Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
File: c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json)
Hash identifier: BCS4ElDhSyRnxITZNKf/FCOEiZHdmnIFy2Afl97IecM=
Subject key identifier: 38:1B:83:A8:5D:8A:AE:9D:F8:FA:2A:FC:29:91:72:17:20:B4:98:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63CD4EFD439F937322679351982557506A8C4F55
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
Signing time: Mon 04 May 2026 15:20:07 +0000
ROA not before: Mon 04 May 2026 15:20:07 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cd:4e:fd:43:9f:93:73:22:67:93:51:98:25:57:50:6a:8c:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:20:07 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=5957bd04aff1f01f821b5d252ddfc24e53bb3f23eb8f99858c580ebef18ae5be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:90:fe:cd:c0:31:67:13:59:0b:21:f0:db:
f4:a0:c8:0c:e8:75:05:39:70:7b:86:aa:85:27:4e:
55:71:df:97:55:21:a6:bf:09:18:61:4f:b8:f3:96:
20:d5:6a:bf:32:c0:d3:d0:6a:e2:23:bc:da:65:04:
1a:e5:ba:80:6e:e3:8b:1e:16:2b:10:d0:1f:48:df:
03:e0:40:61:3c:94:e4:a2:e8:d4:b2:ec:16:cb:26:
4f:9b:7c:4f:ae:c5:55:f6:00:c4:c0:72:fa:a4:4e:
fe:d7:92:4c:6c:a0:2a:59:f3:76:af:8d:35:c3:e5:
ea:e9:41:de:3c:13:c4:f5:55:65:4b:8c:2d:42:3d:
b6:76:79:81:ec:17:47:de:ab:ae:c0:30:bf:b8:2e:
40:f5:f0:8a:1a:23:f6:61:7f:d7:de:03:26:42:0c:
40:b1:01:7f:a5:cb:c8:4b:a5:15:90:33:75:55:a6:
b3:a1:f0:48:ad:ed:0d:d5:c3:17:80:10:c3:f0:27:
2a:fd:bf:a5:dc:25:34:12:f2:8d:74:af:6f:8c:a2:
95:b9:2d:df:97:45:47:bc:81:f2:65:78:0e:9e:b4:
52:1a:76:0b:5d:5f:c2:34:78:88:db:49:e3:47:f2:
00:02:10:a7:f7:49:d6:41:2b:e9:32:b7:b2:be:b9:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:83:A8:5D:8A:AE:9D:F8:FA:2A:FC:29:91:72:17:20:B4:98:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
92:81:24:ac:df:56:15:62:00:f5:0a:f8:15:9c:4c:3e:58:84:
d0:fc:3b:53:47:26:57:81:0b:0e:c8:6c:a1:53:8d:a1:8d:6c:
43:95:dd:b1:6e:39:cc:2d:5b:9d:fe:54:1c:93:f1:bc:98:88:
11:02:50:84:50:ed:c5:af:f3:90:bc:b1:be:7c:ed:63:b2:ad:
66:16:80:ce:26:5b:4e:48:05:99:00:02:d5:7c:5c:57:99:9a:
6b:f3:15:2a:74:03:e6:0b:29:3e:03:89:91:90:c8:52:a2:25:
41:41:68:0e:5d:fe:07:69:26:0c:81:4c:99:19:7e:41:2a:21:
ac:f0:92:06:74:e8:0f:65:a4:a1:b1:2e:1a:f3:f5:fb:c7:90:
dd:91:df:96:1b:f7:8b:92:a0:ef:00:2a:43:07:4c:c2:8a:30:
f1:72:95:0f:ae:24:c9:b2:53:e0:76:0f:27:f1:5c:2e:f0:f8:
f8:26:04:63:2f:c9:cc:68:4b:c9:c4:73:a5:b9:f7:0c:44:ce:
77:ef:3f:3b:2f:2d:c7:a1:c1:22:4d:6e:fc:e3:60:6f:7a:3c:
58:9c:98:b8:ae:85:ff:36:56:e5:bf:ed:7e:1e:a6:c2:92:b1:
df:ae:73:90:61:d2:ba:c4:c9:41:2a:33:4c:98:2f:3b:0b:77:
6e:58:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:12:44 2026 by rpki-client