Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: VaIS7ZlMWQSkPuD3UmpGJaIizkgS5ja/x+Z9ynG7X/8=
Subject key identifier: 99:DA:FD:5D:42:D3:E3:0C:11:00:D5:F4:07:6F:26:3E:87:87:E3:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EA7CC3C11582F02061F2A29E82EA2ADC9044294
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Sat 28 Feb 2026 05:20:23 +0000
ROA not before: Sat 28 Feb 2026 05:20:23 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a7:cc:3c:11:58:2f:02:06:1f:2a:29:e8:2e:a2:ad:c9:04:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:23 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=c5cd6a5b220a45e959f80764585420c27d6fa26a94afad1643dced44ff9f5133, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:17:1b:6c:20:01:a3:29:1a:14:d2:ae:35:
fd:e2:d2:8c:d0:25:ae:76:47:bc:4f:f1:9b:51:0a:
76:ba:cd:60:6a:9d:ec:50:da:27:62:95:21:91:d6:
8b:88:a3:10:23:77:d8:5b:3b:0d:57:36:ab:50:2e:
3e:47:c2:09:d6:0a:84:74:ae:31:3f:c1:80:84:8e:
08:b2:69:47:fa:88:66:c4:c1:9e:09:0e:69:e2:c3:
9b:ad:ed:7e:9d:5e:f2:e2:54:29:03:e7:c7:a3:11:
6d:7c:88:76:22:59:ef:fa:e4:76:d2:3e:34:45:ec:
4f:51:5d:f0:71:d5:8a:08:31:f5:34:b4:3c:b5:16:
e3:28:d9:7a:21:37:c4:88:90:ce:a6:07:b2:bf:49:
7d:6b:79:1e:66:6b:bf:48:06:b9:2a:67:ad:2a:89:
4d:1a:e9:03:e8:89:6f:bf:81:19:a8:5d:bf:58:4c:
50:8e:a6:6c:22:86:d0:41:e9:d3:01:8a:9d:3e:e9:
34:40:bc:17:82:6f:73:b3:81:d5:8c:fc:d2:bd:cc:
bf:91:bd:d4:ae:2d:0e:1e:28:e9:46:eb:42:0b:44:
dc:bf:8c:93:1d:a4:c9:ce:6f:bb:51:4b:2d:aa:85:
ff:6a:a9:d4:98:1a:07:cc:fd:03:22:d4:f1:1a:3a:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:FD:5D:42:D3:E3:0C:11:00:D5:F4:07:6F:26:3E:87:87:E3:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:f3:b8:07:e9:83:56:01:4a:9f:95:0c:b2:8b:72:98:91:a6:
b3:5e:20:26:40:38:6f:72:72:ef:a7:d0:3c:6b:13:07:07:af:
59:ab:86:cc:1d:c3:2a:e0:d6:27:49:26:85:6f:c2:2b:10:d2:
34:28:45:6f:02:8c:08:a0:52:45:5c:68:69:5f:84:3e:5f:b3:
a2:50:a2:b7:31:db:cb:26:cc:ec:65:ee:46:76:f0:84:3c:d3:
09:36:58:ba:93:74:29:b6:69:4c:e1:ee:94:a0:35:b3:d9:ca:
68:df:d5:71:88:78:73:ac:66:34:3d:45:ad:86:5b:ff:a5:60:
97:e0:39:70:88:7b:df:7c:2c:51:86:0c:43:65:03:5e:42:70:
ec:4f:8f:6a:74:25:a6:c3:a0:12:17:39:58:57:9f:c0:a9:dd:
92:27:56:63:e1:76:ae:26:9f:5a:07:84:65:c3:6e:a7:2f:01:
43:cf:6e:40:09:90:2f:99:c5:e2:99:ce:d0:8e:fe:51:46:a4:
59:09:3a:c9:ee:c6:97:b4:34:cf:b4:4c:10:1a:56:a3:69:67:
8d:30:4b:fd:a8:0c:a1:85:2a:21:7c:38:fd:7f:c6:16:58:9a:
31:cc:41:ea:86:84:61:50:88:ee:bd:a3:ee:f5:9d:bd:1b:ed:
da:8d:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:09 2026 by rpki-client