Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
File: 787a0cca-ea85-49b8-8c0b-bef4512620de.roa (raw, json)
Hash identifier: mwGRO6vzo6/3gLCUuDkDjQirupF1fbrmH5nxdWwSqnI=
Subject key identifier: C7:B0:EB:D9:91:01:6C:13:E2:F9:22:2A:27:CE:97:45:15:3E:D2:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1952EE44B642BBF7D3E4A9EF7E811483FF6D9F32
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
Signing time: Fri 08 May 2026 03:20:36 +0000
ROA not before: Fri 08 May 2026 03:20:36 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:52:ee:44:b6:42:bb:f7:d3:e4:a9:ef:7e:81:14:83:ff:6d:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:36 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=d647e2e4c2b28a930059e570a3a4ab274905f39d62a8c39ffab2f132e1d82ae8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:80:87:d8:d6:87:3e:a2:ed:38:fc:a4:44:
20:c5:43:49:02:ce:5d:66:9a:d4:ce:1a:78:77:1c:
27:f9:b5:bb:bc:e5:47:60:c0:49:18:7a:c3:ee:c0:
5b:a3:3e:4f:bf:79:15:29:9a:62:14:b6:cf:b1:7e:
31:89:ba:77:8d:8c:bb:5d:57:d3:aa:2e:b0:62:08:
80:9a:68:f8:86:8a:cd:75:b7:e7:15:a6:e6:a4:d2:
e2:b5:6d:50:82:e6:cd:ce:57:0f:3f:5c:e8:8a:4d:
c8:e1:31:41:87:6f:b9:46:d9:65:ce:ea:2d:36:37:
a0:4c:75:05:de:e3:37:88:70:33:36:34:da:04:9f:
32:5d:43:66:0b:2a:2e:fc:2c:9f:81:b8:1c:2c:cd:
16:4a:0b:f6:fc:8d:23:98:b7:be:de:3b:d8:45:6b:
4b:9b:ae:66:5a:06:b4:fd:5a:82:f8:08:94:03:bd:
40:57:85:4e:b6:38:a4:31:a9:9b:97:d2:a3:dd:1b:
a6:3f:30:be:a5:82:d8:5f:de:a5:f8:1c:3a:7e:fc:
94:80:ff:46:11:f5:77:96:5b:71:1b:c4:57:19:21:
6b:73:9d:6a:50:9b:37:d8:b3:d7:5a:e8:4e:c2:05:
84:e7:c0:89:b7:91:60:2c:ad:da:3b:81:1f:da:ff:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B0:EB:D9:91:01:6C:13:E2:F9:22:2A:27:CE:97:45:15:3E:D2:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:9000::/40
Signature Algorithm: sha256WithRSAEncryption
83:80:41:0e:0b:51:6e:bc:fa:e6:db:9a:c6:5a:9e:2c:0a:f7:
bc:27:e3:da:09:85:6c:93:5f:e4:42:d9:8f:30:d2:aa:6e:13:
9f:ac:5c:45:5d:0a:45:35:5f:60:de:31:af:e2:81:0f:8a:18:
94:29:33:3c:4b:1a:59:4f:27:6a:be:64:00:9b:d3:00:53:9a:
18:ce:7a:b3:bd:67:36:5b:d9:1f:f4:ba:51:34:7d:bf:28:a2:
63:bb:d3:57:fb:ba:3b:65:e6:d4:4c:c3:13:54:ab:bd:e2:b8:
33:4d:d9:1c:d0:49:03:51:c0:02:f9:fa:fa:7d:04:a4:89:08:
4f:86:c1:93:8a:6d:0e:d1:9a:f0:44:6e:5c:d4:02:fd:bc:99:
b5:80:42:d9:f0:e9:18:7b:d2:a2:73:12:82:9e:cc:30:c9:00:
6d:96:e2:de:e8:e0:55:a6:a2:5b:44:8e:75:7b:da:07:0d:60:
9e:44:98:e9:37:cf:57:a9:90:cf:3b:7d:85:12:4a:52:03:a9:
f1:49:f3:15:b1:9b:49:f7:75:76:91:30:25:d8:c8:8e:53:c5:
fb:8a:dc:ae:33:3e:ee:c1:7a:1c:76:ca:25:59:6a:e1:8c:6c:
6e:4f:dd:01:92:53:30:9a:df:51:43:f4:33:d8:65:f7:47:02:
6d:ae:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:37:02 2026 by rpki-client