Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
File: 35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa (raw, json)
Hash identifier: Sh9uA3BQl8xYvIAMsYLkyDfBxlJCG4v8EOBSEW5EltI=
Subject key identifier: CB:BF:45:EF:0A:AF:87:0A:AE:76:F1:91:4F:31:32:94:14:06:D8:9D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 555449ADA6CA09859804F8C602DD0B09E6A12320
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
Signing time: Mon 11 May 2026 01:50:07 +0000
ROA not before: Mon 11 May 2026 01:50:07 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:54:49:ad:a6:ca:09:85:98:04:f8:c6:02:dd:0b:09:e6:a1:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:50:07 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=a2c10375a01dda275e5764914e1260abc8ab1dad0c2e5176e6d42c0b7182cf6c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:b3:8f:17:8e:2d:d0:38:2c:97:19:f2:69:
cb:4e:94:71:cf:7c:72:67:d4:06:8b:cd:60:f8:58:
d3:53:00:cb:e3:af:01:7f:13:d7:ef:1e:8e:df:a4:
e1:a9:c2:ba:3c:c6:9f:fe:8d:b8:35:8c:33:a5:b8:
22:c9:59:46:db:5e:19:5c:56:4a:f5:53:fb:8c:91:
c9:82:79:c2:1e:91:94:d0:c6:f6:fa:b4:f3:5d:c0:
fd:36:a6:a2:02:cd:54:da:aa:6d:59:7b:b7:1d:64:
39:fc:73:21:04:99:0d:3a:9b:47:18:fd:43:42:bb:
54:d4:8a:84:8d:0a:06:c9:76:8c:18:68:85:a7:a5:
16:58:da:4f:9f:50:c8:dd:7b:b7:b4:3e:f9:7e:c4:
c0:d9:1b:ec:5c:dd:8d:9c:1f:d8:3d:17:04:6e:c3:
af:0c:31:58:7a:38:9c:bb:5a:41:93:37:ae:bb:79:
ed:00:84:37:f7:18:96:2b:ee:3f:5b:1c:76:fb:26:
d6:c5:89:66:93:fd:29:ae:2f:3b:1a:5a:52:40:b3:
f4:d7:01:18:67:c6:12:f1:95:bc:2d:30:31:15:21:
65:48:10:d6:e0:d9:cb:fc:7c:e9:ee:b2:c2:d1:3d:
05:b8:73:0c:26:d4:13:b6:1c:35:c9:eb:fc:45:b4:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:45:EF:0A:AF:87:0A:AE:76:F1:91:4F:31:32:94:14:06:D8:9D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:b000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:52:08:a5:37:78:75:49:69:97:ee:97:60:36:40:08:32:6e:
59:60:ce:88:23:67:c6:15:83:24:80:93:21:ef:a8:7d:f5:ee:
af:48:a6:fd:cc:f5:11:74:9e:2a:81:33:8a:b5:90:52:56:2f:
51:b4:02:ee:a4:15:72:d1:02:7e:44:19:44:c7:30:bd:fb:09:
b7:d3:72:1b:63:90:50:1a:44:67:99:2f:61:8a:98:32:a2:0e:
ce:6c:77:19:95:ac:71:9b:eb:0e:28:4e:7d:d2:12:99:3d:5a:
25:7e:ea:15:1d:b7:ef:93:99:d8:07:92:f6:ae:71:a0:88:72:
70:3f:d1:12:b8:e0:d7:31:a8:11:82:10:fb:47:70:58:53:ce:
5e:2f:96:98:75:f0:12:bc:80:78:e7:aa:f1:a0:77:16:09:75:
a0:0a:26:62:de:a4:de:b2:78:ee:b8:56:b5:16:e2:fd:6d:83:
35:9a:cc:ab:e0:d5:3d:da:55:8e:7a:fc:b2:70:8b:7e:57:d8:
4e:20:eb:4a:32:56:08:ce:88:62:75:9e:10:e3:8f:83:f2:62:
85:ef:d2:96:1c:47:7f:d0:6a:9f:29:d9:65:52:1a:a2:3f:e5:
33:aa:f1:4d:73:66:4c:2c:23:5e:ea:52:44:71:0f:3d:cf:bb:
3e:b4:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:44 2026 by rpki-client