Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
File: fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa (raw, json)
Hash identifier: 3Tgr20LSaUWdc/QqAiGHaUSiwx9Bsuy1zPs2ypxJn7E=
Subject key identifier: EC:81:10:56:52:F7:C7:D7:53:3C:F0:92:75:60:F2:7E:9D:55:08:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A1E74C85A2DA81376B7D9ED51924423C7B46871
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
Signing time: Sat 28 Feb 2026 05:20:07 +0000
ROA not before: Sat 28 Feb 2026 05:20:07 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1e:74:c8:5a:2d:a8:13:76:b7:d9:ed:51:92:44:23:c7:b4:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:07 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=cea38d552c76d093f1adda10cb35c502c140a5f04d4855e6094d08fa505712e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:2e:09:25:c6:16:7b:88:b8:75:2b:8c:ab:
c2:1b:12:77:71:1e:97:3c:45:06:f3:ea:81:3a:83:
e4:4a:01:d0:f7:36:ce:67:fe:19:2a:f0:69:50:b7:
3f:cc:b0:fd:e4:2e:38:12:c9:57:c8:1f:2c:87:d2:
07:c0:03:d3:32:c9:3c:96:41:2a:25:c9:f3:46:df:
b4:2b:12:08:0b:a2:ee:b0:f3:09:c1:c6:a8:bc:77:
c5:10:c7:40:7c:59:e2:79:d3:cc:1f:17:3a:51:79:
ab:43:72:ba:03:bc:4a:06:33:24:78:da:c7:a7:9a:
af:e0:ed:95:9b:0a:13:93:1a:77:87:70:5c:58:03:
59:7b:87:2c:b9:83:d1:d3:94:a2:53:5d:73:38:77:
e0:d7:c7:ec:00:7c:e9:4c:a4:27:26:31:87:fe:16:
a5:55:38:42:de:08:45:cb:bf:52:25:0e:05:cf:f2:
91:5b:57:3b:0d:11:57:39:50:76:36:2d:33:dc:35:
ec:84:18:ca:83:32:e1:5c:4f:b0:2a:d0:a8:b2:f8:
d1:15:29:83:96:d2:4a:c0:14:f0:2e:af:fb:29:ca:
3f:e6:c3:4d:54:0e:42:6e:38:4e:61:45:57:65:86:
82:5a:7b:96:ce:70:e9:87:37:e6:5b:b9:8a:71:99:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:81:10:56:52:F7:C7:D7:53:3C:F0:92:75:60:F2:7E:9D:55:08:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
49:5c:31:f5:24:8b:78:8b:3b:46:35:c4:03:6c:4a:5b:89:10:
a1:ec:c0:90:c0:2d:f4:2f:4c:f7:99:ad:fe:ec:c2:45:9f:12:
68:d4:54:c1:5b:f2:a1:f8:99:c2:a8:3a:87:e1:13:59:07:ac:
36:05:19:fa:ad:94:9b:de:c7:ef:fa:41:8d:60:ab:17:5b:9c:
92:5c:43:c8:20:01:7e:f0:cd:46:a1:62:04:66:44:28:87:d0:
53:e8:e8:a0:8a:a0:50:f2:31:fe:ca:ea:2f:c8:50:50:0f:e0:
7a:c3:a9:bd:f9:8e:7b:b0:25:8c:1b:e2:06:5c:d7:30:e7:e4:
50:01:cd:b2:a9:b7:2c:d8:a9:ca:f8:48:7c:4f:5f:a8:c7:40:
46:b2:d7:93:61:7a:2a:33:21:f4:29:3c:3f:71:22:4a:55:d9:
c5:0d:bf:4b:fc:62:ae:e2:95:29:77:93:2d:66:80:70:ca:15:
6e:01:28:0d:08:9a:91:88:ca:5c:7a:eb:80:47:32:c1:64:e6:
ec:46:91:a3:92:19:e8:30:97:de:d2:b0:af:7c:ec:57:97:7a:
1c:29:eb:9a:85:93:0a:57:3f:2f:0d:ff:8b:81:a4:83:07:d8:
a7:fe:f5:36:c9:10:a9:14:26:2a:ee:1c:db:71:3a:84:8b:68:
fa:27:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:44:59 2026 by rpki-client