Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
File: 689f17ea-2ccc-4beb-bf91-0695da802222.roa (raw, json)
Hash identifier: ZhxU15Spq0VpBtb+/BO2nQMTGZjSUIhbPPYbwfijC98=
Subject key identifier: F1:57:D9:F0:23:CE:A9:E6:D5:ED:4C:3B:59:F8:3D:BE:5B:9A:1A:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7424F30ACF09364F7317339A00B8B321F9BE9576
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
Signing time: Mon 11 May 2026 01:50:36 +0000
ROA not before: Mon 11 May 2026 01:50:36 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:24:f3:0a:cf:09:36:4f:73:17:33:9a:00:b8:b3:21:f9:be:95:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:50:36 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=789aa5a254c60258806c00fc9f141647eedcc901fdb8b01741a779c61cb30dcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:24:11:41:95:c7:90:b7:fb:95:5e:80:a3:
1e:27:e8:65:1d:76:ba:b4:0e:b5:f5:f6:bc:85:77:
6d:3e:f2:97:64:84:e7:b2:8c:55:32:eb:41:95:8c:
1d:5e:7e:8e:dc:2d:ee:3c:21:19:02:ab:c8:c5:2d:
99:44:55:da:c9:b1:32:49:62:f6:b5:4b:66:34:be:
a5:bd:17:02:6a:38:e4:48:9c:4d:84:98:7a:97:0f:
1a:5c:5b:12:3e:10:19:9d:33:67:5a:33:f6:1d:0d:
1d:bd:8e:10:77:28:cf:9b:b5:7b:d1:1f:77:88:e0:
e6:b1:e7:90:b9:dc:91:03:e2:a3:5a:70:a9:5a:5c:
9a:4f:51:b7:b7:27:6f:78:7f:b3:fc:b7:d2:d3:d2:
b3:4c:9d:24:f2:5e:4b:86:ec:77:b3:d2:23:47:82:
ea:2b:39:85:25:e4:59:0a:3d:20:9a:c1:7c:a7:87:
b7:b8:45:8b:16:31:cb:f7:19:89:99:ef:6c:24:5d:
cf:19:e0:85:4a:1b:8b:18:dc:47:3d:40:21:3e:03:
10:d2:67:df:e8:31:9b:ad:1b:5e:58:85:2e:7b:14:
34:eb:07:9f:63:46:28:48:32:8d:0b:fb:78:db:ec:
af:02:36:33:cc:7d:99:9a:d9:a1:62:a4:c4:fe:aa:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:D9:F0:23:CE:A9:E6:D5:ED:4C:3B:59:F8:3D:BE:5B:9A:1A:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:1000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:53:f9:cb:2e:23:ee:5b:b2:76:b1:7a:86:6f:27:d1:3a:e3:
27:c8:64:ee:32:f5:de:d2:d5:65:96:2f:fd:f9:eb:54:08:3e:
10:f3:f2:7c:e5:65:5f:13:08:d3:0b:c3:9a:f9:7c:eb:71:18:
df:5f:91:4a:16:85:d9:7c:74:8f:4c:05:19:2a:20:7a:14:e1:
31:c3:85:75:35:9a:c5:e3:46:e0:17:1e:11:50:80:79:f7:8e:
13:9f:4e:5a:46:9e:d6:b5:7b:aa:d4:d9:36:9e:cd:dc:4d:0b:
18:1a:33:70:cb:d5:fd:4d:92:0d:0d:1d:a0:b6:3e:65:9e:32:
85:c9:b9:a2:78:86:43:2b:81:61:c2:14:f5:42:32:60:1d:a5:
7f:9d:30:03:78:01:83:19:14:79:9a:67:01:9e:c9:2b:5f:84:
93:a6:c2:8f:ff:46:df:5f:61:77:43:e4:58:68:49:70:00:f8:
0f:04:f9:08:31:40:80:39:0f:cc:39:1c:00:5b:b3:bc:2d:54:
b0:88:5d:0f:b4:fc:1f:f9:f5:29:a3:61:e4:84:54:01:7e:8b:
87:de:df:d5:3c:99:27:91:da:ff:2c:44:9c:44:3a:cf:04:e7:
38:5f:79:9a:76:64:f2:7b:dc:da:c0:34:f5:3f:28:7b:96:78:
d9:eb:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:12:39 2026 by rpki-client