Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa
File: 6a136ad8-9412-45df-a7b1-6bc848065b5a.roa (raw, json)
Hash identifier: m/U1M7OzJAOKl1kmUNQmqpVYK6uXPLl6QOiG1HkmohU=
Subject key identifier: C9:1A:24:1C:C0:23:DB:19:4B:12:23:DC:6D:A0:FD:85:3E:F9:C2:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 246F889767A9A1B9E1EF0002505F25AE4E094011
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa
Signing time: Sat 02 May 2026 01:20:07 +0000
ROA not before: Sat 02 May 2026 01:20:07 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6f:88:97:67:a9:a1:b9:e1:ef:00:02:50:5f:25:ae:4e:09:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:07 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=9e7223a136f054b199f0f42d2a1658f6baf07e0d4f3dec17c537a6b5548eac67, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:76:c9:09:a5:a1:c0:f3:1e:6f:a2:a4:18:
38:07:70:dd:cb:96:71:1d:f9:98:d3:2a:44:e2:0d:
0c:1c:0b:8a:14:27:a1:89:6c:a1:9d:ef:60:da:a1:
7c:4f:0f:45:4a:69:6c:12:81:ec:b2:50:89:5b:3c:
43:60:8c:78:01:9b:94:9d:04:57:e8:c0:1e:39:41:
42:0f:1e:2d:0d:3b:38:7c:40:3e:a2:8a:f2:3a:83:
36:26:7f:90:62:73:ba:00:c3:30:e7:3e:86:a0:11:
66:0c:c9:21:89:7e:e8:d1:be:5c:ee:e8:2b:f7:2e:
bd:43:c1:2c:36:54:85:d9:7f:82:90:0f:ae:ba:4f:
c2:81:ed:b4:d1:4a:ff:c5:66:db:9c:4a:13:cb:d2:
3b:96:2e:01:8f:a3:2e:c9:c9:17:5e:a1:8d:ec:cb:
d2:2c:72:b9:9c:32:6e:4c:a6:16:64:a3:99:a4:31:
5b:8c:4c:a2:e6:c7:95:49:e3:03:17:f6:f7:ae:b4:
8f:30:7a:a2:b2:b6:c8:b4:31:3b:f3:3d:01:9e:52:
e9:8f:72:68:3e:d5:ca:17:fa:d2:38:b6:8c:30:9b:
2b:85:dd:79:b2:3b:e4:e3:cb:0e:ed:38:25:d4:90:
8d:ee:ba:69:eb:e0:67:e1:29:64:f8:9b:da:ab:07:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:24:1C:C0:23:DB:19:4B:12:23:DC:6D:A0:FD:85:3E:F9:C2:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:08:55:25:55:53:ea:b3:44:2c:8b:d3:fb:2f:43:9a:10:91:
7e:da:32:53:cf:af:88:43:fa:cb:c4:d4:bc:2b:d6:ad:a1:b9:
2e:4f:72:5e:d1:89:f8:88:ff:c2:c6:fe:32:00:3d:4b:84:71:
df:8f:70:e6:85:d0:4d:37:46:c6:08:1b:68:c9:ba:61:18:6f:
78:c5:38:98:15:29:32:03:8c:80:b0:29:c1:85:66:42:7b:7b:
5d:00:90:f6:9f:fb:e2:59:4e:06:8a:3c:5a:95:0a:c6:63:88:
1f:3e:b5:86:18:30:70:7b:3a:77:6b:d1:ef:43:40:7c:19:5a:
25:f7:02:97:39:6a:7f:7a:8c:89:2e:74:d8:b8:1c:5c:97:c4:
b7:d2:20:c0:1c:d9:0b:4d:a7:68:19:03:41:aa:64:4b:80:a2:
32:48:0b:6c:75:e2:83:72:fb:43:be:d9:96:b9:01:c8:d2:d0:
31:e1:be:3d:10:fd:f7:d5:e3:4e:27:19:24:23:b9:32:bf:a7:
9c:79:7f:2c:1b:5e:dd:0d:af:cc:b6:e8:3c:fa:5c:a8:ff:02:
29:f8:b9:43:48:e0:35:fe:21:33:bc:f8:6b:67:07:a0:88:7b:
28:2e:49:2d:fb:a5:af:1d:87:4b:9c:d3:4c:5e:12:70:3d:79:
e5:09:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:25:20 2026 by rpki-client