Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa
File: 8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa (raw, json)
Hash identifier: R/vc3GvMY6H6lUVBYGBnVkV1D2cxSNM3ZqZdKU34aNE=
Subject key identifier: 52:02:42:E1:04:CF:1C:4F:93:C9:03:0D:46:1A:64:F2:ED:48:2B:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B4C62FE38A86F3168E7436834BF9F5002D565A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa
Signing time: Sat 02 May 2026 01:20:08 +0000
ROA not before: Sat 02 May 2026 01:20:08 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4c:62:fe:38:a8:6f:31:68:e7:43:68:34:bf:9f:50:02:d5:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:08 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=cf75a438d1dadef9cc422204a426ca939c2b8323a5d916c22cb1ec98d8166607, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:b5:97:66:53:79:bf:e9:aa:4b:37:5f:54:
92:50:7d:04:ac:f8:91:a0:83:08:31:9e:1e:eb:e8:
ab:ce:c3:b7:de:f8:99:64:a9:d7:a8:23:92:32:38:
f5:43:f1:e6:b5:0d:d1:56:8a:a4:14:ea:e6:2b:ae:
b7:42:24:c7:ec:78:ef:72:3f:53:ce:ff:c8:ce:50:
4d:f9:01:66:32:4d:c2:95:87:8e:56:ba:ab:b0:1e:
30:20:0a:3d:ee:e0:e8:f1:a7:2e:7b:f5:4c:23:bc:
18:72:20:1d:3f:8d:02:25:ef:47:62:f9:9a:fe:26:
c2:bd:aa:1e:ec:ce:9d:bf:95:7e:68:cf:a0:3b:94:
d1:dc:d3:aa:fb:15:cf:25:b2:0d:7d:fc:7f:5e:c4:
0e:e9:2c:2e:bf:dc:b7:91:18:d6:5a:f8:17:76:ae:
29:95:85:34:3d:a8:ed:72:93:6b:cd:9d:f1:80:5a:
2d:4e:ca:22:19:aa:96:31:19:e7:f3:f9:6e:31:86:
7d:12:5e:61:5d:e8:ae:5e:fa:8e:2e:12:19:51:7b:
3f:a7:3a:91:a3:9e:33:ea:fe:3e:c0:63:70:c3:62:
35:b3:2a:16:c4:01:05:d9:fc:1e:1b:78:ff:7a:83:
46:4c:4c:7c:12:c6:44:5c:ca:58:4d:4f:04:c2:3b:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:42:E1:04:CF:1C:4F:93:C9:03:0D:46:1A:64:F2:ED:48:2B:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c040::/48
Signature Algorithm: sha256WithRSAEncryption
25:80:f6:1d:b4:c7:a8:1d:c5:de:06:c8:2f:ef:51:5a:48:ba:
61:6d:da:af:04:fb:df:dc:10:61:14:b3:80:2b:a3:49:38:59:
ef:27:ae:19:c4:4d:c4:be:94:aa:84:b9:90:e5:12:22:48:47:
c8:0f:24:39:b3:a1:f4:81:7f:cc:29:d2:27:90:9b:13:2c:ed:
35:ef:d2:b3:8d:2b:6f:52:ec:ce:c6:87:45:fe:0b:5d:56:da:
1e:d0:c5:3e:0c:d2:c9:35:e3:17:cc:19:6c:4d:7f:d5:c8:b2:
c0:00:d5:1b:38:e9:7b:73:7a:e3:e8:c4:8d:14:09:d8:c8:e8:
a3:94:f4:f3:8f:86:8d:17:56:f0:4e:d6:10:e6:ba:c3:fc:44:
72:c0:7a:1b:30:33:46:55:fd:2a:f1:37:4e:e5:52:2f:06:ce:
3b:bf:d6:dc:56:3a:1a:01:9c:af:c9:f1:2c:dc:24:e8:7d:bf:
6f:95:32:08:aa:af:d2:22:cd:32:4d:c2:b6:a2:66:ca:3c:84:
43:14:70:0b:75:39:2d:d3:69:fb:49:48:92:0b:4c:31:1e:f1:
eb:75:65:0d:2d:67:5e:2f:a0:b7:38:ca:32:c3:a2:3f:1b:9e:
76:7d:2b:8d:c6:1d:c4:ce:be:1b:65:3b:1a:1f:fa:65:01:84:
71:a5:d3:8c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUe0xi/jiobzFo50NoNL+fUALVZaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDIwMTIwMDhaFw0yNjA3MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGNmNzVhNDM4ZDFkYWRlZjljYzQyMjIwNGE0MjZjYTkzOWMyYjgzMjNhNWQ5
MTZjMjJjYjFlYzk4ZDgxNjY2MDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKiEtZdmU3m/6apLN19UklB9BKz4kaCDCDGeHuvoq87Dt974mWSp16gjkjI4
9UPx5rUN0VaKpBTq5iuut0Ikx+x473I/U87/yM5QTfkBZjJNwpWHjla6q7AeMCAK
Pe7g6PGnLnv1TCO8GHIgHT+NAiXvR2L5mv4mwr2qHuzOnb+VfmjPoDuU0dzTqvsV
zyWyDX38f17EDuksLr/ct5EY1lr4F3auKZWFND2o7XKTa82d8YBaLU7KIhmqljEZ
5/P5bjGGfRJeYV3orl76ji4SGVF7P6c6kaOeM+r+PsBjcMNiNbMqFsQBBdn8Hht4
/3qDRkxMfBLGRFzKWE1PBMI7kQUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRSAkLh
BM8cT5PJAw1GGmTy7UgrfjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGUzZmRhZmYtNDU1Yy00OGQ1LWJiYWQtZTRlNmYyZWZjZDhjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GrA
QDANBgkqhkiG9w0BAQsFAAOCAQEAJYD2HbTHqB3F3gbIL+9RWki6YW3arwT739wQ
YRSzgCujSThZ7yeuGcRNxL6UqoS5kOUSIkhHyA8kObOh9IF/zCnSJ5CbEyztNe/S
s40rb1LszsaHRf4LXVbaHtDFPgzSyTXjF8wZbE1/1ciywADVGzjpe3N64+jEjRQJ
2Mjoo5T084+GjRdW8E7WEOa6w/xEcsB6GzAzRlX9KvE3TuVSLwbOO7/W3FY6GgGc
r8nxLNwk6H2/b5UyCKqv0iLNMk3CtqJmyjyEQxRwC3U5LdNp+0lIkgtMMR7x63Vl
DS1nXi+gtzjKMsOiPxuedn0rjcYdxM6+G2U7Gh/6ZQGEcaXTjA==
-----END CERTIFICATE-----
Generated at Tue May 12 23:10:52 2026 by rpki-client