Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
File: 2e678418-1e4d-4843-bded-3c28c17eebf8.roa (raw, json)
Hash identifier: 46EZwQHkYkU7YqbCx4pZ1r0nR2oOa00akrogZot08Bk=
Subject key identifier: DC:AE:3B:95:05:0B:D6:06:C9:AB:B8:78:47:55:47:E4:DB:78:95:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34433BCE5BB51163A975D50F69778B678239B10A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
Signing time: Fri 08 May 2026 03:20:57 +0000
ROA not before: Fri 08 May 2026 03:20:57 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:43:3b:ce:5b:b5:11:63:a9:75:d5:0f:69:77:8b:67:82:39:b1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:57 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=fed700f53d79fe3434371c7da8af4b7e6fa9fcfcf9ff5c4d0dab1d484f1d7522, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:27:eb:90:40:4d:dd:ed:1a:71:03:10:08:
57:b6:19:67:06:53:a0:ec:88:5b:b3:2a:9f:2b:0a:
21:4a:2b:a6:7c:67:81:d9:a6:5f:1d:b4:22:8f:1c:
08:d7:37:95:2b:9b:2f:49:f1:4d:9e:9a:0e:2f:2e:
99:86:4c:70:9a:98:c7:c6:cf:a6:d3:1b:35:cd:a3:
78:5c:e5:63:78:99:0c:da:99:eb:e9:0c:dd:81:a5:
4b:fe:c6:d6:1f:4e:88:ea:b8:18:13:2d:0b:38:cf:
88:da:fc:8b:8f:9d:e9:8f:1a:05:1a:d3:bf:5c:d3:
52:11:8a:4c:4a:91:aa:d8:92:9f:2e:0d:aa:44:8f:
c2:fb:21:eb:88:a7:a1:d3:f2:de:ef:82:6b:98:0c:
6f:7b:21:b4:eb:97:18:6b:08:1a:13:5d:40:38:fc:
c0:ca:ed:01:63:0b:06:ea:99:c5:92:94:b6:2f:71:
11:66:d1:f9:29:04:e1:9b:be:2d:ad:59:b5:8d:79:
b7:7f:12:b8:34:4d:8f:24:1e:0f:29:13:c1:41:12:
de:d8:10:06:16:0a:03:e2:68:04:21:b2:21:0b:64:
3e:52:16:0e:07:07:4e:b1:04:02:a1:b8:f4:3f:eb:
5a:6d:75:b2:15:48:ce:ae:b0:47:9d:57:b2:7a:a9:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:3B:95:05:0B:D6:06:C9:AB:B8:78:47:55:47:E4:DB:78:95:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5000::/40
Signature Algorithm: sha256WithRSAEncryption
81:21:46:4a:a9:87:b2:c0:fe:37:01:f6:67:22:cc:12:2d:41:
60:68:a7:c3:26:95:38:22:e1:82:b8:52:6b:d8:a9:90:2c:ed:
05:db:78:11:15:b3:c6:78:e6:35:79:28:fe:cf:dd:c1:af:6e:
02:e2:17:4e:a5:5d:03:8b:b3:a1:8c:7b:7e:18:80:e4:b5:5d:
fc:40:af:c6:2d:cd:31:dd:da:36:9a:cf:c8:f8:0d:87:46:47:
f3:db:39:27:72:4e:2e:da:97:4c:9b:1b:1f:d4:63:3e:68:8e:
2b:ca:d2:85:d8:de:a0:4c:54:b7:fc:a8:ab:91:5b:e4:64:d4:
0d:05:fc:d6:27:ac:19:b8:5b:bc:8c:6f:f0:1a:c1:04:5b:af:
30:63:21:b1:41:6d:f1:cf:b2:86:a2:b1:e7:b4:92:7f:5d:5d:
81:21:60:2b:2f:ba:46:a0:22:bf:92:b8:34:b2:af:e2:38:23:
e7:f8:9e:66:12:74:dc:f3:63:3c:bc:d5:a6:dd:cb:78:eb:c6:
ef:f0:df:be:5b:f0:55:ab:4d:35:cb:f0:58:2e:22:b3:a4:94:
4c:4f:05:df:68:88:2d:23:0c:f4:e8:fe:82:ac:8d:6a:71:d6:
dd:b6:84:63:9c:99:5b:ed:8e:fa:10:e3:1d:b1:da:e1:5b:3c:
d8:70:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:15:25 2026 by rpki-client