Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
File: df2565df-3632-4ab6-afc7-e11564fe17f9.roa (raw, json)
Hash identifier: tZKa0LUnzwp/8e4TtmmzDf7u0PA5l10jV3BEQY+j+Yw=
Subject key identifier: 5C:0B:21:95:18:79:B9:07:86:5F:D2:58:D4:97:4C:6B:AB:35:5E:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E7F6F2C31CB15AA4D89A660B55F0E3A38E93C12
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
Signing time: Thu 12 Mar 2026 15:38:30 +0000
ROA not before: Thu 12 Mar 2026 15:38:30 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7f:6f:2c:31:cb:15:aa:4d:89:a6:60:b5:5f:0e:3a:38:e9:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:38:30 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=26960ddc88b48fd07767eb3df2bcbc8b4b028a67fad9dc78950f1fdfb02226b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:f6:6d:e6:73:ef:05:db:85:58:0c:d6:65:
22:97:0a:25:1d:a8:3c:3f:8c:ef:15:a0:c2:92:f9:
26:4c:90:27:34:3b:f7:8e:19:6a:44:ae:9c:f4:31:
f5:a6:d5:14:de:c1:d5:f1:fe:c9:0b:ee:69:2e:6d:
72:97:ac:7f:33:55:16:2b:8d:e0:c5:8c:57:05:7e:
53:e4:a5:c0:a8:8d:0d:35:9c:b8:08:86:a8:27:70:
ef:6c:5a:59:c8:5b:af:f2:69:7b:d3:a8:94:39:22:
bb:13:7f:31:bc:6d:b7:fa:61:42:f3:3b:62:fb:40:
31:77:c3:3f:c8:1e:2d:02:cd:90:99:19:db:e1:7d:
ca:b3:43:6b:b9:83:73:56:99:36:7d:8c:30:54:38:
6b:5f:95:ee:30:78:65:4a:04:04:4b:71:3c:f7:1e:
48:d6:27:24:bd:c6:37:8d:fb:f1:73:7a:b8:87:4c:
28:d9:ab:68:df:47:ad:b0:09:1b:85:ae:09:38:d9:
15:03:dd:1c:17:a6:1e:d3:f3:af:03:23:60:91:e7:
77:0b:5a:99:36:3f:14:01:0f:fd:af:c1:1f:f9:ee:
29:1e:c1:c4:b0:4e:95:2d:80:0a:28:82:10:7b:65:
5d:5e:dc:7f:52:1a:ed:87:06:50:cf:0e:7f:cc:59:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:21:95:18:79:B9:07:86:5F:D2:58:D4:97:4C:6B:AB:35:5E:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5040::/48
Signature Algorithm: sha256WithRSAEncryption
63:11:ec:ed:28:ec:71:b7:7f:15:83:1e:c9:36:e0:ea:bd:3d:
99:d2:26:0b:b8:c3:8e:22:fb:94:88:7b:e3:70:3f:e0:ab:45:
60:b4:94:45:10:4a:19:5f:bf:0e:b8:50:1c:65:23:30:f8:ba:
70:71:76:d6:24:a6:cd:d9:e9:6a:21:1e:77:a7:3d:21:58:f8:
d3:80:a2:2c:a4:a6:ae:60:06:87:87:1a:5f:cd:04:93:06:13:
54:28:d8:a5:92:38:92:ef:36:3c:8c:48:a6:be:14:54:5f:47:
91:e7:2a:52:e0:01:ad:50:87:4d:31:27:f3:9c:b1:a9:30:b8:
60:f7:c2:98:28:24:95:8a:3f:f7:f4:f9:79:a1:ac:69:67:3c:
db:37:9a:68:be:b7:fc:93:cf:07:2f:15:c3:c0:8e:88:f0:71:
0b:66:8f:9d:d9:82:e6:50:0a:82:c4:11:15:51:97:5f:3f:bb:
97:3c:85:33:71:60:fc:18:bb:f5:1b:11:17:c8:c3:7f:96:cc:
6d:c5:b4:82:41:76:2b:5f:6c:5e:76:ac:88:64:69:e9:eb:db:
ce:5a:93:46:6b:25:32:27:0f:6a:9e:0a:54:31:02:b0:77:79:
50:51:0e:ab:84:28:a7:c3:2b:59:c9:87:57:b5:a3:a7:29:e7:
fa:41:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:20 2026 by rpki-client