Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/204faaf5-d9b6-49f1-85b8-3ad06aec7758.roa
File: 204faaf5-d9b6-49f1-85b8-3ad06aec7758.roa (raw, json)
Hash identifier: PfBqA44qRs1/IxjdjojVuEHKeuBEnog7fym22vehvrM=
Subject key identifier: A2:4B:AB:76:6A:2E:FC:71:67:7B:0F:3A:C0:B1:90:5E:67:EF:56:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65EEA797D50ABEA4DDC5D6548AED57F4E3B2F235
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/204faaf5-d9b6-49f1-85b8-3ad06aec7758.roa
Signing time: Mon 22 Jun 2026 02:40:08 +0000
ROA not before: Mon 22 Jun 2026 02:40:08 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ee:a7:97:d5:0a:be:a4:dd:c5:d6:54:8a:ed:57:f4:e3:b2:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:08 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=98057f747896c17d70be79e36fb9165d4033291a570a7a08b72a3eb7bc03a47a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:f0:09:c0:97:01:4a:e7:1b:07:ce:ab:3b:
7d:23:b4:c9:85:8b:a7:ab:f1:72:f5:15:cc:63:69:
59:73:00:cf:77:6e:30:86:40:12:73:82:8b:30:1e:
e6:43:4d:66:c5:b1:62:36:3f:12:a2:9a:f3:57:19:
f3:bd:0e:ee:a0:54:d7:fb:1b:b4:5c:eb:55:2c:a0:
4d:11:be:61:fc:9b:2d:a4:4c:37:6e:f0:b1:e3:12:
fe:ed:47:e2:94:1b:77:b4:90:d4:30:1e:3a:a0:01:
4d:26:f4:0b:bf:84:6a:d5:8a:95:46:81:c8:19:6b:
b0:0b:6d:86:4b:b5:e1:6a:d7:71:2a:3f:b5:cc:a3:
82:32:f8:62:9a:78:df:a4:5a:78:d2:39:6f:8c:91:
2f:cc:31:5e:d8:05:bb:85:b8:77:6f:a1:db:69:0b:
79:4e:be:48:4d:81:49:e6:4b:61:05:95:2b:a6:1c:
5d:9c:5a:78:ee:d6:af:e3:43:95:3c:02:16:fb:66:
10:c6:94:38:b0:3a:7a:b3:53:46:e1:4a:9d:58:28:
0f:35:4c:ca:f7:b1:40:1f:15:98:1c:96:ca:29:fc:
4c:2e:b7:5c:0b:0b:26:e6:5d:a7:a1:d1:f1:53:09:
50:d7:54:e9:e5:99:0c:bb:fb:d4:47:58:81:d0:de:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:AB:76:6A:2E:FC:71:67:7B:0F:3A:C0:B1:90:5E:67:EF:56:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/204faaf5-d9b6-49f1-85b8-3ad06aec7758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
8a:11:86:ab:da:c3:94:c8:29:dc:f6:79:b4:6e:8c:18:39:9f:
08:34:ea:86:0b:8b:9c:cf:f2:da:6f:e7:9b:12:b6:28:5c:31:
ee:9f:86:ba:bb:d3:40:44:85:8f:31:ba:ff:e8:02:8c:7a:9f:
50:7b:6d:62:21:74:ce:c8:49:4f:c0:64:1a:e8:67:c9:a9:98:
42:07:d7:72:c1:25:db:a4:1b:04:b2:88:e1:aa:2e:36:8a:37:
c7:ac:d9:61:1b:32:47:87:5f:8e:a2:f5:a8:4c:f3:1c:18:52:
95:f3:66:24:06:26:a5:55:c2:4d:82:8f:c7:d9:65:bf:0d:e2:
90:9f:24:ec:cb:83:9b:75:8d:22:70:78:94:e9:07:c2:10:ea:
6b:2d:29:c8:23:a3:cd:91:56:c2:8c:2d:b7:21:1a:b0:a3:b7:
c3:d4:03:06:a8:6f:f9:9d:66:ca:cd:11:9b:86:21:e0:33:97:
af:62:2c:aa:b0:e2:a5:aa:99:a4:df:96:b5:e0:46:e4:db:ae:
97:74:63:a1:1e:88:37:02:1c:b7:23:1c:96:95:45:5c:71:e2:
b3:da:50:29:5f:98:76:0d:c1:cd:d3:8a:84:ba:b3:b0:f7:6a:
3a:e2:61:c0:20:a0:ae:50:d5:74:c9:dc:f8:91:54:54:17:5d:
5f:1b:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:24:56 2026 by rpki-client