Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6092a152-053c-4071-b5f8-66fb66717151.roa
File: 6092a152-053c-4071-b5f8-66fb66717151.roa (raw, json)
Hash identifier: N+UcG7jgR7SMnhMcO06y/0vtiqtxSDghHB1BpZrquSg=
Subject key identifier: 31:07:6E:46:1D:86:4A:78:F4:62:8F:B6:B7:FA:65:B0:93:B5:9A:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 081ABEE15A06B79A33BF1F2F626011267710DD06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6092a152-053c-4071-b5f8-66fb66717151.roa
Signing time: Thu 12 Mar 2026 15:36:46 +0000
ROA not before: Thu 12 Mar 2026 15:36:46 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1a:be:e1:5a:06:b7:9a:33:bf:1f:2f:62:60:11:26:77:10:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:36:46 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=9c6d7fb610dae061264e2928356826664e253d84a09cf4d340dac51ce93ed284, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:07:bc:e3:99:49:fe:fd:38:ad:a8:6d:a9:
1e:5c:12:a1:f4:83:ee:e4:24:58:8c:9b:dc:df:f3:
1e:41:9a:cc:1a:0a:6e:da:a4:2c:81:96:a7:ec:f0:
f7:8b:9d:e1:b6:08:c5:4b:5c:d2:59:5b:b5:f7:0a:
49:32:15:de:bb:00:83:b9:24:2b:6e:16:8f:7e:81:
7c:1f:3c:b1:b0:6a:9d:f4:95:d5:8b:5e:61:f7:d7:
54:3d:36:8d:ec:53:d4:d8:55:3a:31:a2:73:4b:15:
51:ff:e6:b3:32:08:6a:2b:cf:fb:be:ea:f1:a3:85:
96:7f:c7:94:c4:1e:b1:d5:45:46:da:18:20:a4:64:
a4:a9:29:eb:1a:15:cb:1b:a8:0c:32:bc:54:96:05:
97:96:a2:24:48:ee:85:08:94:9e:be:c7:eb:bf:10:
bf:cf:11:94:7e:de:e9:38:3a:87:7d:61:ab:0f:99:
55:27:af:98:76:47:24:12:ad:d9:08:cb:82:13:a9:
42:9e:88:64:18:3e:18:55:55:75:93:8d:e7:ef:35:
58:41:3e:ca:49:fe:4b:b7:c1:46:86:62:9d:07:09:
ee:4d:d9:da:e5:5b:61:eb:a0:fd:13:b8:97:44:37:
1d:19:ca:0b:01:92:86:87:29:a7:7f:b5:7f:18:e9:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:6E:46:1D:86:4A:78:F4:62:8F:B6:B7:FA:65:B0:93:B5:9A:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6092a152-053c-4071-b5f8-66fb66717151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:8040::/48
Signature Algorithm: sha256WithRSAEncryption
57:6c:c6:b1:03:3a:73:c3:b3:11:6c:da:07:1d:71:93:b1:08:
b2:1f:5e:92:9d:9a:cb:10:b5:92:e8:a9:9a:9b:9b:af:60:90:
c9:bc:94:c3:cf:e3:6f:bd:a1:df:56:35:40:64:ae:33:c0:97:
f2:22:6b:c8:1c:87:f5:20:2a:3a:20:46:8f:ca:70:d6:83:3a:
c4:c5:cb:37:3a:d9:c0:ac:15:61:50:fa:d7:76:ab:b6:66:80:
de:74:04:61:ef:0d:9e:dc:7d:14:fe:d7:3b:e9:ac:7f:b2:d0:
9f:35:f7:77:a3:ca:d4:81:db:59:08:c9:61:7e:96:f1:3a:0d:
ff:23:d9:68:ee:18:cf:37:f8:48:65:24:d3:43:0f:6b:a5:54:
d4:36:64:4a:4c:9c:22:ff:79:d9:90:98:51:d3:dc:06:2b:2e:
24:c6:75:fd:cf:f9:8a:01:07:01:4d:85:2e:bb:4e:18:c2:82:
a6:5e:cb:12:1b:3f:d9:44:b0:25:4d:db:c8:d4:57:7c:87:1f:
7e:54:29:0d:f1:4c:84:73:27:dc:80:51:41:7f:7d:f2:61:bc:
8f:03:dc:d7:11:d1:89:58:d3:07:73:8c:13:10:47:79:06:34:
f1:55:7e:f4:de:df:48:a6:77:6c:3a:5b:3b:a8:78:df:5b:2f:
f0:21:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:18 2026 by rpki-client