Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa
File: 75900e8f-9582-4f56-8b92-09a50d5110f8.roa (raw, json)
Hash identifier: 61+WQYKYvd76tvQM1MrpWquN5VG5cZj9ETweaoNmsIs=
Subject key identifier: E6:67:A1:63:AC:D3:64:78:1F:01:06:6C:3E:72:47:0D:D2:7B:6D:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4178F47129B4D77B4872CB0E4BA54E91486520BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa
Signing time: Mon 04 May 2026 15:20:57 +0000
ROA not before: Mon 04 May 2026 15:20:57 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:78:f4:71:29:b4:d7:7b:48:72:cb:0e:4b:a5:4e:91:48:65:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:20:57 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=015c920d03f16cfc969948d6dc9270f62d10d0461fa024a20a32cef3ab96894a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:e5:1a:06:a8:56:71:9f:52:29:cb:df:86:
17:fd:f9:5d:ec:54:1e:7d:8d:a4:55:16:ea:78:98:
e3:76:89:aa:97:48:c4:2e:9d:88:2a:f5:44:f5:31:
33:02:d1:a8:ae:18:ef:80:35:0b:0a:8a:80:07:ae:
cb:3b:b4:34:30:d9:60:20:eb:d3:66:44:f2:6f:ba:
52:33:f6:76:03:24:79:ab:3f:de:9c:73:4a:d2:52:
42:80:0f:10:21:0b:93:f2:ea:b8:79:47:51:a3:6a:
37:31:b8:d6:ec:57:df:a5:24:0f:03:27:a7:54:b0:
4e:4a:96:f3:19:a0:2f:66:36:0c:93:bf:c9:50:06:
df:65:50:7c:02:65:89:24:c5:bb:86:66:c6:f5:58:
e2:8b:eb:6a:8e:1a:7c:b9:e3:0f:78:7a:83:11:6e:
15:53:2d:95:3c:b6:0e:e2:3f:23:5f:ad:4d:f2:46:
28:30:72:0c:e0:db:c4:ad:b7:a2:f9:61:2b:46:6e:
72:1d:cb:fe:6d:bd:da:c7:81:ce:f3:ef:8b:4d:5a:
b0:4e:78:a9:71:fc:09:b7:bc:25:6e:14:0d:27:8e:
aa:c8:79:e9:51:7e:92:79:83:a2:50:e5:45:9b:2d:
cb:c2:24:f2:7a:8b:8e:d9:be:f8:ab:2c:08:5f:16:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:67:A1:63:AC:D3:64:78:1F:01:06:6C:3E:72:47:0D:D2:7B:6D:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a000::/40
Signature Algorithm: sha256WithRSAEncryption
77:0a:29:8b:32:80:08:df:7f:90:08:30:fc:55:84:0c:15:ca:
de:58:a5:c2:86:d9:a4:d0:63:ed:57:3f:3e:9c:73:b1:b1:33:
7e:83:c1:75:fe:1a:e9:40:85:74:f5:33:9d:23:89:bd:cc:f2:
10:7c:f8:05:f9:17:9a:5a:92:27:08:28:be:bd:26:c7:ab:78:
4c:0a:98:29:86:76:f2:b8:f4:bd:db:b7:3e:16:d2:a6:73:71:
be:48:bc:04:39:a8:84:fa:db:61:f1:f0:63:ba:8c:c6:50:a8:
a5:98:83:54:33:e4:54:db:f8:bc:e7:d2:cf:d4:36:5d:6a:8e:
18:1e:48:8c:7d:ac:e4:28:22:b1:06:2b:de:e0:90:b3:79:59:
1f:5d:86:ab:24:f7:88:e4:73:30:dc:33:86:60:2f:bc:86:cf:
28:91:78:94:94:15:1b:e5:45:c9:a3:75:fa:2a:fa:cc:61:c0:
31:71:bf:1f:45:68:4b:9f:4c:da:b4:3d:4c:2a:53:a8:89:0d:
d2:41:c8:f5:51:3c:d6:e6:85:f7:b7:7f:f6:63:e7:4f:3c:36:
32:f4:19:88:2d:8d:66:4c:f7:00:ec:70:b8:db:45:a5:0f:b5:
5b:2d:4c:1b:4b:fd:95:fa:be:dd:8b:0f:d1:9d:54:4d:e4:0c:
e3:8d:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:02 2026 by rpki-client