Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
File: d2fe4803-5028-4c31-b369-a86c9539bfa2.roa (raw, json)
Hash identifier: mpZmHr2OYYnaLi+62SGdJBadEywR5lQtsgqkHj9qVAg=
Subject key identifier: 3D:01:45:02:72:08:5E:5D:6B:3D:35:28:5F:1A:6A:D1:B9:BC:8E:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E4B5DFF5D1A258A5186C110BE729D08AEC7CC00
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
Signing time: Tue 24 Feb 2026 00:40:07 +0000
ROA not before: Tue 24 Feb 2026 00:40:07 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4b:5d:ff:5d:1a:25:8a:51:86:c1:10:be:72:9d:08:ae:c7:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 00:40:07 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=40032ed4c1ac13ca959605614abab0e16f7a1520174cbe0fb7e7bc753ea8d817, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ee:3c:1b:d8:a5:53:5b:a3:e4:c8:57:29:19:
37:05:8b:82:68:33:28:80:26:17:f7:eb:49:3d:8f:
80:6c:fd:05:7d:71:42:3f:50:4e:b6:b9:5c:40:8d:
b9:07:2c:59:2b:57:8d:6f:5f:58:92:cd:65:5a:77:
77:16:3b:c5:fb:6d:a0:c6:35:5f:04:a5:71:ea:e0:
b8:04:36:22:ce:d0:78:a4:92:68:71:0f:8f:91:1f:
9b:8d:db:c7:20:a1:f0:49:ff:33:8b:a1:ba:6f:d9:
06:4b:1f:9b:86:ab:3d:55:eb:ef:cd:66:af:c5:fe:
10:e4:98:12:ad:77:db:6a:d3:be:31:e2:42:df:da:
44:a5:b7:6d:21:64:e2:46:40:12:3f:6e:25:99:02:
31:f1:cf:28:04:2e:82:67:65:f6:a1:e1:f1:14:6e:
b7:12:2b:ac:db:0a:cd:28:6e:d2:64:6c:25:bf:58:
84:83:35:3e:3e:2b:3c:4d:e0:8a:80:4a:c6:f1:b5:
37:46:ab:c8:b7:c6:ed:33:9c:f4:3d:4b:36:2b:35:
c4:0f:f7:80:5a:fd:e8:28:78:ef:38:08:7f:26:62:
df:67:89:12:a5:38:18:bc:84:99:5d:e4:66:b0:4f:
91:e2:c6:51:15:ac:35:c6:9d:2a:83:b2:ef:3c:02:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:45:02:72:08:5E:5D:6B:3D:35:28:5F:1A:6A:D1:B9:BC:8E:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:8000::/48
Signature Algorithm: sha256WithRSAEncryption
24:ef:76:ea:6c:2d:83:dd:ab:3a:06:25:04:b8:a8:1b:1e:5a:
1a:85:3b:e2:cf:b5:4c:4f:48:38:be:c6:1d:98:f8:66:0e:58:
4a:8a:e3:50:34:f7:4b:d8:2c:82:5e:7f:59:52:43:28:33:5e:
b4:a5:fe:0d:c4:22:0e:8d:bb:4b:b2:5f:b3:3a:aa:75:bd:5b:
93:bf:18:8f:41:93:c9:3a:3b:30:97:5b:cf:e0:e7:30:f6:1f:
b3:23:cc:08:68:ab:73:c6:f6:a2:48:b4:5f:a2:b7:f9:51:2a:
8e:88:a2:ea:1b:1d:fe:1f:f0:d6:87:10:2e:6f:33:11:51:eb:
39:9e:1c:67:44:48:53:83:c3:39:6b:ba:f1:66:17:3d:ff:20:
ed:95:86:a2:9b:f7:8b:92:09:24:ca:8f:b2:1c:b8:bd:e3:19:
99:89:f0:d1:e8:9c:fb:47:f8:47:96:2c:41:20:7a:d2:9b:12:
a2:a9:15:c0:3d:5c:1b:46:2f:3a:90:00:36:ef:32:6f:51:ed:
01:07:62:b7:92:66:f5:a5:20:a9:96:22:b1:d8:cb:0d:bb:f5:
21:aa:79:fd:11:f5:5f:ff:a1:b2:74:c5:21:a6:73:f1:82:23:
b5:4b:af:bd:d5:c2:79:34:cb:ba:ca:61:38:88:4a:4c:35:af:
b2:15:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:04 2026 by rpki-client