Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/545f4591-9634-4a7d-a014-1c98c0cee552.roa
File: 545f4591-9634-4a7d-a014-1c98c0cee552.roa (raw, json)
Hash identifier: 5sJ82e5CSTMiIrhnDYB5wxvTKTdERu+shMDGCDy2gbc=
Subject key identifier: 0C:7F:0B:C4:EB:BE:15:63:45:EC:55:77:52:CF:74:91:65:94:47:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E69D6796A22B58B9834A69F1D252AFC0DE28110
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/545f4591-9634-4a7d-a014-1c98c0cee552.roa
Signing time: Thu 12 Mar 2026 15:39:59 +0000
ROA not before: Thu 12 Mar 2026 15:39:59 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:69:d6:79:6a:22:b5:8b:98:34:a6:9f:1d:25:2a:fc:0d:e2:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:39:59 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=aa702872885ddbbd55c5db105d8d3250c574a872360fd7fd481b7f6128d27523, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:7d:df:3d:4b:be:ce:4c:2a:a6:7a:ca:14:
74:07:bb:8e:5c:4c:28:fb:6c:4d:10:95:43:dc:03:
6e:4d:20:87:7b:4f:0f:31:23:97:4d:58:b8:78:80:
68:2d:59:6d:a5:ed:d5:6d:b0:32:4e:a4:c6:3a:c0:
22:85:b8:cc:dc:18:c2:e2:36:47:00:33:15:2f:01:
43:fd:60:35:04:c5:2e:6a:48:6b:27:a9:68:36:07:
88:8c:e7:88:2a:d3:f7:dd:96:c3:dd:c8:c3:2b:ac:
c3:fd:54:60:40:cd:f5:9c:02:46:da:ce:f7:2f:57:
9e:bb:b3:b8:47:86:89:61:40:b3:9b:6f:38:61:30:
a6:c1:43:c6:07:85:6b:23:3a:57:3c:13:3c:31:44:
26:b0:40:b2:96:06:67:1a:93:12:d7:53:2a:e5:ba:
d4:a5:67:30:00:8f:c7:7f:5e:79:d2:47:74:4c:b6:
8a:d4:27:16:bb:38:e3:64:90:54:fa:4b:19:5d:58:
97:c6:b8:f9:f4:7d:8d:c9:05:c3:af:da:f4:83:a5:
9b:bf:5f:fb:09:00:d8:c4:b7:08:9f:a0:e1:f0:fe:
1d:38:0f:cd:58:01:02:ef:4b:0d:04:59:e6:eb:b2:
1c:9c:34:c2:cb:1f:f5:82:c4:92:86:f1:f0:35:04:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:0B:C4:EB:BE:15:63:45:EC:55:77:52:CF:74:91:65:94:47:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/545f4591-9634-4a7d-a014-1c98c0cee552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c020::/48
Signature Algorithm: sha256WithRSAEncryption
75:41:37:03:3f:15:3a:c6:2f:54:b1:fb:50:ce:ab:e9:50:19:
96:0e:a8:f6:47:8f:8f:06:17:c6:77:80:64:4a:c3:00:8b:95:
89:c3:14:7a:69:70:4c:72:f5:c8:c2:d1:71:ae:94:e4:6b:4a:
23:52:79:be:0c:da:8a:ba:cb:78:27:fb:9b:c8:d8:e9:a4:bd:
5d:fd:38:67:d3:69:ce:3c:51:88:6c:38:4f:3e:aa:1d:cb:0c:
00:99:af:16:97:ca:66:80:b4:e1:69:d5:5d:1b:f4:63:fa:df:
af:78:83:de:63:00:c4:96:d7:8a:42:b0:bf:8e:db:91:aa:29:
19:62:56:06:e4:98:14:eb:63:76:17:02:08:29:fd:ca:96:36:
b2:ee:7d:13:fc:3b:52:17:ad:9c:54:b2:f3:62:a8:27:9a:65:
f3:58:ab:25:b4:47:94:e0:31:cf:67:7e:5c:67:08:87:85:b9:
43:3d:e9:8a:d7:58:fb:7b:64:6b:09:ad:23:32:9e:d7:aa:4b:
27:a4:6d:0f:ca:ef:b0:cb:1b:1a:32:52:be:75:26:17:d0:0b:
36:61:bd:05:3c:1f:46:45:81:ab:54:36:e2:3e:21:2d:85:34:
dd:8f:d4:48:5c:ee:86:8d:ec:29:86:c2:43:07:ed:de:5b:7b:
54:47:44:8e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUPmnWeWoitYuYNKafHSUq/A3igRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAzMTIxNTM5NTlaFw0yNjA2MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGFhNzAyODcyODg1ZGRiYmQ1NWM1ZGIxMDVkOGQzMjUwYzU3NGE4NzIzNjBm
ZDdmZDQ4MWI3ZjYxMjhkMjc1MjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpHfd89S77OTCqmesoUdAe7jlxMKPtsTRCVQ9wDbk0gh3tPDzEjl01YuHiA
aC1ZbaXt1W2wMk6kxjrAIoW4zNwYwuI2RwAzFS8BQ/1gNQTFLmpIayepaDYHiIzn
iCrT992Ww93Iwyusw/1UYEDN9ZwCRtrO9y9XnruzuEeGiWFAs5tvOGEwpsFDxgeF
ayM6VzwTPDFEJrBAspYGZxqTEtdTKuW61KVnMACPx39eedJHdEy2itQnFrs442SQ
VPpLGV1Yl8a4+fR9jckFw6/a9IOlm79f+wkA2MS3CJ+g4fD+HTgPzVgBAu9LDQRZ
5uuyHJw0wssf9YLEkobx8DUEXhkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQMfwvE
674VY0XsVXdSz3SRZZRHtDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQ1ZjQ1OTEtOTYzNC00YTdkLWEwMTQtMWM5OGMwY2VlNTUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H3A
IDANBgkqhkiG9w0BAQsFAAOCAQEAdUE3Az8VOsYvVLH7UM6r6VAZlg6o9kePjwYX
xneAZErDAIuVicMUemlwTHL1yMLRca6U5GtKI1J5vgzairrLeCf7m8jY6aS9Xf04
Z9NpzjxRiGw4Tz6qHcsMAJmvFpfKZoC04WnVXRv0Y/rfr3iD3mMAxJbXikKwv47b
kaopGWJWBuSYFOtjdhcCCCn9ypY2su59E/w7UhetnFSy82KoJ5pl81irJbRHlOAx
z2d+XGcIh4W5Qz3pitdY+3tkawmtIzKe16pLJ6RtD8rvsMsbGjJSvnUmF9ALNmG9
BTwfRkWBq1Q24j4hLYU03Y/USFzuho3sKYbCQwft3lt7VEdEjg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:20 2026 by rpki-client