Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
File: d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa (raw, json)
Hash identifier: 44NzLPZJB/HM9rmzGnIT7WIrBRgrnGP251psUm+ImhY=
Subject key identifier: 96:7E:3D:7D:B2:B7:0E:E1:87:1C:75:C1:F0:BC:9C:10:C5:54:A0:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E77D2B96FD08529B83294D27A723F74E6C2EA36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
Signing time: Sat 28 Feb 2026 05:51:01 +0000
ROA not before: Sat 28 Feb 2026 05:51:01 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d024::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:77:d2:b9:6f:d0:85:29:b8:32:94:d2:7a:72:3f:74:e6:c2:ea:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:51:01 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=99e0ef506e772c92ec76059b04d30847706957bf61dfee12c040f98d3d75ba14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:b9:62:cc:1e:e1:45:a7:af:85:ff:78:a8:
d7:35:3f:3d:3f:1e:ab:dc:de:17:0f:c7:6f:99:29:
e2:81:f4:72:d6:f2:58:46:a5:e9:34:ae:13:4e:e6:
c3:26:f1:33:dc:9f:ea:ae:29:d4:e3:ea:da:38:70:
6b:f2:11:0e:4b:71:7c:e9:24:6e:07:8c:1f:2f:79:
2f:20:54:e0:cb:aa:99:b1:e7:9c:01:73:c3:1c:df:
b2:88:b2:12:74:58:2f:f1:7b:cc:70:cb:5c:41:40:
e0:81:15:13:ae:45:4d:e1:6a:eb:e7:57:50:77:6e:
4f:e5:72:95:e8:cf:34:f1:28:7b:84:ac:79:e1:13:
ca:7d:08:ba:89:e6:24:7c:e3:62:56:0e:19:8d:5e:
de:eb:ff:b2:3c:6e:d3:72:b3:1d:16:3b:52:5d:42:
0c:c4:d5:8d:65:61:11:9a:0f:d9:3c:5d:41:af:59:
1f:30:e1:3b:75:82:15:70:96:7f:87:31:91:54:0d:
77:cc:24:82:47:9b:78:94:8c:4f:ea:02:9e:90:3f:
89:21:4a:12:c1:6f:c2:a8:a2:1a:e1:67:bd:14:90:
56:04:84:39:ae:20:9c:09:86:cf:37:50:a3:c1:b7:
b4:2b:eb:33:83:2f:7c:29:39:1b:1e:93:7f:9e:de:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:3D:7D:B2:B7:0E:E1:87:1C:75:C1:F0:BC:9C:10:C5:54:A0:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d024::/36
Signature Algorithm: sha256WithRSAEncryption
95:c0:31:9f:de:02:ed:67:23:51:63:07:1f:b8:43:be:d5:bf:
e5:68:d4:c8:23:a5:cc:79:c7:32:c9:4f:c7:a8:2e:bd:64:79:
5b:4c:84:75:ea:1e:41:82:9a:82:08:97:ab:f7:f7:73:c5:3f:
60:cc:3e:76:3f:e3:2b:d5:d6:b4:3f:3f:44:32:06:a4:11:ed:
f4:69:75:e0:63:de:2e:7e:45:91:2c:b5:58:16:81:14:da:3d:
20:95:c9:b4:ee:e3:db:b2:99:11:df:cb:d0:95:ff:9e:06:64:
e5:20:65:bd:5e:38:89:78:65:7b:b1:91:7b:8f:05:2a:d0:ad:
eb:8c:25:62:d8:10:db:b0:e4:2f:a6:8f:32:24:d4:54:3c:a2:
61:bd:01:84:c4:8e:e5:84:72:9d:9a:26:b0:ef:42:66:19:b1:
7a:c4:de:09:82:50:7b:22:e8:1c:f7:92:17:68:28:4d:bb:2d:
83:95:b7:b7:95:4d:88:31:fc:4e:c7:58:cc:93:f7:47:b1:e6:
06:94:46:d0:14:9f:ba:d2:02:89:f8:f2:3b:49:6b:45:c4:f1:
3f:51:47:6b:e7:c0:21:c2:ec:54:5c:6f:b6:1a:78:b1:46:bb:
66:9d:66:08:38:b5:bc:16:9e:93:8d:4a:2a:91:ba:f6:dc:23:
95:5d:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:23 2026 by rpki-client