Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
File: fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa (raw, json)
Hash identifier: 8CHX/63GNeOdG459QwcOd+XrV5meI3L44JOpRhEIn0A=
Subject key identifier: 7A:5B:8F:E6:9C:2D:E4:54:00:14:11:42:BD:19:8E:42:28:3B:46:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25AA9EE925E9AD8CEC1BF7704551339172562861
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
Signing time: Fri 13 Feb 2026 15:20:48 +0000
ROA not before: Fri 13 Feb 2026 15:20:48 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:aa:9e:e9:25:e9:ad:8c:ec:1b:f7:70:45:51:33:91:72:56:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:20:48 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=54f8bec42d91041b3f6bfca0dd6fd13829223f973d5e6f539d177d1c9911d9ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:f3:d3:95:e5:08:bc:ee:96:79:c8:71:ba:
2a:b3:9c:ec:81:31:c2:6a:84:55:21:1b:8b:37:11:
eb:b3:ef:87:7b:d4:e7:e4:d6:5d:ec:48:e6:25:40:
cb:66:10:1c:d6:ed:ed:48:3f:62:6c:be:59:04:29:
09:1e:7d:1f:8e:4c:ac:2c:76:db:e2:44:0a:4f:25:
ea:28:d6:87:43:2f:ce:c0:e0:89:a3:1f:ea:9d:33:
dc:46:96:9a:b3:56:5e:45:9c:c5:90:6f:2b:18:c2:
d0:ba:e7:62:74:a8:f2:1d:10:fc:d2:e9:75:6f:bf:
31:a6:f8:1c:d2:c3:0b:85:2b:d6:c0:2f:e6:db:4a:
9c:8d:e4:2c:33:31:7f:23:4a:8e:76:31:e4:42:65:
22:27:d2:64:74:73:f7:0d:ef:96:58:5e:3a:89:fc:
65:f5:8e:f1:07:44:e7:59:d1:16:1e:39:88:e5:da:
4b:56:45:9f:fe:f3:dc:5e:74:41:2f:db:81:8d:3e:
d8:b4:68:6b:26:32:c2:85:9c:be:76:fa:45:d4:07:
99:01:2c:c2:14:0c:5b:60:f9:90:b2:e4:47:64:cd:
0a:86:e3:df:1f:d7:cf:a4:d8:9c:3f:25:af:7a:f5:
6a:1b:2d:b5:37:91:50:d8:64:d9:e8:ca:0c:19:90:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:8F:E6:9C:2D:E4:54:00:14:11:42:BD:19:8E:42:28:3B:46:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e040::/46
Signature Algorithm: sha256WithRSAEncryption
76:e4:de:05:5c:5b:e3:1d:c6:43:b5:86:32:37:5d:e1:f6:8d:
83:01:b2:d0:a9:3b:11:62:c8:7e:83:62:e1:66:69:a7:c2:b2:
c3:c1:a4:96:c4:2a:0a:e7:d8:fd:08:c8:b2:bf:c2:0f:29:e6:
0b:4d:85:b2:fb:35:9c:d2:ce:bb:cb:3a:3f:b7:17:a7:0b:62:
00:f7:4b:b5:e5:e6:45:1e:f4:50:09:0f:b6:74:0e:95:87:6b:
31:bd:fd:d5:43:11:65:8b:a8:38:05:2f:66:98:1e:c1:a1:ff:
75:33:34:2d:86:26:36:5f:46:10:10:55:73:d7:9e:e7:cb:5f:
b3:21:01:c6:fc:7c:7f:e4:9d:b6:3e:8b:6e:e3:a4:ee:3f:d8:
71:89:be:0e:15:23:cc:c9:84:70:41:4a:5d:53:29:06:a2:10:
25:42:43:d1:66:9c:e6:f5:e0:70:28:7a:1a:f6:41:c1:1d:ff:
35:1a:2a:4e:94:fa:2d:61:95:58:07:77:1f:e9:35:ab:7b:db:
53:5f:27:dd:67:11:33:7e:a6:0c:5c:2e:a9:44:7d:93:f5:53:
9a:cb:9e:3b:5b:c9:ad:e2:30:2e:e9:35:b1:44:9f:85:01:6b:
bf:a1:df:e6:28:7a:91:23:7a:cb:5f:be:55:87:51:11:ff:0d:
5b:92:f0:d9
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUJaqe6SXprYzsG/dwRVEzkXJWKGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMTMxNTIwNDhaFw0yNjA1MTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDU0ZjhiZWM0MmQ5MTA0MWIzZjZiZmNhMGRkNmZkMTM4MjkyMjNmOTczZDVl
NmY1MzlkMTc3ZDFjOTkxMWQ5YWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIrS89OV5Qi87pZ5yHG6KrOc7IExwmqEVSEbizcR67Pvh3vU5+TWXexI5iVA
y2YQHNbt7Ug/Ymy+WQQpCR59H45MrCx22+JECk8l6ijWh0MvzsDgiaMf6p0z3EaW
mrNWXkWcxZBvKxjC0LrnYnSo8h0Q/NLpdW+/Mab4HNLDC4Ur1sAv5ttKnI3kLDMx
fyNKjnYx5EJlIifSZHRz9w3vllheOon8ZfWO8QdE51nRFh45iOXaS1ZFn/7z3F50
QS/bgY0+2LRoayYywoWcvnb6RdQHmQEswhQMW2D5kLLkR2TNCobj3x/Xz6TYnD8l
r3r1ahsttTeRUNhk2ejKDBmQLhsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR6W4/m
nC3kVAAUEUK9GY5CKDtGHTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmU2ZmNiOWEtOGNhNy00NjgxLTgyZTYtNDBlYTVmODAxOTgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPg
QDANBgkqhkiG9w0BAQsFAAOCAQEAduTeBVxb4x3GQ7WGMjdd4faNgwGy0Kk7EWLI
foNi4WZpp8Kyw8GklsQqCufY/QjIsr/CDynmC02Fsvs1nNLOu8s6P7cXpwtiAPdL
teXmRR70UAkPtnQOlYdrMb391UMRZYuoOAUvZpgewaH/dTM0LYYmNl9GEBBVc9ee
58tfsyEBxvx8f+Sdtj6LbuOk7j/YcYm+DhUjzMmEcEFKXVMpBqIQJUJD0Wac5vXg
cCh6GvZBwR3/NRoqTpT6LWGVWAd3H+k1q3vbU18n3WcRM36mDFwuqUR9k/VTmsue
O1vJreIwLuk1sUSfhQFrv6Hf5ih6kSN6y1++VYdREf8NW5Lw2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:27 2026 by rpki-client