Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
File: d7b89972-677a-470e-88ff-f95e3c9a9443.roa (raw, json)
Hash identifier: 3IdIieyxQ2GUru/zrL3fEZ9DnXs6T6nTyUJ3sKa7i+M=
Subject key identifier: B1:DA:3D:65:5A:31:E6:7A:0A:D6:FF:49:BC:93:94:27:C9:AF:54:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B0158EEEC319DB17401EA2F280FC39F166714AC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
Signing time: Sat 28 Feb 2026 05:51:08 +0000
ROA not before: Sat 28 Feb 2026 05:51:08 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:01:58:ee:ec:31:9d:b1:74:01:ea:2f:28:0f:c3:9f:16:67:14:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:51:08 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=fbe2b8715b196ba068660f67e594e65230483851e05f14699bb27e97a9a54c96, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:d2:38:f8:88:c2:dd:3a:13:17:6d:16:55:
52:d3:32:85:5d:d7:46:6b:08:60:30:8f:f3:ce:59:
14:a6:35:e7:e3:06:5a:f7:e9:1f:2f:91:e1:03:d9:
95:9c:bf:67:6e:b4:4d:a3:00:f0:b2:85:d8:f8:8a:
54:b9:ae:52:9b:7a:c2:fb:0c:d5:94:a3:ec:18:c7:
12:70:ab:bb:4d:45:18:6e:75:a4:2a:41:cd:a9:de:
34:ff:04:76:3d:5d:e9:01:fc:49:bc:1d:dd:24:ba:
b0:24:db:f6:ab:e3:1e:78:ab:35:3f:60:c2:5b:40:
0e:b5:6d:05:eb:5a:3b:fb:6e:c7:aa:3a:b4:fc:7b:
9c:c5:83:4a:20:d8:67:14:6f:10:cd:3b:4d:ca:e0:
e1:66:52:dd:7b:42:d2:40:cb:fd:b7:d6:e3:62:60:
4f:5d:41:5c:56:41:43:16:0a:db:7b:27:d8:80:77:
f1:39:c5:5c:34:a5:48:97:af:82:7b:ac:61:14:1b:
83:05:35:7e:d1:05:aa:4c:67:5a:2e:25:90:73:16:
59:f7:83:9f:0b:ce:67:5a:ce:17:6b:7d:8a:4a:e8:
fa:b8:93:9f:bb:cc:4e:8f:46:c4:94:b7:43:12:ad:
1f:78:03:5f:87:47:85:b0:01:ed:56:cb:d9:5c:49:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DA:3D:65:5A:31:E6:7A:0A:D6:FF:49:BC:93:94:27:C9:AF:54:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:800::/40
Signature Algorithm: sha256WithRSAEncryption
96:10:c2:36:26:95:e6:4f:39:48:72:37:03:ad:cd:f7:09:93:
db:d8:1f:df:89:63:a4:79:f0:a8:ce:89:87:97:b7:c9:77:2c:
06:76:a6:8f:14:7c:85:15:a6:ca:51:c3:49:91:ed:0c:b0:e2:
f9:9c:00:19:a9:7e:dc:6e:4f:84:5e:c4:16:b5:2a:f3:25:fc:
11:15:be:3f:95:e7:8f:94:5f:fd:0f:cd:bf:2e:70:be:75:a8:
ad:26:00:a9:ab:89:c3:05:b3:15:0a:0f:84:de:98:d6:d4:1b:
e8:04:5b:0c:f3:54:ee:43:25:03:e6:26:9a:4f:e9:36:10:5c:
52:81:86:21:64:c7:65:23:80:0c:4b:fa:17:e2:9c:0d:ce:7d:
d9:d5:c1:5d:52:52:45:e9:87:36:32:a5:25:37:bd:a2:1d:d6:
3b:bc:93:8b:da:1c:1b:c4:a5:d6:56:8a:bb:e8:e1:a0:1b:26:
05:ec:e4:9f:a1:dc:06:69:7e:e7:1d:d7:73:f3:23:1b:d9:7f:
7e:0e:e1:63:49:e7:a5:98:61:d5:78:0e:08:47:ec:ed:3e:8a:
99:87:ce:f0:39:4c:e4:54:01:05:cb:03:f4:04:a2:c7:a7:88:
b0:68:8f:43:e1:99:54:de:d2:95:ed:49:97:22:a6:18:bd:f2:
11:50:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:08:12 2026 by rpki-client