Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56bed115-4b3f-4354-a667-3c8f4273b676.roa
File: 56bed115-4b3f-4354-a667-3c8f4273b676.roa (raw, json)
Hash identifier: ZWFekuXtq7Ew/P5ETbqLkzOXZRY6hzv3OHcx4axGZNw=
Subject key identifier: 9E:96:39:BB:01:A1:89:65:FD:24:4C:5C:85:4A:D2:3F:4F:08:88:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2466EE4444287947E2685CB669DDB14B9CE8346B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56bed115-4b3f-4354-a667-3c8f4273b676.roa
Signing time: Thu 12 Mar 2026 15:38:35 +0000
ROA not before: Thu 12 Mar 2026 15:38:35 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:66:ee:44:44:28:79:47:e2:68:5c:b6:69:dd:b1:4b:9c:e8:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:35 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=f9e0911aa12a2672b02dd0a2b08ed8a40ad3e5b9970b6f1b906f6206337b8f29, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:f7:37:0b:82:a0:01:4c:e0:16:4e:8d:a5:
cc:3e:5d:ec:4a:87:85:90:38:34:60:1a:4a:8a:9d:
ac:49:58:fc:cc:db:79:d1:26:b0:2f:5a:60:18:bb:
af:80:0b:67:f8:4c:02:79:74:6c:47:f0:a5:cd:44:
5c:47:7f:98:73:32:19:9f:ae:26:1c:5d:16:3d:71:
f0:e0:e0:ca:86:11:91:e4:17:2f:be:a6:e2:af:63:
17:9c:5f:31:8d:99:13:d3:9c:97:c7:8b:c6:3c:ec:
11:34:b4:71:58:d1:6d:ee:d5:93:26:c2:a0:77:7e:
21:88:91:13:11:4a:6d:0f:ec:17:a8:80:47:60:74:
13:6a:6f:81:59:8e:57:88:4c:e8:1a:54:7e:75:10:
ec:dd:42:61:33:c5:df:86:97:47:26:1b:51:97:e5:
5e:e5:d1:0a:1a:c3:0e:e8:d0:45:9c:81:ff:d0:98:
40:c6:52:d6:a0:05:bf:ca:c5:7f:cb:bf:bf:79:5d:
26:91:58:e5:13:88:ef:c0:bc:c1:23:fb:e9:e2:b8:
24:a4:df:4a:4f:09:46:ce:e0:d9:a6:3e:c7:fa:d5:
cf:42:62:32:11:a4:92:4a:55:49:29:ec:41:1a:94:
53:c6:2b:13:c0:1e:4c:10:8c:67:5c:bf:dc:16:c1:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:39:BB:01:A1:89:65:FD:24:4C:5C:85:4A:D2:3F:4F:08:88:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56bed115-4b3f-4354-a667-3c8f4273b676.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:840::/48
Signature Algorithm: sha256WithRSAEncryption
3d:46:45:e2:69:86:01:96:a9:f9:c6:08:8b:c1:7c:52:4c:d8:
72:9a:44:8b:fb:eb:99:b9:e7:58:a9:1d:15:18:20:93:da:23:
20:4e:64:92:4b:35:d6:2c:27:61:1d:fe:83:2d:b8:a4:f5:ae:
63:61:3d:84:d6:28:b5:3c:ad:9e:73:5c:6a:15:a1:95:ad:df:
e4:c4:79:df:6a:58:8f:48:df:d9:b9:5c:c3:6a:63:4b:7c:e1:
3a:e2:5b:d8:fc:f0:6d:71:ce:1b:0d:84:7f:05:15:4c:eb:b5:
58:aa:e3:05:04:72:c4:3c:a6:78:3c:d6:29:b9:e4:f1:e3:3a:
45:b1:d8:2d:07:3d:e3:95:e1:8f:d9:4b:5c:70:9a:e6:37:e5:
ba:4b:05:46:fb:be:c2:e6:b6:2c:86:f3:96:03:17:c8:35:b7:
b1:bf:84:51:e1:40:46:13:f7:d4:33:1e:80:c2:83:40:88:74:
66:7b:8b:5a:88:e6:71:01:9b:61:c9:e6:4b:c8:17:78:f5:48:
50:af:3d:7c:d9:15:53:e6:15:00:f1:cd:00:28:6a:a2:e5:34:
97:10:26:26:40:db:f5:0e:01:1f:5f:96:c5:12:30:47:e9:52:
51:dd:5f:c4:84:ce:80:50:80:71:73:27:b4:d2:c6:8f:f7:41:
f6:63:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:58 2026 by rpki-client