Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa
File: dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa (raw, json)
Hash identifier: R5cA0qDCj3L5J6O2edPCueMfcDMxsrrfieJxXX9RIww=
Subject key identifier: 33:FA:4F:8D:4E:ED:0B:8D:F3:36:37:67:3B:A7:35:7D:D9:1D:8F:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3DDC7A6B0032EB2C142376BB0273FBCBAA1977EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa
Signing time: Thu 12 Mar 2026 15:41:29 +0000
ROA not before: Thu 12 Mar 2026 15:41:29 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:dc:7a:6b:00:32:eb:2c:14:23:76:bb:02:73:fb:cb:aa:19:77:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:41:29 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=734ba9a8e04b752c1ac589c92a4df1044f4a285d3e50f5826bb361f7f5d41f8c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:4a:99:09:0d:b8:ca:78:28:4b:aa:3a:15:
28:f7:41:5b:53:ca:9d:bc:1c:75:66:b5:19:23:d5:
e3:f7:25:fd:8b:89:72:0d:a0:02:ac:df:cd:7d:db:
55:f6:18:21:87:13:12:fc:b3:34:29:c3:30:1a:7a:
2c:a5:ab:78:99:ce:44:4f:43:e9:09:8a:fb:26:89:
bb:c6:da:c2:0c:05:0b:ad:fd:ef:74:b5:ed:af:7b:
34:b0:78:81:e8:99:45:51:c6:fc:57:46:34:53:af:
bb:20:1c:24:6d:07:1d:4c:5d:5d:ef:8f:00:27:69:
1e:3e:74:fc:1e:1a:e5:91:57:59:b1:f0:92:55:e2:
14:84:d4:ef:f9:e1:fc:ec:02:27:4f:a5:f6:65:2e:
d8:17:51:3c:fb:52:b3:0f:bb:dc:10:d4:f5:a9:42:
90:c9:7e:73:d8:73:37:49:bc:00:01:2e:8f:c2:f9:
78:66:3c:11:6d:2d:e7:70:e1:fe:36:ad:b8:cd:4d:
ec:0f:6d:64:15:10:38:ab:fe:92:5e:bd:04:77:63:
5b:9b:c4:fe:18:48:22:1a:98:85:48:eb:93:b0:70:
88:10:f2:fc:26:3e:dc:c3:d7:d4:29:f1:c0:e4:55:
be:fb:16:04:bb:2b:28:c0:5f:0b:03:13:e6:3a:7c:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:4F:8D:4E:ED:0B:8D:F3:36:37:67:3B:A7:35:7D:D9:1D:8F:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcdf1b31-0429-42e9-ad3b-672a6c0cba78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:1000::/40
Signature Algorithm: sha256WithRSAEncryption
18:4d:c0:b4:ae:6d:53:d0:cd:0a:98:a1:d5:03:09:fe:58:04:
79:71:83:e3:0c:89:26:b8:33:c4:bc:fb:b8:a7:83:bb:75:8a:
1e:ef:a4:04:12:aa:59:93:cd:ad:ea:13:e8:63:a2:93:03:ce:
ba:d0:46:90:32:e8:c9:fa:d0:86:2a:0f:37:f1:3c:38:1c:27:
e1:21:7a:75:50:2f:e2:33:c0:02:76:a2:7d:18:93:b8:e9:18:
f4:dc:21:ac:ed:13:eb:75:1f:31:fd:36:f9:5c:e9:5e:d1:08:
a9:bc:dc:9e:0a:d2:1f:69:b7:04:1e:56:8b:8e:c9:a3:55:71:
3b:4b:90:2c:63:44:15:e9:43:6a:7f:dd:cc:a2:01:85:9f:71:
e1:69:bc:12:04:c2:c0:b3:38:19:1c:97:53:14:da:55:6b:d1:
33:5d:8a:ce:01:3f:4b:02:9c:30:23:06:cd:d0:93:3b:09:50:
df:a0:6d:16:0d:3c:a9:c4:76:6b:da:d4:0d:22:29:df:51:aa:
d3:c1:6f:ab:c1:75:24:54:c0:f2:d7:8e:8a:77:4a:77:78:0a:
9b:b3:82:1c:c8:61:16:7e:26:c8:6d:a0:45:73:5e:4f:16:de:
60:c3:d3:31:70:88:00:41:a7:a3:91:ef:94:19:3c:fc:42:e7:
53:d7:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:17 2026 by rpki-client