Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea520cf2-1d99-4122-828b-8b7044eb56af.roa
File: ea520cf2-1d99-4122-828b-8b7044eb56af.roa (raw, json)
Hash identifier: Bs1W9BH3FquqG68BGNWV3AX0aXugOjzpq5BFca+P3Vo=
Subject key identifier: 7F:D0:10:BC:2C:1F:5E:F8:F1:32:04:C9:D0:01:5C:BD:FA:63:CF:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BD09A741172DFC388A7161C20353F661C1FE0AC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea520cf2-1d99-4122-828b-8b7044eb56af.roa
Signing time: Thu 12 Mar 2026 15:40:03 +0000
ROA not before: Thu 12 Mar 2026 15:40:03 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d0:9a:74:11:72:df:c3:88:a7:16:1c:20:35:3f:66:1c:1f:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:40:03 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=41ed3d2de8465617a59e5f6bae73d2f40190804075de1147b600442052fcd391, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:da:0e:0d:76:93:e9:3d:9a:d3:cc:a3:8a:
0d:8a:69:b4:47:64:8b:16:c7:c5:9a:f7:74:f9:11:
0d:b3:a5:63:81:ba:57:8c:ec:13:64:b6:3e:2b:02:
47:09:32:16:c9:66:67:0f:50:b0:30:ac:27:5d:79:
5b:61:73:43:cd:62:34:7b:f0:2d:23:7b:a3:78:b9:
06:fb:36:14:e9:00:58:4e:cf:87:a8:11:ed:7c:37:
9d:ae:c9:29:8a:c1:a2:62:48:29:f0:17:75:f7:26:
b0:9a:34:04:98:7c:ed:94:ef:d8:8a:85:79:09:26:
a7:3e:71:6b:9b:56:0a:1e:27:7a:16:bc:e9:38:72:
19:ef:b6:82:a2:77:69:60:15:41:2e:b7:57:3f:52:
8d:b2:0b:9e:b0:74:bc:c4:1b:00:6c:2e:5b:b2:dd:
45:a6:e6:90:2b:b6:c9:9f:89:67:54:c4:0c:8c:27:
c0:ac:4e:01:64:fb:8f:31:d7:ac:0f:3d:09:42:44:
44:e1:56:e7:f7:9d:43:3d:94:9a:6b:9c:63:df:fc:
4d:81:d9:7c:b9:38:8b:f8:9c:c8:98:1a:1a:c5:f0:
57:e6:a8:b5:22:50:dd:65:2d:c3:4b:53:68:01:0a:
1c:be:77:22:ff:7f:95:06:0b:05:f6:8a:38:69:cb:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:10:BC:2C:1F:5E:F8:F1:32:04:C9:D0:01:5C:BD:FA:63:CF:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea520cf2-1d99-4122-828b-8b7044eb56af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:1000::/40
Signature Algorithm: sha256WithRSAEncryption
af:2f:a1:07:c8:e2:72:24:45:e5:af:4b:34:6b:a6:25:f4:2c:
1c:dc:92:1f:50:1e:04:53:41:88:65:cd:e7:09:20:38:82:39:
d9:6d:a0:f5:54:90:a2:26:c8:3e:67:03:22:86:81:0b:57:72:
10:a9:09:14:d3:75:d5:73:bb:0b:de:07:9b:26:20:64:c6:ca:
89:38:f7:0d:aa:fe:d7:0b:e8:f9:2c:63:69:15:12:0a:98:aa:
65:a4:18:1c:49:38:26:d2:49:3d:fe:ba:1d:59:c6:4f:38:de:
38:0e:5d:a2:5d:07:3b:9a:07:aa:27:b6:c1:e2:a4:d6:69:94:
73:27:e8:9a:f1:2f:64:6a:18:ae:53:4e:35:cd:a2:a8:c5:b4:
fc:36:05:0d:04:c7:5f:4a:49:5d:1b:64:e7:89:a4:31:33:f2:
70:84:10:9c:dc:da:00:6c:92:c9:97:39:05:f8:b9:7a:95:79:
11:b2:92:a7:d3:7e:a6:39:3f:a1:94:35:7c:7e:52:18:76:6f:
d9:9f:5f:53:12:aa:0c:05:ec:65:50:bb:0f:48:67:0f:65:f5:
b4:70:29:b6:dc:1f:30:29:85:ed:a4:26:ce:20:9c:3e:06:90:
2e:8b:c1:85:47:9e:75:74:b1:70:d2:05:41:38:4f:08:39:8c:
11:f7:2e:c3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUG9CadBFy38OIpxYcIDU/Zhwf4KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAzMTIxNTQwMDNaFw0yNjA2MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDQxZWQzZDJkZTg0NjU2MTdhNTllNWY2YmFlNzNkMmY0MDE5MDgwNDA3NWRl
MTE0N2I2MDA0NDIwNTJmY2QzOTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKR2g4NdpPpPZrTzKOKDYpptEdkixbHxZr3dPkRDbOlY4G6V4zsE2S2PisC
RwkyFslmZw9QsDCsJ115W2FzQ81iNHvwLSN7o3i5Bvs2FOkAWE7Ph6gR7Xw3na7J
KYrBomJIKfAXdfcmsJo0BJh87ZTv2IqFeQkmpz5xa5tWCh4neha86ThyGe+2gqJ3
aWAVQS63Vz9SjbILnrB0vMQbAGwuW7LdRabmkCu2yZ+JZ1TEDIwnwKxOAWT7jzHX
rA89CUJEROFW5/edQz2UmmucY9/8TYHZfLk4i/icyJgaGsXwV+aotSJQ3WUtw0tT
aAEKHL53Iv9/lQYLBfaKOGnL5FMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR/0BC8
LB9e+PEyBMnQAVy9+mPPvjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWE1MjBjZjItMWQ5OS00MTIyLTgyOGItOGI3MDQ0ZWI1NmFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DMQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCvL6EHyOJyJEXlr0s0a6Yl9Cwc3JIfUB4EU0GI
Zc3nCSA4gjnZbaD1VJCiJsg+ZwMihoELV3IQqQkU03XVc7sL3gebJiBkxsqJOPcN
qv7XC+j5LGNpFRIKmKplpBgcSTgm0kk9/rodWcZPON44Dl2iXQc7mgeqJ7bB4qTW
aZRzJ+ia8S9kahiuU041zaKoxbT8NgUNBMdfSkldG2TniaQxM/JwhBCc3NoAbJLJ
lzkF+Ll6lXkRspKn036mOT+hlDV8flIYdm/Zn19TEqoMBexlULsPSGcPZfW0cCm2
3B8wKYXtpCbOIJw+BpAui8GFR551dLFw0gVBOE8IOYwR9y7D
-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:58 2026 by rpki-client