Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
File: 376b2c73-f092-42ef-b7b3-ff5650209feb.roa (raw, json)
Hash identifier: Zf4tzXdZGDequUvKmxGID/i76ouUneWzKSct20ZhwYw=
Subject key identifier: 47:2D:C7:E8:6E:A4:E6:E6:24:BB:1C:77:FF:B4:8C:CB:08:35:9B:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EFEBDE1EF53D5EAB525282F53574DD9CCFE79BD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
Signing time: Thu 12 Mar 2026 15:38:29 +0000
ROA not before: Thu 12 Mar 2026 15:38:29 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fe:bd:e1:ef:53:d5:ea:b5:25:28:2f:53:57:4d:d9:cc:fe:79:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:29 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=5b34d09d9845080df5d0f661b954d58cf806df5722c4fd98bcd3a342daa4b241, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:d6:a6:08:72:1f:61:a3:6f:10:77:9c:e9:
b2:5c:d5:17:0d:22:6e:58:b9:32:1d:90:be:25:c4:
4c:8f:f5:a7:c8:86:ad:ce:e9:9e:ca:6f:f9:bb:05:
09:57:32:e5:7b:5b:ac:56:22:74:3e:56:71:83:79:
ef:a5:bb:bf:04:19:e7:f3:ca:6b:76:ba:4e:b5:09:
40:ba:96:39:80:fc:d2:ef:e6:d0:be:68:8f:b8:63:
36:2f:b7:0d:95:25:e5:c8:25:80:9c:6a:7c:f3:eb:
a5:d7:75:a5:f4:c1:a5:5c:25:7a:39:ab:f5:21:57:
8f:9a:8e:12:81:a1:9b:80:72:fb:b0:2d:2e:8a:3b:
f0:8c:47:ab:0d:35:34:d2:12:bb:ab:7d:0c:30:ab:
e1:8c:ea:c3:b7:b0:20:d3:2d:32:71:f6:c7:9f:d6:
dd:77:eb:4e:01:94:42:3e:0d:b1:b6:b8:fb:48:9b:
a6:c9:17:5c:49:67:aa:eb:d5:38:73:13:b6:6e:02:
7c:15:cd:b0:9a:bc:f1:bb:1f:31:bd:d1:b8:2f:d6:
1b:bd:bd:7a:e2:4e:d4:7d:00:af:69:63:08:1c:19:
fd:55:06:3f:7b:e5:d2:9d:6a:c3:e0:d9:27:2f:6b:
2a:ef:2b:5e:59:17:bd:ba:50:ba:ab:bf:cc:ea:ac:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2D:C7:E8:6E:A4:E6:E6:24:BB:1C:77:FF:B4:8C:CB:08:35:9B:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4080::/48
Signature Algorithm: sha256WithRSAEncryption
2c:2a:46:a3:9b:c2:54:ea:af:7f:db:d5:67:74:9a:0b:d8:da:
b0:f8:89:0c:30:54:a2:2a:cb:1e:50:3c:bd:32:c0:1f:70:24:
b1:c3:45:36:ac:e1:b5:2f:df:3d:b6:b0:14:59:f9:f6:52:08:
32:a2:98:d1:88:b2:2a:02:3b:d5:9c:e2:e7:fe:8f:dc:1e:c3:
ee:69:3f:24:6d:d2:a9:40:98:cc:3c:9f:64:f4:d9:be:e2:3e:
17:43:ba:1e:44:85:45:cb:52:f3:1a:4f:e4:fb:58:fc:8f:12:
fa:7c:48:a6:d9:df:eb:1d:3f:ca:cd:30:6a:c2:c3:07:09:2b:
d2:9d:92:42:a8:26:28:e4:73:86:46:d3:db:74:bd:a6:be:77:
f7:38:74:08:70:51:f7:1d:0e:47:e8:73:d8:9c:ce:df:e0:69:
0c:03:07:8a:31:a7:b7:61:28:89:99:6d:07:48:93:15:dd:6f:
30:a5:99:98:64:31:04:29:71:9f:53:50:60:21:33:3a:2d:79:
27:c0:24:f7:58:a4:64:28:6a:a8:7b:dc:63:b9:2e:1e:40:b3:
0b:98:e8:06:3e:83:ca:e6:a7:ae:ea:af:40:46:67:d0:db:4b:
97:ad:71:bd:1d:d3:4d:de:b3:cc:86:4b:86:eb:ca:35:16:7a:
0e:b4:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:55 2026 by rpki-client