Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa
File: 8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa (raw, json)
Hash identifier: wEgUELJSV45Fkp4c4U9XFc4+wvlljPoe/6zM5zkSSXA=
Subject key identifier: 18:86:11:C0:3B:65:9A:ED:94:A9:47:F4:3B:FA:3D:59:CA:5E:CA:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4211480320797C51AC403BB98F24C52E4154ECCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa
Signing time: Thu 30 Jul 2026 01:40:30 +0000
ROA not before: Thu 30 Jul 2026 01:40:30 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:11:48:03:20:79:7c:51:ac:40:3b:b9:8f:24:c5:2e:41:54:ec:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:30 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=13b0c29e711e0a089f84f0347c7928f6ce41d7f87f8e6d0d270c23a9c7b24404, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:8d:74:06:9e:88:8c:3a:17:bc:4f:7c:da:
5e:18:cd:1f:da:a2:b8:90:9e:55:97:bd:b3:84:30:
9d:6e:ac:1c:60:56:a9:95:05:52:88:13:23:aa:37:
1f:c0:1e:80:64:b3:95:15:d6:de:d0:a2:e4:0b:dd:
79:3a:fe:6f:f3:16:c3:4b:33:60:ad:a3:1f:b8:c0:
e1:24:dc:81:b4:6d:73:0c:6d:0e:75:ed:e7:e1:4b:
9a:e6:36:74:b4:80:3d:00:09:df:d4:3b:a1:5e:0a:
35:f2:ef:04:bc:80:87:94:a8:33:bc:af:4b:64:4c:
50:5f:5e:4d:1d:98:cb:79:4e:f1:4e:e7:1f:19:cf:
25:f7:2d:0b:cb:e6:d6:9d:3d:ae:92:1e:e5:bb:11:
fe:a1:1b:35:54:a9:22:35:ab:46:27:44:18:c9:be:
a6:80:97:84:3b:41:da:8f:90:45:4c:ec:89:df:de:
95:0b:bb:d7:e6:cc:89:00:fc:7c:d2:5a:a0:96:93:
f5:08:db:8d:60:36:64:3a:d6:48:16:a9:21:09:e2:
2c:f3:a7:cc:8b:bd:18:88:51:f1:0c:d8:b5:9f:f2:
6b:73:0b:3f:21:8f:e2:b9:e3:89:fb:66:6c:af:92:
f1:2d:4e:8e:a4:60:09:80:34:84:22:9b:a5:af:5c:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:11:C0:3B:65:9A:ED:94:A9:47:F4:3B:FA:3D:59:CA:5E:CA:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8fa5442d-f7b6-4531-9d3e-f61e3e8920e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:1000::/40
Signature Algorithm: sha256WithRSAEncryption
03:78:2b:8d:00:ae:a7:01:c8:a8:4b:90:ee:0e:83:c3:fe:82:
2c:0b:65:23:ad:68:6d:04:f0:14:d7:92:c7:5a:5e:92:1d:ba:
fb:da:e5:ce:d8:4e:f6:7a:83:08:ba:3e:90:ce:84:7f:3a:35:
d1:04:8d:51:f7:ef:5d:ab:d1:af:84:a2:68:20:f0:dc:07:22:
64:66:ab:38:50:7d:52:a3:25:7c:23:aa:f3:45:ce:6c:ff:df:
94:f1:1d:ab:8e:42:97:2e:6f:5d:d6:d1:e8:8c:10:5c:61:8a:
fc:24:c5:a9:d7:0c:66:0e:31:5b:8f:92:8d:97:04:44:19:b9:
b0:e3:f0:48:df:d9:5b:72:3d:4e:bd:f4:f7:07:55:29:45:67:
30:2e:f0:b9:2b:15:76:b3:60:5d:4b:27:eb:29:f4:04:98:44:
ef:06:a9:c2:02:8b:88:41:c3:83:c4:c2:c9:b5:b1:46:ec:54:
f9:f1:33:0e:03:f6:94:1d:d9:c3:a4:68:14:15:41:c3:a5:30:
72:66:3b:ba:d0:ca:ad:53:01:54:e3:5f:33:27:33:d4:1f:9a:
b1:cc:7a:17:78:47:97:1e:9e:9c:de:5c:b3:23:4b:4f:96:7d:
d5:b9:7d:03:c9:b8:6d:02:27:b8:58:71:4c:e3:22:35:78:5a:
16:70:c5:0e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQhFIAyB5fFGsQDu5jyTFLkFU7M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQwMzBaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDEzYjBjMjllNzExZTBhMDg5Zjg0ZjAzNDdjNzkyOGY2Y2U0MWQ3Zjg3Zjhl
NmQwZDI3MGMyM2E5YzdiMjQ0MDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzLjXQGnoiMOhe8T3zaXhjNH9qiuJCeVZe9s4QwnW6sHGBWqZUFUogTI6o3
H8AegGSzlRXW3tCi5AvdeTr+b/MWw0szYK2jH7jA4STcgbRtcwxtDnXt5+FLmuY2
dLSAPQAJ39Q7oV4KNfLvBLyAh5SoM7yvS2RMUF9eTR2Yy3lO8U7nHxnPJfctC8vm
1p09rpIe5bsR/qEbNVSpIjWrRidEGMm+poCXhDtB2o+QRUzsid/elQu71+bMiQD8
fNJaoJaT9QjbjWA2ZDrWSBapIQniLPOnzIu9GIhR8QzYtZ/ya3MLPyGP4rnjiftm
bK+S8S1OjqRgCYA0hCKbpa9cXeUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQYhhHA
O2Wa7ZSpR/Q7+j1Zyl7KszAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGZhNTQ0MmQtZjdiNi00NTMxLTlkM2UtZjYxZTNlODkyMGU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQADeCuNAK6nAcioS5DuDoPD/oIsC2UjrWhtBPAU
15LHWl6SHbr72uXO2E72eoMIuj6QzoR/OjXRBI1R9+9dq9GvhKJoIPDcByJkZqs4
UH1SoyV8I6rzRc5s/9+U8R2rjkKXLm9d1tHojBBcYYr8JMWp1wxmDjFbj5KNlwRE
Gbmw4/BI39lbcj1OvfT3B1UpRWcwLvC5KxV2s2BdSyfrKfQEmETvBqnCAouIQcOD
xMLJtbFG7FT58TMOA/aUHdnDpGgUFUHDpTByZju60MqtUwFU418zJzPUH5qxzHoX
eEeXHp6c3lyzI0tPln3VuX0DybhtAie4WHFM4yI1eFoWcMUO
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:49 2026 by rpki-client