb:88:ba:3b:a3:1f:05:
c1:85:a4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:53 2026 by rpki-client