Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
File: 5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa (raw, json)
Hash identifier: zBO3CT8lZXtFSgaVTSojzGC7j25f8P+TehuTI1FWLRo=
Subject key identifier: D1:57:0D:D5:2D:C6:45:A3:C8:84:00:E1:44:85:87:35:82:59:B3:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0800F9C3BEF0A6BB5A926EFF978A56F8E426B040
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
Signing time: Mon 27 Apr 2026 00:30:15 +0000
ROA not before: Mon 27 Apr 2026 00:30:15 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02f:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:00:f9:c3:be:f0:a6:bb:5a:92:6e:ff:97:8a:56:f8:e4:26:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 27 00:30:15 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=52b4451d8268919c0120f598fcf789b7dca2497a6b27dbeac996ccbeaa9c288a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:7e:ac:d9:ff:41:a6:2d:f3:94:c1:16:b9:
a8:a4:9c:b9:b2:5f:f1:76:80:3a:d1:c5:7c:29:eb:
d9:83:e8:81:c1:e3:59:30:0e:bb:49:56:4f:50:18:
8b:a8:ce:c7:4a:04:12:bd:09:6d:53:3d:78:df:73:
4b:f9:dc:75:cd:46:6c:87:91:23:1a:b2:1c:ac:20:
a5:7d:83:15:d2:17:5d:e6:d2:3d:1a:65:55:31:05:
b3:47:9d:74:31:99:e7:42:e8:8b:25:a7:05:27:ee:
d4:18:e7:44:c4:7b:74:cc:b3:b5:03:75:71:06:8b:
67:11:7c:7a:af:71:40:ed:dd:28:c6:8e:3f:1f:c7:
7e:a2:21:cc:38:70:1a:4e:62:70:c1:99:bc:8b:04:
09:31:5d:2f:ef:2c:64:fa:2c:ea:92:1f:4b:b1:92:
56:ad:48:82:a7:33:25:ed:e4:17:26:b5:e4:24:f7:
6b:63:b9:fa:4a:49:43:93:49:ee:85:d4:1c:f5:2e:
89:de:74:36:48:d0:bb:9f:e7:65:a3:ff:14:d0:5b:
4e:bb:eb:54:34:06:fa:6e:3a:17:82:87:c9:60:52:
0e:c5:33:75:12:7c:08:21:d5:84:b2:86:7a:06:74:
d1:2c:51:ae:65:f9:52:b7:77:2d:e0:3e:45:2a:b6:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:57:0D:D5:2D:C6:45:A3:C8:84:00:E1:44:85:87:35:82:59:B3:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02f:800::/37
Signature Algorithm: sha256WithRSAEncryption
22:61:bd:00:b3:5f:61:1c:5e:eb:4c:0a:75:cc:83:5c:8c:5c:
ff:fb:d1:b3:1f:a5:6f:f2:f1:dc:52:23:45:c1:aa:15:4b:0a:
9d:d0:78:bc:eb:43:f2:dc:92:cf:d5:08:d6:18:c5:fd:59:dd:
e9:17:ee:80:f7:8d:33:c5:9d:6d:6d:46:49:fc:67:ca:7b:2e:
d1:67:f7:b1:0a:1e:96:fe:66:d5:53:6a:e6:39:e2:04:f5:62:
89:e5:51:a1:2b:45:31:63:05:e8:68:38:80:b3:4d:dc:3a:15:
47:04:b0:08:18:83:c2:09:34:eb:91:b0:a8:aa:2c:c6:0a:9f:
e9:4c:6a:94:69:93:12:72:62:32:5f:ef:5c:74:54:75:44:76:
0f:21:68:ab:b0:d6:0e:1f:e3:9d:54:3c:4b:4d:9d:46:4d:cd:
36:20:54:55:97:09:89:d6:14:9d:8e:37:3a:44:6d:cc:3f:5e:
d7:73:23:79:f5:11:4c:d6:64:24:e7:6e:95:0b:88:c2:2e:a5:
19:78:e3:35:19:84:1d:78:a5:d7:0a:ce:8d:cc:7a:63:16:27:
7e:33:2b:e1:5d:e2:a7:57:18:c0:95:d4:93:d0:7e:72:7e:96:
9e:41:04:10:15:2b:b3:b5:d5:04:34:a1:26:48:ef:f2:e2:f5:
a3:84:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 19:32:46 2026 by rpki-client