Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
File: ef1c587f-7016-4879-9f71-ad8ce780a8da.roa (raw, json)
Hash identifier: EoNznMc4zou/RkS6towqXKYu86FaHsPIouiUYQIZrjg=
Subject key identifier: 01:D9:BC:C2:92:17:77:1E:D2:E0:2F:51:2A:8F:76:8E:4F:25:1B:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C6A81B3F2C932D3F1E1EF89AD588C6E851893D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
Signing time: Fri 06 Feb 2026 00:40:08 +0000
ROA not before: Fri 06 Feb 2026 00:40:08 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6a:81:b3:f2:c9:32:d3:f1:e1:ef:89:ad:58:8c:6e:85:18:93:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:40:08 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=106f498c612271c80b23d39a0421816e21bf113830fb13d0b1c8d73d6dbf6f3a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:78:e0:03:bf:06:5f:3f:18:f7:73:11:ac:
c8:7f:b8:f2:38:2e:1b:95:0a:57:87:c5:29:81:52:
f1:77:5b:b8:89:15:bb:d2:61:38:98:fb:21:72:23:
44:95:a3:ac:30:28:a8:00:7e:f0:6a:a8:87:4a:92:
7e:13:1b:93:cd:ef:07:6f:ba:6f:bc:93:fe:a0:19:
e1:33:c6:29:3e:5e:b2:49:9c:47:41:ec:f9:32:45:
16:49:b6:63:c3:f5:ed:e9:d0:79:33:5c:07:79:91:
a9:0e:85:24:ac:af:86:61:a6:76:e4:21:d4:96:90:
d7:65:11:8b:21:82:58:48:82:0b:15:1d:dd:5f:99:
45:57:f2:11:6a:1e:8f:a0:72:6b:32:c9:5f:f3:0a:
38:db:5f:2a:16:4c:84:5b:eb:ea:db:c1:e8:c4:cc:
48:57:4c:80:cc:cc:9c:ce:c9:2a:01:40:55:86:19:
55:69:6b:bb:96:f5:4d:86:10:ba:ef:00:12:93:ad:
b6:d1:98:5d:ab:9f:81:aa:16:83:d5:05:53:5d:b1:
ac:fa:30:96:3c:12:45:12:ce:0c:43:c3:b6:a1:e3:
b8:bc:c0:d8:39:f7:37:59:d6:39:2f:4b:ca:ad:ad:
ef:6e:d2:b0:b5:79:d6:de:5c:2d:c8:01:0c:49:93:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:BC:C2:92:17:77:1E:D2:E0:2F:51:2A:8F:76:8E:4F:25:1B:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
38:a9:6c:5c:75:e5:47:9c:14:7a:61:f8:a9:bb:8c:5f:0e:45:
fa:c9:7a:4d:d6:b3:06:34:01:40:b0:b2:7c:4f:60:5f:5c:10:
b3:54:a6:56:54:e1:ca:76:c5:0e:8c:ff:f3:ed:f9:d9:d2:22:
57:53:d3:93:6e:97:e3:ac:69:6c:5c:ed:ac:da:aa:90:cb:69:
93:66:79:ea:60:8e:17:63:92:aa:26:28:43:6e:3f:83:ec:fd:
d1:b1:c0:f7:51:d5:20:a1:9e:99:f5:99:69:9a:e9:80:76:aa:
cf:e3:ae:d1:74:4f:4f:1a:9a:d5:34:8c:71:91:00:46:06:3c:
ef:2f:45:29:e0:14:9e:a1:c1:53:1a:f0:42:df:12:d5:6b:b3:
d2:f0:44:5f:69:98:8e:4b:09:48:02:08:b7:f0:aa:b9:98:84:
5a:7f:5f:8c:5d:43:54:2e:fc:54:ad:e3:70:5c:62:1a:ee:86:
a1:3a:f0:7b:af:99:f1:51:19:0c:c7:06:f3:22:90:8e:7b:58:
91:4d:1e:59:6c:67:7e:91:0b:74:39:1f:8b:70:d3:e2:cf:e5:
16:75:55:4d:e2:bb:84:6f:5e:ce:70:b5:05:93:28:83:a3:5f:
5e:dc:7a:5d:07:2c:cd:42:a1:8e:d8:65:09:8e:1b:9f:39:3a:
ac:90:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:49 2026 by rpki-client