Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
File: e348b574-c707-42a9-9b58-f3215857ae07.roa (raw, json)
Hash identifier: riMrXQTV854MF8qGrkM10dAWArN6fYswKctYcP4IakA=
Subject key identifier: 0E:24:48:B5:E0:FA:3F:A7:97:5C:F3:CA:B8:20:03:CA:82:1B:15:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 604E7FCC80D93827D0A5E14A4F423534C58D9963
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
Signing time: Sat 28 Feb 2026 05:31:27 +0000
ROA not before: Sat 28 Feb 2026 05:31:27 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4e:7f:cc:80:d9:38:27:d0:a5:e1:4a:4f:42:35:34:c5:8d:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:31:27 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=185481642040dc4027bb5ccb6e7a5c15e85672e515916f809dc6d65d1d4f7c33, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:0b:9c:11:18:09:7d:26:7a:9a:83:08:03:
6f:f3:46:69:39:29:0d:6c:85:77:bb:a8:86:98:b6:
fc:73:47:e3:70:fb:b2:fa:c9:e0:c2:05:16:e2:71:
b0:75:09:3a:26:e8:72:e5:8e:cd:02:44:48:80:54:
d9:fd:b8:f8:30:45:e6:8a:1d:ab:ef:c2:59:29:ef:
59:c7:f1:84:7b:51:7e:e2:c5:c6:76:2b:9c:9e:ae:
34:95:58:11:f9:51:aa:24:c9:ed:b8:be:80:25:a9:
16:77:90:5c:7a:7a:68:f8:66:ff:fd:34:47:79:3b:
86:1b:7d:72:91:3e:5e:f9:ec:b1:70:24:e3:57:7b:
90:85:ca:80:1c:bc:ec:65:f2:6e:80:0c:5a:68:2f:
41:38:8c:c9:d6:03:bf:30:34:14:d6:b3:60:a9:f2:
0b:3b:3f:ea:bd:c7:66:01:d1:94:fb:59:17:9e:12:
ae:6d:b4:4f:74:8e:16:75:6e:a7:f4:58:d3:81:6d:
f9:2e:f1:77:aa:f6:b1:27:b8:aa:d3:19:ba:6c:b3:
12:cb:f8:c6:1e:b9:b2:0b:39:70:1c:ad:0c:c2:f4:
ca:9f:6c:d3:55:70:f8:8f:32:a5:02:b1:a7:a3:30:
aa:b1:20:67:dc:70:5e:b1:f6:8a:5b:a3:ac:38:0e:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:24:48:B5:E0:FA:3F:A7:97:5C:F3:CA:B8:20:03:CA:82:1B:15:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a080::/48
Signature Algorithm: sha256WithRSAEncryption
5f:88:3d:f9:8c:62:99:74:a8:57:20:ec:b6:0a:a0:1d:bc:17:
16:f2:bb:45:c4:1e:c6:86:7c:df:ea:82:b9:da:cb:7e:e6:bc:
4b:85:49:2f:92:2f:d9:d9:35:99:67:eb:1a:00:e7:d7:c0:bc:
34:7d:98:ed:32:8f:9d:9c:23:82:5c:c6:34:a3:60:a1:22:fa:
aa:3a:f6:e9:ff:a7:cd:2a:3a:8b:55:71:b2:e3:18:23:c8:24:
50:b4:98:3c:6f:85:cf:8d:1e:5b:06:6b:a4:29:b4:b0:f9:f6:
c3:6c:4a:2f:47:b8:fc:ca:e4:2e:60:9b:a8:3c:14:ad:e6:a8:
a5:8c:67:55:d5:6f:41:a9:6c:cd:0b:d2:fb:4f:e8:92:a5:2d:
5d:c1:0c:87:85:be:5c:dc:30:0a:4c:7c:1d:ff:c5:41:bd:94:
d9:2c:e8:f8:0a:2d:d5:fe:8b:d4:e6:ac:31:9b:91:80:93:7d:
9c:c2:b8:5a:85:d5:14:49:ed:f9:dc:71:5d:3e:4f:06:06:31:
52:bc:be:5b:c4:e1:78:bc:50:6c:f5:d0:79:1b:43:b4:44:f2:
da:97:3e:15:a0:14:54:73:76:03:78:7a:39:90:c3:ee:a4:9c:
a2:24:cf:c3:db:6e:0d:a0:0c:9c:76:b3:f6:12:21:ec:9d:e9:
b9:c8:2a:e1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUYE5/zIDZOCfQpeFKT0I1NMWNmWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTMxMjdaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDE4NTQ4MTY0MjA0MGRjNDAyN2JiNWNjYjZlN2E1YzE1ZTg1NjcyZTUxNTkx
NmY4MDlkYzZkNjVkMWQ0ZjdjMzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKBYC5wRGAl9JnqagwgDb/NGaTkpDWyFd7uohpi2/HNH43D7svrJ4MIFFuJx
sHUJOibocuWOzQJESIBU2f24+DBF5oodq+/CWSnvWcfxhHtRfuLFxnYrnJ6uNJVY
EflRqiTJ7bi+gCWpFneQXHp6aPhm//00R3k7hht9cpE+XvnssXAk41d7kIXKgBy8
7GXyboAMWmgvQTiMydYDvzA0FNazYKnyCzs/6r3HZgHRlPtZF54Srm20T3SOFnVu
p/RY04Ft+S7xd6r2sSe4qtMZumyzEsv4xh65sgs5cBytDML0yp9s01Vw+I8ypQKx
p6MwqrEgZ9xwXrH2ilujrDgO/PsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQOJEi1
4Po/p5dc88q4IAPKghsVgTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTM0OGI1NzQtYzcwNy00MmE5LTliNTgtZjMyMTU4NTdhZTA3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKg
gDANBgkqhkiG9w0BAQsFAAOCAQEAX4g9+YximXSoVyDstgqgHbwXFvK7RcQexoZ8
3+qCudrLfua8S4VJL5Iv2dk1mWfrGgDn18C8NH2Y7TKPnZwjglzGNKNgoSL6qjr2
6f+nzSo6i1VxsuMYI8gkULSYPG+Fz40eWwZrpCm0sPn2w2xKL0e4/MrkLmCbqDwU
reaopYxnVdVvQalszQvS+0/okqUtXcEMh4W+XNwwCkx8Hf/FQb2U2Szo+Aot1f6L
1OasMZuRgJN9nMK4WoXVFEnt+dxxXT5PBgYxUry+W8TheLxQbPXQeRtDtETy2pc+
FaAUVHN2A3h6OZDD7qScoiTPw9tuDaAMnHaz9hIh7J3pucgq4Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:37 2026 by rpki-client