Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
File: 492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa (raw, json)
Hash identifier: RtWpS+YRsG2T8i6tZqXAnaowDtSdUmoI8ODBvRyy4eo=
Subject key identifier: D0:85:07:CC:51:A6:EA:A9:C4:D4:1D:FC:12:8C:12:C0:4D:60:5D:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B990F5826ED41B55583C1AFA1B259E83AB1F9B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
Signing time: Sat 02 May 2026 01:20:10 +0000
ROA not before: Sat 02 May 2026 01:20:10 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:99:0f:58:26:ed:41:b5:55:83:c1:af:a1:b2:59:e8:3a:b1:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:10 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=e08b4ccd286d069380271127e91afe93882ebc7606ac50be7ab73b80457afe68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:be:1a:4e:f7:96:bb:b0:dd:ce:5e:fb:c8:
27:f5:29:b4:ad:16:5d:59:a7:5e:d3:74:6a:be:33:
78:3f:32:e9:b7:f1:4d:0e:e3:fa:59:b5:df:ca:19:
67:01:65:2e:4e:3d:34:e5:64:a2:e3:b9:85:39:ed:
a9:ad:7a:40:d7:10:a9:26:0d:98:42:f2:56:6d:2f:
14:35:d7:e5:8c:1b:55:b7:5f:89:0d:19:d5:65:9a:
84:26:f9:d9:33:07:ec:ac:4d:de:f4:7c:79:53:c4:
3a:b0:0e:75:63:cf:04:ee:c7:13:48:6d:3b:39:6e:
6a:9f:46:f6:2c:57:e5:b5:6b:ec:52:5d:a4:df:9a:
5c:b7:4c:24:94:05:ef:39:df:3f:b0:d3:d4:34:7d:
0e:0a:08:95:29:24:e3:b5:0d:55:0a:5b:be:c2:f9:
d9:2a:72:c2:7f:78:c8:fd:e6:bf:76:83:f2:c0:f1:
08:77:9f:9a:ed:99:b1:d0:a2:f3:23:fd:27:16:fb:
01:0b:aa:44:83:75:03:30:71:82:66:05:39:d4:40:
34:e2:a3:d2:f2:8a:25:e3:33:d8:a0:d7:4f:b2:ac:
e4:e4:7b:ff:72:0e:54:ad:ba:2d:01:3e:64:59:1c:
75:eb:d5:67:ee:86:ef:e9:b4:da:5c:09:c7:dd:43:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:85:07:CC:51:A6:EA:A9:C4:D4:1D:FC:12:8C:12:C0:4D:60:5D:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:2080::/48
Signature Algorithm: sha256WithRSAEncryption
c8:6a:89:51:da:2f:0d:06:4a:f2:ee:d1:ca:03:05:8b:10:c0:
65:54:28:cc:22:ad:ab:aa:66:14:c0:18:8c:e7:cb:3d:a6:09:
53:22:6c:9d:85:96:a9:44:68:37:c5:ac:2d:1d:da:3f:32:1e:
e4:3a:92:bd:b2:80:11:3f:ce:1f:4f:0e:d6:6a:0d:a1:8c:8a:
da:db:6e:c5:ce:04:1c:36:c5:e7:5b:f3:6f:bf:d0:81:8f:40:
37:87:84:e2:9e:14:a0:d2:56:77:b1:28:9b:7f:be:91:d0:e4:
cc:03:b1:21:9b:3b:4e:c5:45:93:ef:05:26:86:ea:6b:10:e7:
b1:1a:ec:c7:07:88:38:c1:23:16:7f:80:67:21:31:b3:83:9d:
0f:54:55:29:94:21:c2:1b:51:0a:39:55:f1:ee:bc:19:de:c1:
b4:41:bd:07:b1:ab:d3:79:a3:41:20:36:a1:de:97:c3:85:42:
13:c6:33:4e:e8:85:bc:b5:67:1c:a1:c9:d8:69:a7:9b:97:56:
7b:0e:c2:f3:81:2b:1a:8b:d1:5c:fb:f7:8a:7f:ab:b3:55:df:
41:9f:8f:e9:da:be:11:19:34:a2:d6:9f:2e:5b:50:a5:67:ae:
03:f9:4d:f6:9f:cf:88:85:7e:98:49:cd:62:9b:de:ea:be:5b:
87:a0:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:36:16 2026 by rpki-client