Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/485b9f1f-6944-4fc0-a4e8-fcb2db669780.roa
File: 485b9f1f-6944-4fc0-a4e8-fcb2db669780.roa (raw, json)
Hash identifier: OBELT37ZPCy7JeyZfrPcDdRoNki/86JFvwY8WFipUvc=
Subject key identifier: 61:03:F5:4D:CF:1A:F3:20:7E:27:9D:42:AF:4B:82:19:4E:DC:3E:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ED946EEF4F48D599C60BF32A30781E4825AB789
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/485b9f1f-6944-4fc0-a4e8-fcb2db669780.roa
Signing time: Thu 12 Mar 2026 15:40:00 +0000
ROA not before: Thu 12 Mar 2026 15:40:00 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d9:46:ee:f4:f4:8d:59:9c:60:bf:32:a3:07:81:e4:82:5a:b7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:40:00 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=df5497a41cf55b221efdf2da51f97b9c216ee61cec2ce3842025734eec7beadc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:64:d7:bb:a3:e2:3c:29:7a:8e:8c:4d:c9:
37:b6:7e:71:e8:83:d9:7c:42:bb:29:3f:27:26:12:
65:60:ca:56:4e:c0:f6:31:3e:25:1b:d6:ec:a9:46:
aa:24:c6:b7:be:95:f0:ba:a7:42:3c:bd:79:c5:19:
d0:c4:b3:df:82:fc:09:10:49:34:29:e6:d1:43:44:
6a:97:52:8a:fd:7f:b5:7b:96:26:f9:c1:6f:b8:9b:
f9:35:78:08:cc:f9:f6:f3:b3:2e:da:5b:b6:b4:9a:
8a:b9:80:f2:bf:74:48:11:6b:ef:2e:20:68:4d:4d:
77:bf:1b:6b:8e:7e:15:c2:26:15:7c:a6:23:08:3a:
f3:2a:4f:fa:8f:34:27:9a:30:e9:0c:57:32:36:16:
01:76:b2:02:34:e4:75:d6:06:50:a8:5e:23:76:d1:
48:3d:39:31:bd:b2:2b:22:32:ac:c6:1c:a2:21:6b:
92:11:21:93:ff:51:76:b9:9f:04:d9:44:8f:2d:76:
4a:fd:f0:c4:34:90:52:a1:c2:5a:2b:5c:c4:3c:e2:
0f:78:1c:66:f2:f5:11:1e:a0:bc:ea:5a:2d:40:67:
90:78:a1:f3:1a:b7:ad:01:19:2c:0e:1d:14:bb:fa:
74:bc:31:b7:a4:c2:f2:b8:32:62:0f:1a:dd:a5:03:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:F5:4D:CF:1A:F3:20:7E:27:9D:42:AF:4B:82:19:4E:DC:3E:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/485b9f1f-6944-4fc0-a4e8-fcb2db669780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:5e:c3:3b:a4:06:e0:ac:d5:ca:cb:63:81:c7:3a:83:47:8e:
ad:15:0b:67:db:4b:40:56:9d:f2:ba:2b:fc:dd:9d:a9:19:c8:
97:f7:cd:2d:f8:38:0a:c1:45:b6:29:49:69:73:71:a6:35:d7:
99:55:7a:69:aa:02:03:5e:eb:79:e1:31:5f:1d:73:01:45:08:
6b:18:65:72:bb:49:2f:bc:50:33:b4:a2:73:0b:e2:fc:be:f6:
47:44:54:15:57:e2:7f:f6:d3:c7:b2:42:83:ef:0c:ac:68:f4:
9b:57:65:4a:e2:3d:31:e4:6f:38:7c:c0:64:da:d7:2d:de:6a:
06:4e:0a:fc:87:fb:55:c7:fd:c9:b9:8d:94:62:12:41:d6:01:
18:f4:ab:19:b3:dd:5b:37:79:66:b2:9e:72:e4:6e:88:3e:40:
63:a1:ef:84:c4:38:5c:93:b1:71:f4:3d:c5:43:0b:85:21:28:
58:13:5f:e5:b7:24:fa:dc:af:af:04:a6:46:d8:99:a0:bf:26:
5f:03:3b:88:6a:61:ea:f7:25:8f:b4:31:5a:69:ff:24:56:e5:
e3:f6:a6:e3:05:af:f9:ae:a5:f8:0c:cc:d9:77:b0:6b:50:4a:
a2:ea:25:f2:8d:24:61:41:00:e7:51:57:22:ff:be:19:c0:35:
55:9b:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:18 2026 by rpki-client