Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
File: e9709897-68c6-44f9-98f1-1f292cf13bea.roa (raw, json)
Hash identifier: PG51qtlJfeoUQ0tEsheILQpFZpu1e7E7ThCXGGPXRFE=
Subject key identifier: FF:B9:BC:D6:41:27:D2:EF:4F:02:AC:43:6F:2C:81:7E:F7:38:87:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 500C16AD2651C389C665F3FBC88906DD10E01D83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
Signing time: Tue 17 Feb 2026 03:00:07 +0000
ROA not before: Tue 17 Feb 2026 03:00:07 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0c:16:ad:26:51:c3:89:c6:65:f3:fb:c8:89:06:dd:10:e0:1d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:00:07 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=136cd9790d7e7dd1d904adda55283dc9493eaa44e4ba808735881d54118f26e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:73:20:6d:cd:52:f0:8c:df:fb:17:5e:12:
63:88:19:fc:29:f9:ab:91:9c:31:99:aa:d2:26:21:
b7:b2:2f:c7:83:d2:b5:da:28:ce:c7:0c:08:26:06:
3d:dc:87:b5:9e:da:b4:0b:0d:7f:17:32:b3:91:6e:
c0:a7:a0:66:db:e1:24:ab:a8:50:e4:1b:a7:86:ce:
3a:b1:d5:bd:2e:49:c6:dd:ae:58:b8:d1:69:9c:10:
93:0a:a8:c5:90:59:70:34:db:1e:fa:07:f7:a1:90:
93:ed:55:28:0b:63:81:1f:ca:c8:f7:ee:20:63:d9:
fc:b8:a1:58:d5:0c:77:f5:82:a9:48:6a:e3:04:00:
9d:61:d7:71:d6:bb:bb:ad:12:cf:6d:36:2c:b4:73:
17:33:6f:83:4b:ca:0f:d6:a6:83:9e:88:54:7e:7a:
01:bc:1f:13:75:f3:9d:9e:04:67:32:22:61:93:53:
6f:3e:1e:15:c7:54:16:85:d9:25:89:3a:e3:3f:48:
b5:8f:70:16:ec:99:21:f3:2a:ce:9e:60:c3:1f:32:
5d:09:30:af:e3:4d:e8:fc:30:b9:17:2d:70:3e:03:
8a:6b:b9:6a:a5:67:90:b4:a8:54:9c:c2:54:a3:36:
77:37:19:7b:a0:30:2d:3e:27:b5:49:39:e3:0f:a7:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:BC:D6:41:27:D2:EF:4F:02:AC:43:6F:2C:81:7E:F7:38:87:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:54:0e:f7:96:1c:24:b8:8d:3f:14:1c:66:c2:ae:ed:ec:9f:
ae:cb:1a:be:97:2e:36:2f:73:b6:27:24:7e:f6:44:51:83:88:
97:03:c3:8e:f1:56:13:9c:1c:dc:c7:20:c1:a3:f0:e1:c0:a5:
d1:22:0c:a9:43:af:be:94:f9:6b:d7:6b:87:eb:84:67:ba:2e:
2a:d8:46:31:6c:13:85:79:8a:af:a4:ac:eb:ea:ab:e5:c7:05:
d7:96:df:05:6c:92:0f:25:e0:2a:df:2f:dc:c3:1f:23:0f:e1:
f2:83:f5:c9:c2:b5:b9:41:90:20:97:cf:98:6f:75:7c:5f:2d:
87:01:85:59:f2:d8:95:26:05:17:88:05:ac:57:c5:bf:2e:93:
c7:a8:2b:1a:8b:cb:4a:46:b9:2f:46:fa:29:6c:ce:e0:92:73:
bf:3c:fd:28:fd:24:91:36:b7:07:67:0a:85:eb:42:45:0d:c4:
7e:30:0a:e5:bd:9e:7e:e8:80:36:08:a8:25:f1:ad:7f:e3:2a:
8f:fe:dc:00:df:40:b0:6e:53:24:6e:a6:50:e8:45:90:17:0e:
ef:09:ac:7e:c0:c4:42:a2:66:1c:2d:58:97:c5:de:55:81:db:
f1:5d:35:d7:b9:a5:6f:c1:be:46:d8:5a:5b:e9:c5:7f:93:b3:
a0:e3:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:49 2026 by rpki-client