Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
File: e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa (raw, json)
Hash identifier: Jm6LQfW6wTzRTXn3Sl4mQk4DW2hbEqlGkWR1SO4d618=
Subject key identifier: DA:F8:C1:E6:07:A6:2A:AF:57:36:3B:5A:80:99:D2:A6:FB:FC:90:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01DBA3A313D1A75D39227F04DDB7E4DFB374A5EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
Signing time: Tue 17 Feb 2026 21:36:50 +0000
ROA not before: Tue 17 Feb 2026 21:36:50 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:db:a3:a3:13:d1:a7:5d:39:22:7f:04:dd:b7:e4:df:b3:74:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 21:36:50 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=7ff3fc8a203b9836abfa5d35ce9c1e0bda68b1f49ffc304931542f1cd57a5058, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:d6:02:a5:6d:60:ce:75:f6:10:93:39:7e:
55:83:a8:d8:e3:a3:4f:e3:86:e2:71:b5:29:92:c8:
c1:7f:8e:57:17:e4:ae:0b:8a:a3:60:b9:bf:64:5d:
97:39:52:23:23:98:03:8b:95:09:d1:27:cd:eb:b7:
af:71:72:5c:49:a1:ee:2f:a9:37:0a:27:08:e0:71:
b0:7a:9c:c7:44:36:1a:4d:f6:ac:23:a1:74:fb:84:
74:4e:ff:0d:c0:3c:9e:4b:c5:de:fd:0f:d7:f9:83:
e3:28:38:a0:11:d6:fc:b7:c3:2b:a4:1f:e9:49:02:
ba:32:27:b9:e9:79:09:4a:3b:22:b5:ae:2c:60:1b:
97:c5:b6:04:3b:8e:9f:04:fc:c0:23:30:8f:24:e8:
bf:72:19:73:d7:02:fc:02:db:85:8a:30:aa:74:a9:
ec:a5:f6:06:15:c8:d1:b9:da:1d:09:4f:d8:16:67:
bb:b8:f3:20:ba:e8:83:cf:f8:10:5c:e8:6a:24:59:
a9:7a:ea:25:ed:c1:92:59:0c:df:55:6e:29:21:c1:
6b:88:74:65:74:6f:4f:35:c8:6a:e6:84:fc:6a:b1:
f6:32:d9:7a:e8:4f:69:16:4e:52:7c:65:a8:6a:82:
45:26:11:47:4d:b1:8b:ab:0e:62:21:94:c0:41:41:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:C1:E6:07:A6:2A:AF:57:36:3B:5A:80:99:D2:A6:FB:FC:90:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:880::/48
Signature Algorithm: sha256WithRSAEncryption
17:df:40:08:25:c3:96:b2:a2:51:e9:f2:1d:11:7a:b0:7f:a8:
0a:70:d5:10:35:c0:b4:32:06:64:d3:24:fe:ab:ac:13:a5:1e:
41:31:0d:2d:57:c3:c4:5a:7d:b8:31:bc:4f:c2:18:39:bc:98:
bf:d5:97:31:ef:25:d0:6c:60:2e:96:97:e6:72:28:21:73:95:
5d:a4:2c:72:8b:4b:fa:72:a6:fe:4e:e1:76:46:24:4e:fc:5c:
b9:f6:c7:a3:96:cf:8a:b3:5a:c5:30:5d:9a:19:73:ce:3d:55:
0e:da:f0:1d:f7:8f:cd:ba:9b:26:75:56:55:1c:1f:c5:b3:a3:
2b:86:e6:f0:1d:a7:60:a8:10:75:a4:07:18:19:ca:f7:2e:d2:
6e:24:b8:2b:7a:79:9f:54:92:38:43:1c:80:2e:82:63:21:83:
03:cd:4e:0c:1e:73:ba:67:1e:0a:ca:61:a4:69:a2:b3:64:bd:
4b:0a:9a:93:09:59:a1:a4:95:0c:30:c9:65:95:70:cc:a3:63:
29:6a:b6:c5:ed:a5:a4:f7:89:51:5b:b9:a4:ca:81:b7:43:5c:
dd:8a:2d:d9:ac:8f:ef:dc:73:76:b3:fb:a8:6e:d6:22:8f:a5:
16:7b:87:6c:fd:a8:7b:86:ad:e3:da:bf:22:49:b0:e9:e9:9f:
61:f9:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:37:56 2026 by rpki-client