Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
File: efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa (raw, json)
Hash identifier: IVNErct0xK+kCoT5kkKqP5db/pnLk33vOVKjyHf2s4Y=
Subject key identifier: 47:DA:73:AB:E9:2E:05:10:31:4A:6C:FB:74:93:86:50:37:1B:0E:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68F397ED2936A7EF69E204A3E26FAABA30030672
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
Signing time: Tue 24 Feb 2026 00:40:11 +0000
ROA not before: Tue 24 Feb 2026 00:40:11 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f3:97:ed:29:36:a7:ef:69:e2:04:a3:e2:6f:aa:ba:30:03:06:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 00:40:11 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=1b274bf5ee520f2d96f3c5e077c24fda4ee09f9ffdcdf67ac07b3d3673a9064f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:29:ed:c8:36:ac:7a:44:e0:85:3d:d3:74:
12:ae:43:5b:03:84:e4:53:68:5a:1b:92:6b:a5:c4:
eb:e9:98:b1:a1:6b:8a:64:2e:7d:f1:b6:08:e2:c8:
89:57:82:bd:f7:ce:c2:a9:aa:2e:25:38:9e:1c:ed:
68:cd:88:3a:76:28:c2:bb:66:0e:0f:e6:d2:61:73:
f2:26:56:91:f1:a1:1a:9f:91:cf:4c:d8:2d:7f:7f:
a3:51:9c:93:63:93:2f:0b:a2:aa:4d:7e:7d:1b:d8:
dc:a6:1a:89:a8:9d:56:54:59:23:99:dc:41:0e:a3:
b9:f9:10:c5:da:f4:d2:56:91:42:b2:c7:f5:e8:cb:
89:24:13:9c:64:19:01:8e:51:65:9a:ba:79:c9:c6:
65:0b:9d:be:a3:b3:ac:f7:ac:e6:dd:d2:aa:5c:88:
e7:82:08:23:b6:76:58:b3:fe:cc:fb:bd:1c:e5:ee:
af:71:62:c8:e2:70:1a:ab:c8:22:76:65:f5:d0:39:
85:f6:9f:dc:55:6d:10:68:46:20:90:93:00:21:3d:
9d:5d:39:c4:68:e8:19:d7:22:ce:98:f9:69:6e:0c:
c8:f0:fd:4e:f1:51:8f:f0:36:08:ab:32:d2:e3:3d:
64:aa:55:23:e8:04:93:6c:d1:62:35:6c:cc:a0:dd:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:73:AB:E9:2E:05:10:31:4A:6C:FB:74:93:86:50:37:1B:0E:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:2000::/48
Signature Algorithm: sha256WithRSAEncryption
aa:2b:8d:4c:f4:1c:f1:1c:c0:63:64:0c:8f:58:d3:c3:1d:31:
3c:56:b9:6a:3b:e6:f3:a3:c0:c0:84:6f:f0:ca:10:1e:29:f8:
2a:82:ed:96:d1:12:14:3a:a7:c3:68:ad:d6:39:8d:79:0c:ef:
4f:f3:75:6a:f1:aa:26:b4:74:8b:1f:6b:4c:47:43:af:6c:65:
d2:f5:7e:f0:4f:3e:7e:15:b1:8d:32:62:ca:13:fb:98:8d:3b:
97:04:c7:90:4b:09:79:d4:74:ec:0c:c6:0a:8a:57:36:28:e3:
cd:d1:3f:77:12:dc:cd:0c:7c:46:e5:6f:63:75:b7:04:fe:78:
05:5d:62:60:c6:56:26:18:dd:2b:db:17:db:41:c2:e1:65:d2:
ae:a6:fa:d2:3c:56:fa:97:05:44:c1:d0:d1:46:db:a4:81:c5:
aa:61:d8:3c:e6:1d:50:b5:8c:e3:8d:d3:95:33:1e:92:88:97:
5f:a5:b2:07:6c:f4:cd:62:79:11:63:f7:01:fa:20:8c:05:11:
63:62:23:8f:7a:ac:f1:c2:33:4e:61:fc:2e:09:af:aa:69:0a:
b2:7f:a0:d1:fb:fd:67:57:4c:ff:47:b0:5c:fc:84:b2:8f:63:
29:e5:45:b7:ad:65:14:7d:ba:b7:20:9a:c5:48:5f:f5:07:cb:
61:b1:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:57 2026 by rpki-client