Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
File: dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa (raw, json)
Hash identifier: JhBkDFNQfeU/U1foLAh3yxmerU+JB5XzRIPHPxf++74=
Subject key identifier: 1D:23:F2:66:3A:51:EA:F1:CF:E1:B0:34:CE:98:4B:82:E8:1C:45:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 691238A5B0095D92B1D08F3ED230373343B7AC9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
Signing time: Sat 28 Feb 2026 05:50:08 +0000
ROA not before: Sat 28 Feb 2026 05:50:08 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:12:38:a5:b0:09:5d:92:b1:d0:8f:3e:d2:30:37:33:43:b7:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:50:08 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=6e7841d925e19d65d1b8f15b5210c9367200ba18870e0e91fc011bdea7fc96ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:05:ab:05:f1:8f:7a:33:d4:6c:04:e9:c9:
cc:b1:88:db:7d:0c:5f:23:24:43:ae:3d:c8:f7:92:
bb:3b:67:ec:dc:ec:f8:46:44:fd:30:94:7d:68:69:
da:2f:95:27:ce:05:d8:a1:59:01:4c:81:02:df:41:
e1:7a:88:d9:7d:83:2d:e2:74:53:7e:7c:9c:12:47:
33:cd:1f:f1:3a:1f:b9:f5:c0:2f:cf:83:41:74:f3:
10:67:53:39:42:b5:fc:d2:ef:2d:b2:7f:cd:e8:2d:
4a:2a:a7:72:0d:a3:a2:a7:21:9c:19:aa:27:a0:07:
57:f5:d1:c0:86:59:33:66:e4:48:24:f0:76:28:20:
be:83:21:4d:bc:55:b9:0a:44:3f:1e:7e:38:b0:97:
f3:f6:7b:d8:73:0d:2b:8b:17:ab:ff:f9:d0:78:cc:
75:41:68:d7:24:e9:fa:bf:e4:d2:9e:3e:8d:54:04:
6a:a9:76:71:36:d4:47:57:73:94:92:eb:11:16:3c:
85:8e:71:04:87:a0:62:79:20:7f:14:53:64:ad:95:
f9:d5:70:18:8e:c7:c3:cf:27:a7:38:17:45:bf:f8:
20:34:a7:f3:36:11:63:b9:fc:bd:25:42:5f:36:e1:
5c:ff:7d:52:03:65:7b:c8:b1:aa:b9:c9:91:51:dd:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:F2:66:3A:51:EA:F1:CF:E1:B0:34:CE:98:4B:82:E8:1C:45:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:91:f4:be:75:ce:7e:d5:e4:93:a5:b0:6b:0e:b5:b9:ed:41:
cf:c2:ab:33:7b:98:80:4e:a0:a3:49:fd:53:60:6e:3d:04:9d:
78:56:5d:ff:1a:5f:53:cd:5f:f7:eb:78:09:57:a3:b4:94:f8:
5b:06:dd:52:05:2d:91:96:e5:3f:13:77:05:ec:92:8c:3d:a6:
1a:50:b5:d1:0c:14:b3:f0:3b:09:48:17:d4:9f:d2:4c:a8:5f:
72:6a:11:22:3b:20:50:5e:b5:e3:69:91:2a:2d:13:8e:21:35:
d6:1f:a0:1d:ff:b7:1c:35:9f:3a:dc:5b:89:e1:fc:0c:a3:9e:
d7:51:fe:0d:d6:f9:de:75:a3:fe:be:10:8f:e0:78:f4:5f:4b:
e0:be:e3:16:26:33:8f:3c:87:d3:2c:6e:01:e9:0f:c3:40:63:
5e:72:40:30:56:ca:06:a8:7d:93:a1:57:63:79:88:c8:17:7a:
3c:42:47:ea:e5:62:da:1d:3f:fc:16:7a:d6:10:40:18:bd:18:
e2:34:58:9d:8b:a4:9d:eb:6e:03:3d:c0:37:ed:71:bb:9d:e6:
c8:7e:ee:e0:9a:67:1e:73:be:71:9b:bc:7d:d1:07:14:7f:37:
7b:df:fb:17:53:e5:0c:a8:3e:0e:0d:16:e1:bb:e6:9d:b7:c3:
44:96:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:35:32 2026 by rpki-client