Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
File: 1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa (raw, json)
Hash identifier: 8WBnozJCTv5zNFwS529x3L5VjIQ7vVdrfalvafOwegI=
Subject key identifier: 2A:09:4C:08:78:68:54:FA:63:C4:3C:67:CB:DD:D1:5F:B5:EE:88:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2338F11E169B445DA73BCBCC76588131D9FA1C4F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
Signing time: Thu 12 Mar 2026 15:39:53 +0000
ROA not before: Thu 12 Mar 2026 15:39:53 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:38:f1:1e:16:9b:44:5d:a7:3b:cb:cc:76:58:81:31:d9:fa:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:39:53 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=82dd07cd76da067226082235e70d0420cae99c1363c91e8174f8ab08ff4f2fb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:24:c3:28:f8:ca:71:e3:d4:c7:18:9f:04:
4d:98:da:21:90:25:b7:05:98:fd:a4:40:17:65:b8:
d7:36:87:27:83:21:be:7a:c3:2e:a3:98:c0:07:d1:
3b:4f:9c:ed:81:04:74:db:85:17:02:88:6d:e7:6e:
84:98:91:e9:c3:86:fd:2a:0a:a4:76:88:81:26:d1:
73:cd:ca:61:4e:44:bf:d4:cf:ea:24:5e:15:0b:84:
58:c3:88:5e:ae:f0:2d:ff:a7:ff:cf:da:f9:c4:65:
6d:4d:a6:da:61:e3:c6:0e:4b:08:d9:85:24:4a:03:
0a:1a:85:33:f5:95:a8:28:6d:a0:a2:9f:72:26:4a:
15:0d:d5:af:7d:66:e5:4f:4b:f7:86:65:46:ba:2f:
c7:d8:89:3d:6c:c7:8b:77:35:79:82:a9:39:6f:60:
8a:f3:fb:41:dd:c1:16:69:6d:f3:09:57:35:2a:43:
b7:f2:b1:d8:ca:45:aa:ee:f1:f2:2b:a9:cc:e5:03:
05:ad:1c:6e:95:c5:f8:9e:e5:ec:08:57:f4:f4:04:
d1:2c:e7:0b:00:31:92:5f:60:ab:ab:f1:d4:f4:02:
5e:87:88:cb:a8:90:6a:f5:94:39:1d:a3:b9:e8:bd:
9d:10:72:74:30:45:69:f7:1a:0f:90:81:a8:a1:2a:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:4C:08:78:68:54:FA:63:C4:3C:67:CB:DD:D1:5F:B5:EE:88:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
af:fb:2b:6c:12:9d:c5:bc:f5:60:22:ac:6d:5a:97:bf:71:d3:
dd:b6:61:ad:45:44:3a:65:dc:56:25:2a:98:57:c6:51:f6:ed:
27:b8:9a:31:f0:35:f7:25:d3:fb:e1:b7:33:3f:4c:f6:3d:e8:
cc:42:13:c6:23:2f:8f:0e:8d:59:db:64:51:d0:df:c3:f7:9d:
b7:3a:c7:ad:8e:66:09:bc:67:c9:f9:e7:2e:2a:f2:b6:87:3f:
45:a9:83:84:61:9d:b6:f9:ca:16:d3:91:df:ff:ee:1c:ff:10:
13:22:ff:c0:9e:46:06:95:2d:e1:3c:01:5e:1b:b6:3a:36:ec:
c3:0e:26:a4:80:44:ee:eb:bc:18:98:d7:d8:c3:fd:f0:49:20:
74:fa:c6:a1:4e:df:3b:82:bd:3a:f0:37:99:77:05:46:e4:3f:
31:e0:20:5d:35:eb:f5:c1:e0:91:ac:30:e8:9e:a3:75:5a:6a:
86:14:64:d3:9e:8d:02:d6:05:99:ab:2b:7c:65:62:c7:60:b0:
dd:4f:ac:76:9c:6e:8f:c7:f0:5b:b9:c3:82:4c:13:06:05:79:
9f:38:d0:e3:1e:bc:82:88:39:0f:b6:3b:50:dc:f5:4c:f2:93:
de:1f:27:94:c5:5a:77:a1:07:df:bd:5d:77:4f:d0:4d:94:03:
6c:68:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:58 2026 by rpki-client