Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
File: f33bbfc1-aae8-4484-ae82-14a752715759.roa (raw, json)
Hash identifier: j4j+9W9DND8lvPqcBAnmkcCNOkwtZSzYfJ4ZhtOrFYE=
Subject key identifier: 4A:31:00:FE:C3:21:FF:7B:0B:F8:CE:5C:09:CD:8F:54:55:64:50:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24505951AED9720286257A6E6BECFD2737DDDD04
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
Signing time: Mon 09 Mar 2026 13:36:36 +0000
ROA not before: Mon 09 Mar 2026 13:36:36 +0000
ROA not after: Sun 07 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:50:59:51:ae:d9:72:02:86:25:7a:6e:6b:ec:fd:27:37:dd:dd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 9 13:36:36 2026 GMT
Not After : Jun 7 23:59:59 2026 GMT
Subject: serialNumber=06bd6fbd99a9560200111356f229d80db13fdf06e7430ac3273ea02e5e5120dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:c3:c5:66:09:af:fc:ff:b1:49:5c:75:65:
58:80:89:d0:74:fe:bf:f3:c2:de:66:e3:8c:0e:8d:
af:82:a9:0d:e8:d3:49:83:68:01:72:b1:ed:2a:9d:
1e:42:54:1e:81:56:55:09:78:96:dd:12:f8:53:9d:
1c:a4:f1:7a:7d:bf:da:c8:7e:4b:a7:75:f2:01:62:
46:2a:8d:ec:9a:ae:7b:2a:a0:67:f1:a0:4c:68:be:
f8:67:2f:69:6a:06:97:d9:05:24:f2:61:50:ab:bd:
04:03:47:19:1b:9e:72:96:82:ee:b0:80:2a:0f:a8:
9e:47:fa:bc:33:d6:7b:ed:56:09:d4:9e:a4:2c:07:
02:b5:d2:46:de:83:fb:b0:12:11:32:7f:c6:e2:21:
fb:0f:1e:44:8e:21:31:90:d1:32:f0:4d:77:7b:2c:
68:fe:a3:54:94:1c:95:d7:64:78:b6:f4:f6:08:ef:
b7:ba:e0:3a:70:0f:3b:ba:68:92:28:fd:ba:29:5e:
52:36:f9:a2:f7:03:1b:90:08:f7:bb:bb:ef:07:fc:
76:c8:fa:19:70:b2:7b:cd:89:4e:74:b4:41:70:5b:
75:68:c3:df:4b:c4:36:d5:7c:0f:64:08:ce:37:fc:
e4:42:9b:26:bc:a9:80:05:17:1b:70:c1:22:2d:e2:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:00:FE:C3:21:FF:7B:0B:F8:CE:5C:09:CD:8F:54:55:64:50:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e::/32
Signature Algorithm: sha256WithRSAEncryption
5c:80:19:9a:f2:bb:f1:e4:8d:2d:20:e4:18:44:6d:5d:5b:f5:
7e:1f:db:35:40:8d:9b:78:4d:83:57:62:14:8b:d7:89:9d:c1:
4e:1b:1b:df:ae:17:09:94:eb:b3:cf:5f:d5:88:90:8e:06:ef:
69:a9:8e:e7:24:cb:5c:a3:98:d7:b6:4e:4e:40:55:af:c8:c0:
be:07:aa:d9:7c:c9:92:9b:f4:5b:41:a0:3e:36:8d:d1:1e:b6:
af:55:1c:1e:29:78:66:33:c0:73:11:d7:b5:63:3c:96:5e:8f:
95:97:af:39:5a:96:c9:75:4e:2d:70:43:4b:0e:c8:20:dd:0c:
78:fa:8d:46:9b:13:e7:44:22:34:6e:b6:93:3f:dc:fc:13:50:
22:9e:ac:b3:8a:a6:be:12:32:de:da:bd:87:67:1d:44:2f:89:
4d:36:28:8a:74:93:0a:fa:76:9b:77:38:2e:84:67:bd:ff:87:
25:1d:2f:59:f7:84:df:b1:96:44:d9:94:6f:0f:89:3c:53:bf:
4f:64:f9:5d:2b:d9:59:e0:4d:fe:ea:a9:a1:5c:f1:46:51:e3:
e1:63:4b:85:44:72:c0:38:0d:80:5e:ed:15:1a:8a:58:9a:37:
a2:4a:1c:58:01:b9:13:c6:9d:aa:a4:37:8b:5c:f5:15:a7:ee:
d5:e6:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:17 2026 by rpki-client