Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
File: d6265269-370a-4e3b-983b-9bec3a5c535a.roa (raw, json)
Hash identifier: stsiLddjkquMoyEmUhMws20DhgtPQAlHFxmgvbPU2Mc=
Subject key identifier: 0A:CB:3C:4D:C0:98:C2:E4:DC:E5:4D:E7:23:95:5D:4E:7B:F4:1D:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B5E93420FAEFD4AAEC012D8913CBA5338F7CA87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
Signing time: Fri 13 Feb 2026 15:20:30 +0000
ROA not before: Fri 13 Feb 2026 15:20:30 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5e:93:42:0f:ae:fd:4a:ae:c0:12:d8:91:3c:ba:53:38:f7:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:20:30 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=6ba288f24552b1426a3e63f5248f8bfd5758549476c3681e7aed95139c7b5b38, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:81:07:04:1b:9e:20:7e:1e:87:c5:e4:60:
95:54:1d:28:4c:d1:b0:5c:74:0e:33:37:89:00:f5:
b0:5c:a2:63:40:0f:7f:e4:00:d3:af:0e:94:be:11:
f7:1f:21:5d:f9:09:05:56:59:66:0f:9f:02:91:32:
27:89:17:7a:31:6f:ee:ee:f4:89:b5:35:52:e3:41:
dc:29:e0:ff:9a:02:a0:da:b7:69:e3:0d:87:2b:1c:
70:4f:f6:62:9a:40:1a:90:d1:51:50:de:66:fe:c4:
f3:b4:b7:95:ab:b9:5c:41:b0:3e:a2:d9:7e:0f:7d:
23:8a:d9:ad:ee:1b:c3:33:fd:b8:5d:76:6b:2f:15:
fc:78:85:02:26:df:59:ba:18:a1:33:f0:36:52:e8:
c3:7f:a1:ed:f4:b4:99:b6:c3:29:30:21:4c:dc:5a:
0a:ad:d3:be:e1:37:6a:77:04:58:0f:92:12:c5:0f:
b8:f7:69:71:c5:d9:69:a7:6c:87:87:c2:15:e3:ce:
c7:b2:81:1e:c0:2b:04:d5:ad:27:95:7a:55:5d:69:
18:b9:f7:4f:ca:46:f4:eb:8d:16:ed:3b:39:45:fb:
e9:92:45:a7:f0:52:31:36:b0:7c:86:72:60:8a:85:
3a:64:f4:2f:45:0f:92:e5:19:99:28:7f:db:af:23:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:3C:4D:C0:98:C2:E4:DC:E5:4D:E7:23:95:5D:4E:7B:F4:1D:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e000::/40
Signature Algorithm: sha256WithRSAEncryption
5e:7d:ef:59:bb:9f:c8:e3:04:49:78:8c:4c:e6:4f:b9:37:e8:
72:39:96:33:9d:18:27:60:4a:9d:f3:99:c5:97:bf:4b:a4:ea:
a9:f4:70:d0:c9:a8:ca:d7:5d:95:60:88:77:bf:e2:ce:86:79:
a8:7d:4e:d7:83:8f:a8:48:97:73:95:23:d2:d6:6f:a5:b1:a7:
12:d0:2b:8b:78:15:c6:fd:d7:c5:7e:47:f1:bb:4c:bb:c0:b5:
73:05:a9:63:0c:ee:2a:c5:04:ca:3a:72:7a:40:d2:1a:d8:a9:
b0:46:ad:78:ca:49:65:33:60:4c:ea:12:0a:63:d0:61:84:48:
5c:37:1c:38:0e:9c:db:89:0a:60:c4:6d:0d:e8:24:0f:df:16:
ef:da:94:68:f9:09:5f:0f:c8:9f:84:16:e9:4c:6e:cc:32:50:
36:8a:74:31:47:cc:93:ae:fa:c8:c0:a1:c6:e7:09:96:0d:6b:
f6:75:71:cb:2f:2a:d6:61:ca:3f:fe:4a:ff:75:0e:8e:25:77:
df:bf:c0:fc:cd:cf:f8:36:94:e6:2f:9b:e4:c1:63:1b:5c:03:
e9:66:99:1d:73:7f:48:02:eb:14:a3:0c:2f:0a:9c:8d:b3:95:
ed:f6:61:13:e6:10:14:df:19:45:87:a7:4b:79:3c:04:dd:d3:
8f:1c:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:12 2026 by rpki-client