Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
File: c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa (raw, json)
Hash identifier: trmY95dAx3yCcjfYufvVvKSV6UpepPWINWNyKRYaRPQ=
Subject key identifier: 6D:22:B8:06:D0:1D:4D:74:9F:22:5D:92:40:A3:2F:CA:C3:D3:5B:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EFABCF7721617356015728A4B6958459FFD9FAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
Signing time: Mon 04 May 2026 15:20:55 +0000
ROA not before: Mon 04 May 2026 15:20:55 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fa:bc:f7:72:16:17:35:60:15:72:8a:4b:69:58:45:9f:fd:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:20:55 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=f32d614a412c1e7f0629bfb4938baddf9d14b89a6e3960b233e490da4195de0f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:6c:73:b6:df:8f:3f:90:6e:af:aa:67:c1:
f4:dc:f7:35:55:d0:96:68:01:a8:2e:0d:0a:d5:3b:
59:bd:70:14:f6:3f:ed:61:e7:ed:4a:2d:97:5b:ef:
17:63:cb:08:cd:af:3c:80:dd:df:86:a7:d1:f2:cb:
7d:a4:a2:22:6e:10:19:68:81:72:d0:7e:9d:b0:66:
b2:39:d9:3b:d8:ad:1c:90:4c:bf:73:ba:34:13:c9:
02:3a:d1:e3:8b:22:6b:fa:b7:7d:12:94:71:ba:24:
d6:8c:13:5d:99:c4:95:3b:64:59:2a:55:89:bd:ef:
88:fa:ed:97:13:f5:0d:91:ce:27:aa:b8:59:2c:37:
f3:20:76:82:f2:48:1b:dc:2e:67:eb:8c:9a:5c:2c:
a5:b9:8e:ab:b7:42:29:4e:d9:e0:b6:d5:29:f2:3c:
e5:f6:ba:e2:3a:53:17:b9:8f:ab:ed:c5:b1:2a:a7:
0e:5b:c6:ee:fc:31:ab:27:06:bf:f7:40:03:f7:ae:
91:c0:a0:90:38:02:5a:64:fd:e1:8e:08:5c:1c:e0:
e5:bd:cd:bc:a0:58:d0:a4:98:5b:3a:93:51:75:ce:
4f:36:b6:8c:67:41:66:45:7a:c9:b0:55:28:7d:79:
df:df:89:47:2f:72:0d:45:f6:d0:35:d2:b8:35:54:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:B8:06:D0:1D:4D:74:9F:22:5D:92:40:A3:2F:CA:C3:D3:5B:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5080::/46
Signature Algorithm: sha256WithRSAEncryption
8a:6d:ee:21:f2:f0:2b:9f:06:e1:3d:8c:ed:b9:40:ab:93:d4:
31:25:43:33:a2:ec:df:cf:40:1a:11:65:5e:c3:7e:74:1d:01:
41:7d:f9:eb:98:51:02:50:d1:06:75:a1:19:08:bb:c6:a3:2e:
cc:04:be:65:89:3c:0b:b0:22:19:80:ac:fe:74:03:25:8f:b1:
0d:1f:00:7c:71:8b:43:f9:92:80:82:b1:bd:77:82:7f:69:2d:
68:02:39:a0:59:75:9e:17:9e:99:ea:19:45:17:b6:15:a7:75:
53:ac:2e:b7:5f:5c:c3:6b:4a:7e:c1:a3:9f:72:f5:6e:76:26:
8a:20:76:46:8d:a4:a9:d0:05:9a:87:a9:43:9a:76:d0:37:64:
49:5f:c3:56:b5:21:43:0f:b2:e9:0f:74:55:a6:c4:44:b8:f6:
02:9f:22:f7:8f:d0:a5:31:f0:6b:fa:e3:fc:3e:b3:48:49:64:
3c:f0:dc:72:6c:33:40:82:56:c5:73:28:f5:d4:55:e3:2f:c7:
fb:0d:fc:0b:10:bc:c5:fc:5f:a3:aa:ca:90:fb:c2:21:e6:d0:
8e:17:a4:7b:df:2a:1d:a3:0a:16:c7:0c:af:e7:f2:b6:6c:a0:
33:c6:00:bb:9b:9e:cc:63:31:b2:eb:0e:52:dc:3c:c8:07:f9:
29:cc:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:38:39 2026 by rpki-client