Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File: d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier: MwHvQcjc10Mes5yunMDGtyE262LGdEuQ0Ewb1aiOIfw=
Subject key identifier: 59:FB:77:B0:47:23:E7:CC:15:28:20:81:4A:8F:72:46:B8:D3:AF:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 418E37BDE58665423394FF78AF25EA483F41FB47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time: Sat 28 Feb 2026 06:10:06 +0000
ROA not before: Sat 28 Feb 2026 06:10:06 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8e:37:bd:e5:86:65:42:33:94:ff:78:af:25:ea:48:3f:41:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:10:06 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=891f63bdc017bc8f5e65dc7bdcf01ac3f01556a63503f9e723ebe337ce360c58, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:b4:52:da:00:55:ea:d5:5f:59:f2:39:5d:
64:36:e1:8d:e8:d3:17:66:7a:6c:3b:60:d8:eb:c7:
4c:9e:e7:99:b2:40:a1:fc:ac:59:24:8a:ce:56:ef:
9a:eb:37:c0:08:6a:15:e2:df:bd:46:38:75:0f:90:
c5:fd:e7:a4:c3:2e:da:7d:41:8d:ec:ab:32:9d:6e:
fa:47:3e:a0:74:52:73:36:a6:96:1e:14:52:c3:4b:
65:c9:f2:d2:71:40:5b:12:24:62:1e:1c:28:af:b7:
bd:22:f8:f2:6f:81:78:b4:52:6a:96:73:4a:40:c7:
47:e6:14:a9:2d:f7:f6:ce:16:72:01:13:8f:b8:95:
e3:45:2f:ac:45:e7:a2:ff:9a:2d:60:36:47:46:a8:
3b:0a:68:93:9f:64:5a:be:ea:40:59:ad:01:ef:eb:
29:81:28:93:c4:a5:43:39:45:4e:fa:cd:b2:eb:5a:
92:f1:57:23:a3:9f:94:80:3e:e7:15:bf:b1:d4:97:
2e:a2:c9:af:52:8c:eb:df:5d:12:59:10:84:a9:24:
52:1e:e9:71:c5:6b:ff:42:c9:e5:01:13:c6:1d:4f:
5d:90:53:4e:68:1e:6b:92:45:f9:25:7f:9c:29:b6:
f5:52:48:e4:79:68:07:61:00:28:d8:62:65:d5:dc:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FB:77:B0:47:23:E7:CC:15:28:20:81:4A:8F:72:46:B8:D3:AF:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c080::/48
Signature Algorithm: sha256WithRSAEncryption
a4:30:16:3c:ed:cb:34:b2:11:84:f5:ee:ba:7f:cd:55:1d:a5:
97:cd:72:7a:50:16:14:8c:2f:8a:7d:1f:ba:ad:c0:01:10:f0:
f1:88:b4:c6:10:62:74:51:fe:9b:90:8b:5a:c3:8e:9d:9c:78:
2f:ff:4f:6d:1f:19:de:44:21:2b:18:0f:e9:6c:17:3d:53:b4:
89:08:d6:86:4c:6b:33:a0:83:9b:6b:75:80:65:02:9f:a0:2e:
13:de:56:04:6a:f9:ee:03:9c:f7:b7:aa:68:e4:2c:7d:4c:3c:
02:15:ea:b0:4e:ba:c6:74:f3:68:4e:4a:62:a5:81:d4:ac:ed:
e9:8e:17:58:99:61:ea:35:d8:42:43:b1:91:67:37:00:50:37:
13:dc:13:27:5f:5f:43:e4:0d:63:12:b1:44:9f:85:4c:41:73:
da:33:71:53:d4:27:10:ed:80:1c:f6:50:73:b8:a4:e8:86:33:
f7:73:2f:86:bb:25:d8:46:81:31:0e:0b:af:b6:8a:90:a0:ae:
6c:94:e0:bc:bc:8f:b0:e0:b3:87:15:6a:fe:91:27:81:c5:82:
ec:6c:22:dc:42:6a:9c:52:6c:38:2b:dd:df:61:65:31:c5:8d:
ad:17:a0:b6:44:22:85:5e:c4:31:c5:40:86:6b:b9:aa:74:17:
15:ec:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:11 2026 by rpki-client