Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
File: f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json)
Hash identifier: whzqNCoyipkdsRx7ggMctnmYfV7rnLQPQkHee1+XHoc=
Subject key identifier: 07:57:AF:E2:0A:86:1A:C2:D8:08:90:44:D2:1B:7A:D3:83:82:6F:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41A0AE000D940604230F062F9AE00F960CD8E9CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
Signing time: Tue 24 Feb 2026 03:00:11 +0000
ROA not before: Tue 24 Feb 2026 03:00:11 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a0:ae:00:0d:94:06:04:23:0f:06:2f:9a:e0:0f:96:0c:d8:e9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 03:00:11 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=3eec611cdcdac47b299c0a8f0eddbc5136194c1b55746a729eeb66f1d9b0989b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:87:a6:e8:a5:89:38:22:04:8b:6e:4f:3a:
24:41:57:56:db:10:ca:cb:c0:44:7d:ac:7c:bc:f5:
9c:2a:27:e0:bd:f8:4d:d6:17:9a:93:93:a3:fd:da:
3f:cb:08:ad:d4:65:fb:f4:48:b6:a6:ab:46:e4:35:
b7:0f:dc:e1:e8:82:d4:f3:b1:20:5d:0a:db:3d:b3:
8d:85:d7:3d:47:db:e6:d1:f8:c0:d4:11:00:1f:0b:
a8:bf:c8:f8:7c:0d:b2:d2:95:ee:02:68:89:59:05:
0c:57:b6:cb:a9:52:21:55:cb:f6:6b:8e:08:5d:32:
b5:5a:c2:09:6f:c7:1b:13:f9:7b:04:9a:9a:07:9c:
87:ee:21:cc:58:ef:77:43:eb:fd:28:7c:23:bd:70:
f7:bd:73:dd:0f:a8:57:24:16:bc:3a:8e:f3:c9:e4:
99:31:1d:d0:0c:91:22:12:c2:4f:1a:c9:2c:ae:88:
5b:b9:1d:3d:cd:39:70:57:3a:8b:20:53:78:c2:5c:
88:c9:67:23:72:ba:1c:47:ec:ba:6f:0d:ee:28:63:
dc:d7:4f:2b:bb:06:1c:38:29:d8:7e:94:8f:de:f8:
4e:33:50:01:6a:ec:8a:55:55:49:23:77:6b:17:eb:
e4:50:f8:24:4d:bd:87:a9:ad:a1:ee:16:2e:f0:2b:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:AF:E2:0A:86:1A:C2:D8:08:90:44:D2:1B:7A:D3:83:82:6F:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
97:61:d8:06:1e:ef:d5:6b:9b:93:d6:d6:6f:d1:0a:5c:70:a8:
47:ab:21:73:26:6e:03:eb:f5:9d:7f:2b:8e:1e:1e:27:d4:6b:
29:13:6d:89:80:de:77:46:2e:11:b9:e1:71:fc:c9:85:88:9f:
aa:d9:8d:7f:5d:4a:03:5c:f4:b8:28:7b:a8:ff:d5:5e:f5:04:
ed:2d:e4:a9:66:3d:1f:4f:ee:17:dd:1d:1e:11:34:01:bd:d9:
f7:a6:50:af:92:e1:7b:c3:42:42:cb:61:da:54:57:a0:0e:4a:
e7:b8:ad:48:67:88:8a:25:43:80:3a:6d:85:50:26:5f:62:00:
22:23:e8:fc:e2:5d:48:41:2a:89:39:4c:3c:8f:ef:50:95:8b:
9b:83:e0:69:c9:3f:49:b7:48:e4:73:08:8c:be:cf:02:88:1e:
41:f1:84:6d:87:05:75:4a:51:02:b0:4f:71:33:39:bb:b2:3b:
45:65:ea:b8:57:80:3e:87:52:fa:8f:72:d6:49:25:62:cd:5e:
72:53:f1:db:ae:ce:1b:6a:c7:8c:b5:7f:9e:17:af:5e:bc:a8:
a4:c6:2a:5e:1c:2c:5c:8c:97:97:7f:e3:da:89:6a:7a:50:ab:
1e:43:06:bc:76:f3:ad:9d:a5:e0:39:9a:fe:47:02:87:b9:55:
70:12:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:58 2026 by rpki-client