Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa
File: a103a3a0-ff03-4978-a976-55516478c88b.roa (raw, json)
Hash identifier: yyAj8Qt9SA2ZQgj3tmJqvan0HAmErS3o6dhjYuAhJzQ=
Subject key identifier: 8E:D8:6E:BF:0F:BA:C7:55:59:B2:85:E5:B5:28:51:A7:00:7A:AB:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A0DBDEBC76F91906BAE3C0159B1DB44AC55DDC5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa
Signing time: Sat 02 May 2026 01:20:06 +0000
ROA not before: Sat 02 May 2026 01:20:06 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0d:bd:eb:c7:6f:91:90:6b:ae:3c:01:59:b1:db:44:ac:55:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:06 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=888667021dd65fe00773920c509b1cd399038fc46ebdfe69f4a1d473e7a4a1db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:58:27:00:68:75:08:0b:72:cf:21:47:c1:
44:1f:13:8d:58:ba:42:46:68:9e:29:4b:e9:29:4e:
a3:83:78:72:e2:92:2a:8a:83:8c:5f:ce:b2:de:bf:
76:f3:03:b4:36:c3:8a:9f:27:e0:d5:6a:d1:0c:85:
73:11:de:48:a9:df:66:e1:85:92:c7:63:56:c7:21:
21:51:18:fa:58:52:1a:79:27:ff:cd:12:e2:5f:de:
82:92:d4:15:38:82:02:19:e1:5c:9c:74:c0:20:b5:
3a:3a:8d:31:fa:67:ec:8e:a9:2b:ad:ab:71:9c:a8:
5e:66:63:cf:9c:2b:d8:d3:8c:1e:ca:8e:60:a4:90:
06:f6:9c:9d:71:cd:c1:54:4f:57:6e:f6:28:1d:f9:
3c:87:d5:73:6e:16:eb:2c:4b:5c:83:fd:e8:be:18:
0d:e9:9b:cc:49:6b:1b:9f:ba:4e:ce:01:ff:df:94:
ed:13:fc:7e:85:d1:68:a1:74:15:20:db:2b:70:15:
7a:1f:da:4f:32:a1:51:fe:c1:48:77:92:c0:89:93:
7d:5f:bf:70:db:c8:ca:90:95:aa:a5:0f:ed:a8:57:
73:3d:bc:27:c9:9c:dd:53:b4:22:66:75:b2:df:27:
39:d1:b4:f7:57:29:3b:0e:3b:4d:72:14:6e:ee:77:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D8:6E:BF:0F:BA:C7:55:59:B2:85:E5:B5:28:51:A7:00:7A:AB:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:6040::/48
Signature Algorithm: sha256WithRSAEncryption
2c:4d:4c:10:d4:c2:3a:d2:31:16:16:7f:5a:05:b7:cd:a9:b3:
0c:d3:d4:ef:43:70:b1:ab:03:07:5e:f8:ea:d5:70:5a:99:77:
ea:fb:6b:64:9e:82:b1:19:d9:03:4d:fd:3d:42:0b:4c:c2:16:
77:3c:85:7a:fa:c8:4b:62:e8:d0:9c:9b:0d:67:7f:66:53:7a:
d3:62:7e:55:a6:11:81:e9:f5:4d:72:77:d0:5d:8c:33:07:a3:
25:45:81:fa:02:fa:8c:92:19:6f:a3:90:d8:86:31:76:a0:05:
e4:f4:e5:32:56:0d:73:27:61:7f:e9:86:cd:d9:03:71:7f:9d:
c2:16:db:d9:18:f9:b8:1d:36:fb:50:f6:4c:49:79:32:cb:50:
78:8c:c5:28:62:30:68:c1:76:d2:06:d1:9b:36:49:a2:19:ae:
eb:0a:32:f9:de:d7:d8:43:b7:43:08:24:f3:ad:a1:0f:ea:77:
11:f1:21:d5:f6:33:05:06:36:a2:26:bd:1f:2f:45:66:31:bf:
a6:aa:6a:07:34:8e:3f:f2:8f:c4:33:23:bd:bc:0e:f7:19:86:
ec:85:b6:fb:22:a8:e2:89:e1:9f:26:81:6e:a3:48:9c:4a:4c:
5e:dc:c7:f5:e0:89:01:e0:7e:c4:05:1b:0e:48:8c:70:cc:e6:
97:de:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:15:42 2026 by rpki-client