Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
File: 8d2dc443-1fef-480c-8427-f1d325c92ec9.roa (raw, json)
Hash identifier: liDTNEWRZaCxcUARVjLzeP6VTWE12/uSz5ROBomnPS4=
Subject key identifier: EB:40:5B:1E:A8:15:D1:5C:43:E2:5E:4C:FD:DA:B7:06:C1:E6:8E:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7458D0CD6D9A475AC85E18216642EBF92318398D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
Signing time: Thu 12 Mar 2026 15:36:44 +0000
ROA not before: Thu 12 Mar 2026 15:36:44 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:58:d0:cd:6d:9a:47:5a:c8:5e:18:21:66:42:eb:f9:23:18:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:36:44 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=a95f9b5c24ff6c15016459b11e3f91963b6d73dce136fc6af8ca422422c7c726, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:c8:e1:5c:a7:4f:b6:66:1a:f0:8e:bd:fe:
24:fc:ad:ca:d1:55:ac:dc:57:09:a6:0f:c7:ad:71:
fc:49:62:cd:d3:98:8e:32:e8:87:72:35:60:42:d9:
06:61:ab:ed:01:57:f4:ff:76:3a:f9:13:42:c7:00:
38:ce:56:94:73:5f:83:e5:3a:ff:3d:c3:28:fa:62:
09:5e:cc:f6:24:be:f1:34:66:40:67:65:b6:be:79:
c5:47:b4:7a:d4:09:a4:da:79:6d:18:4b:65:c1:37:
3b:dc:9a:81:bb:02:de:16:37:85:d4:aa:f5:06:eb:
be:79:68:e1:5a:7d:52:48:5b:83:9b:60:57:98:96:
c8:49:15:2b:f5:bc:97:cc:97:53:01:37:1b:fb:db:
12:63:11:cc:13:cb:f9:ac:2b:af:3f:9b:e1:f2:49:
cc:c2:45:f9:e1:26:e2:07:80:6d:75:da:f9:18:9a:
f2:83:a5:7e:93:4b:31:2c:4c:05:ba:f0:81:61:45:
9e:35:57:76:35:a1:4a:ec:ea:87:dc:88:ed:38:ac:
27:2a:70:d8:a3:b6:c3:d8:9c:e9:20:33:72:8c:8b:
d8:34:48:22:db:03:e0:1c:30:d5:5a:d0:de:24:f8:
0d:23:32:c8:a6:4c:f4:7a:42:01:69:10:41:04:e8:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:5B:1E:A8:15:D1:5C:43:E2:5E:4C:FD:DA:B7:06:C1:E6:8E:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:6080::/48
Signature Algorithm: sha256WithRSAEncryption
8a:dd:94:1a:6c:f2:a2:07:34:32:c6:eb:bf:78:70:f8:62:40:
19:83:93:a3:76:f6:26:91:68:bf:9a:f5:f8:a4:28:2d:d7:e1:
8f:52:4f:5b:ce:71:16:7b:67:61:7b:3c:4e:99:4b:b8:d8:77:
8d:46:21:b4:40:17:a6:d5:79:cf:26:30:cb:1a:79:a2:f9:a1:
e0:ee:d2:5b:f4:6b:3a:af:3f:f4:e4:89:0d:30:34:5a:11:be:
25:86:37:4c:39:b1:5a:74:2e:a2:62:84:1b:de:81:95:c3:3a:
c5:27:f6:c5:5a:53:0c:2a:37:c7:dd:17:a1:08:e3:aa:c7:02:
94:f2:03:2f:0b:a5:2b:2f:e0:85:23:31:c3:14:f0:b8:9e:79:
74:13:be:c3:08:20:7b:6b:73:3c:d3:10:23:04:ee:37:5c:25:
84:86:e7:92:e1:f7:5e:90:a7:8b:c0:37:53:8d:52:37:bf:34:
09:24:d8:44:cf:53:28:ea:76:88:54:62:e4:2d:f8:20:ae:0d:
8b:cc:ff:41:7c:81:35:4a:54:a4:fd:19:fc:5f:2b:d1:4d:05:
02:04:db:05:15:f1:65:00:de:6c:4a:03:23:a2:39:61:5d:f2:
ae:ca:c2:ce:2d:4b:2a:50:75:ef:c5:a8:42:d8:08:b1:ff:15:
6b:ce:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:17 2026 by rpki-client