Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5e6e0cd-1fe6-4878-8bad-31673a5fff93.roa
File: a5e6e0cd-1fe6-4878-8bad-31673a5fff93.roa (raw, json)
Hash identifier: FMtIfkX5hL45HKk/dPseAHa4a0L3lPKhMo9YrTPcl/A=
Subject key identifier: ED:88:48:6C:E9:DF:76:76:12:B3:AF:12:E0:4B:F6:55:17:55:46:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52BD5514ED10B936A16080D7CA54FC3C53DEEBC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5e6e0cd-1fe6-4878-8bad-31673a5fff93.roa
Signing time: Thu 12 Mar 2026 15:41:33 +0000
ROA not before: Thu 12 Mar 2026 15:41:33 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bd:55:14:ed:10:b9:36:a1:60:80:d7:ca:54:fc:3c:53:de:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:41:33 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=29d49e48e2cfa85c5f9ead74bbe4c36be8e86244f4eb1ef8209d604d6302cbf3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:0b:24:98:79:ec:62:d0:6c:1d:a8:49:7d:
21:a6:58:d9:05:ca:b7:2e:41:f4:56:ef:dd:8e:32:
2f:18:92:3c:c3:b9:07:e8:4a:59:60:1c:92:eb:cb:
37:e0:b4:0c:54:67:57:34:b7:c2:63:2e:45:d7:fa:
82:1e:79:97:9c:01:32:0e:fd:b1:95:db:cb:98:28:
b4:4b:27:6c:20:7b:4a:bf:c1:3c:d0:86:4e:38:2f:
84:51:a7:33:59:51:16:49:e3:29:a6:0d:eb:54:08:
7e:98:fb:1f:55:f9:43:74:17:fc:73:09:db:2f:6c:
ca:ff:6a:e9:7d:ad:60:67:4c:13:b3:da:2e:78:e8:
d3:62:ef:6a:71:92:0a:f5:51:07:37:fd:26:0b:95:
1f:c6:19:75:ee:c2:44:63:68:70:73:e0:ea:6b:68:
a3:52:9f:f0:2b:11:df:ed:f6:fc:5c:0c:c9:59:6d:
79:f1:f2:9e:8b:25:a8:ec:72:b4:d1:4d:99:00:3a:
d1:36:aa:7a:9f:0b:95:53:d1:43:4c:e4:69:55:b1:
b8:80:3e:81:e8:a0:82:25:5c:ad:0a:dc:24:f1:f4:
96:f8:9e:bb:ef:3c:d3:ac:49:7d:5e:bd:63:7b:2d:
e4:a5:4f:9a:f5:4d:60:06:30:03:32:b6:11:de:84:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:48:6C:E9:DF:76:76:12:B3:AF:12:E0:4B:F6:55:17:55:46:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5e6e0cd-1fe6-4878-8bad-31673a5fff93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:a000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:68:1b:89:98:19:49:69:9c:42:f6:71:8f:d0:e9:bb:d9:03:
4a:90:d4:4b:8b:f3:c4:ab:05:b8:01:c8:30:39:01:58:08:83:
a4:9f:eb:fc:39:51:d9:ca:a1:12:2c:fb:8e:02:b6:06:87:1e:
bf:5f:f8:a6:b8:5f:8d:a2:67:16:aa:ca:18:12:af:2c:38:31:
76:87:eb:d8:60:78:e1:78:bd:27:28:0f:56:c6:99:94:c1:59:
96:55:43:c9:44:9c:8a:2e:a5:09:06:38:7a:71:87:94:b6:1e:
28:c9:e4:17:79:75:1d:46:ed:da:6f:0d:e5:f6:5c:7f:d1:7c:
c2:4b:1c:04:68:0d:51:21:4d:a7:2d:65:2b:40:43:1d:f7:88:
43:61:7d:47:0f:93:09:6e:42:65:6a:ed:36:aa:03:49:84:46:
b0:b2:fb:22:ee:b6:33:57:4f:4c:08:b3:ac:f9:56:ee:eb:24:
08:57:11:d0:7f:c7:bf:c2:08:fe:f6:97:6b:16:09:21:71:56:
4a:2d:26:27:3b:72:32:67:df:d0:4e:b6:25:de:31:4b:da:1a:
64:b3:3b:92:49:6f:08:c2:e6:41:bb:26:a2:e2:52:22:17:56:
16:e2:50:89:68:e5:64:f4:d3:78:18:bf:e0:ba:a6:f9:51:55:
eb:a2:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:18 2026 by rpki-client