Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87b40e07-162c-41f0-a264-3664fd0529fc.roa
File: 87b40e07-162c-41f0-a264-3664fd0529fc.roa (raw, json)
Hash identifier: 4nlHOSWEVVv5Wa+NwDpUo3qt40kOtvH9BvHY0yz2DmA=
Subject key identifier: 42:48:3A:E0:9A:CF:A3:96:38:52:AC:7E:C5:59:38:CB:5D:C0:4F:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B5E2A34038F9804A0F5F9913754BDC02B56D074
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87b40e07-162c-41f0-a264-3664fd0529fc.roa
Signing time: Mon 22 Jun 2026 02:30:10 +0000
ROA not before: Mon 22 Jun 2026 02:30:10 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5e:2a:34:03:8f:98:04:a0:f5:f9:91:37:54:bd:c0:2b:56:d0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:30:10 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=fc6d8a27fa0c845f61d1c909fcc9bbded7bae2834d453025ec7760f53e1af709, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:81:be:0b:5c:f9:70:83:67:90:cf:93:f5:
7d:5e:6b:e8:62:2c:5b:58:fd:e7:2c:bf:5b:24:22:
52:11:bc:5f:55:e6:cb:1b:eb:cc:37:b5:94:8f:79:
11:f7:1b:b8:75:05:64:06:26:c4:19:30:5c:20:1e:
0d:d4:bb:11:2c:c9:a8:2c:45:a1:22:46:19:0d:89:
a0:7a:e6:98:68:49:c2:52:b3:8a:b7:e8:e4:64:54:
c4:af:57:13:9e:69:fb:85:83:ff:ed:35:67:ff:74:
77:07:81:dc:43:0e:64:76:94:f1:5a:88:27:54:e6:
f4:11:32:c4:d9:27:71:e4:4e:3c:0e:cd:6f:8b:ad:
75:99:1a:73:60:c0:99:f1:f4:25:68:7d:58:ae:d7:
0f:e2:1f:23:2a:e5:0a:0d:06:d2:bb:e2:f2:6d:be:
df:81:4f:d1:12:4d:3d:17:59:ee:a5:72:ee:83:42:
b8:71:33:51:dd:5a:df:f3:a1:97:8b:ff:3a:e0:9f:
1b:a7:e8:73:3c:94:b1:eb:75:aa:0b:38:a8:41:bd:
56:6e:73:d8:36:ed:fb:ab:5d:54:df:2b:19:2e:4e:
3d:1a:59:7a:9e:b0:84:2d:09:dc:92:8a:8a:d9:53:
40:c3:e3:2e:14:1a:b0:a0:ca:76:df:a4:7e:81:84:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:48:3A:E0:9A:CF:A3:96:38:52:AC:7E:C5:59:38:CB:5D:C0:4F:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87b40e07-162c-41f0-a264-3664fd0529fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:5040::/48
Signature Algorithm: sha256WithRSAEncryption
8c:d5:24:ed:23:e5:26:f5:ef:3e:80:fb:92:84:ba:e7:ef:4c:
68:db:50:a8:1b:4a:68:be:74:df:06:b8:df:33:97:d3:0d:57:
3f:ae:35:a0:13:66:fc:1d:3e:4c:f5:b1:42:23:9b:cc:b6:b7:
d2:6f:34:b6:41:9d:46:23:f5:39:70:48:42:35:6a:49:c1:4d:
79:b0:1a:21:62:cb:33:c7:a4:58:95:35:6f:6a:48:01:5d:c9:
e5:54:b3:cc:21:db:93:b9:06:83:1c:53:15:84:a7:a8:e4:84:
39:ef:1c:f4:7c:d9:ad:dc:9e:9c:b9:a9:65:94:27:3c:4d:24:
83:c8:83:47:80:0a:4e:20:a3:59:7a:d3:00:ba:6e:f0:aa:35:
2e:cd:14:fe:d8:7d:71:28:ae:a3:51:db:1e:ed:24:35:b4:d6:
73:97:a6:3a:26:24:23:15:1f:21:81:49:de:ee:2d:20:04:51:
59:22:92:b8:1f:67:34:19:a4:8a:e0:29:9c:9b:8f:c8:a2:97:
58:83:b1:54:76:09:e6:b1:62:cf:66:f6:4c:b9:3d:9d:5b:d1:
aa:bb:e9:f9:04:7d:bf:4a:c9:0d:13:d2:78:45:50:ef:f3:d7:
96:81:7c:b9:97:cd:f1:fb:5c:6e:ee:d2:2e:77:ab:24:b2:c9:
ad:e4:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:04:45 2026 by rpki-client