Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa
File: d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa (raw, json)
Hash identifier: XTKNBITqBi6yAYMqDl2fSAqEa33IlnxrEycBsgd3GSM=
Subject key identifier: 0B:E9:CA:37:D7:F0:94:F8:5E:6A:CB:65:B3:F4:93:8C:20:32:FF:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27513B81A2CC4A9C6A2E1AE8DEE151307B490051
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa
Signing time: Mon 22 Jun 2026 02:40:24 +0000
ROA not before: Mon 22 Jun 2026 02:40:24 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:51:3b:81:a2:cc:4a:9c:6a:2e:1a:e8:de:e1:51:30:7b:49:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:24 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=e038bbcb0e0af23d2093f5fc756aa436eab9ee935cff220d378f7c9486a18e18, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:df:e7:da:50:39:a6:c5:ef:ab:89:67:90:
a6:32:90:42:fc:2f:0c:3f:ac:6f:9c:44:19:25:d7:
fe:e4:62:1d:d6:7d:c5:52:29:3a:30:7a:64:bc:5c:
9f:98:16:ec:18:fb:83:53:cd:2f:6a:00:39:38:91:
8a:aa:15:d4:55:f2:30:6b:81:27:18:ce:63:b5:bb:
52:3c:f5:d0:e0:0a:e1:9e:2f:a1:68:6e:84:64:12:
ad:a5:32:8e:0e:bb:80:de:25:6f:94:c2:10:e2:7b:
26:7a:5a:eb:15:25:19:5a:5d:50:b0:25:f2:be:5d:
dd:d3:f2:6f:e5:ce:3c:89:d2:3f:cb:ab:ce:66:ec:
71:08:98:aa:89:0c:8f:e9:a5:11:12:12:70:9b:f8:
98:be:65:b8:33:de:e4:8e:3e:33:27:73:63:67:7b:
eb:6f:cb:ea:55:e0:e6:eb:39:8d:63:1e:28:bb:99:
23:1a:e4:90:83:02:b8:54:5b:8a:de:21:92:6e:d7:
07:f5:c7:d7:54:90:09:ba:dc:8a:f5:93:7a:7a:17:
74:6f:a8:2b:87:bf:03:ad:41:12:2e:3d:1d:97:b4:
e0:56:f4:14:1f:59:a2:d1:95:0b:88:16:18:49:87:
80:42:75:2f:7f:29:7a:37:06:c3:7e:99:92:69:77:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E9:CA:37:D7:F0:94:F8:5E:6A:CB:65:B3:F4:93:8C:20:32:FF:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:6000::/40
Signature Algorithm: sha256WithRSAEncryption
28:94:7b:be:3f:d3:43:99:31:6b:be:4e:87:a0:7f:7e:81:96:
26:d7:9c:fe:b7:eb:5e:3a:4a:a5:63:2b:fd:c8:9f:e0:a5:54:
fb:8c:02:ed:58:48:ec:f8:ab:ef:bc:9a:2e:76:91:4e:0d:65:
6f:47:2f:0d:1b:85:8d:63:39:ea:95:8a:23:fa:31:79:4c:34:
46:b9:3e:c0:b6:23:1e:e1:b3:85:5a:53:5d:4c:70:f5:b9:12:
cb:8f:08:77:18:7e:9f:71:63:63:70:59:94:eb:09:a2:f0:ad:
54:71:a4:38:af:5e:0c:dc:77:e3:9b:b3:a5:5f:dc:bc:5a:d0:
32:19:02:bc:e1:dd:6d:fa:50:fb:80:03:00:33:71:1e:d9:6c:
d0:6a:82:62:2d:81:0e:b3:14:01:43:7f:68:f5:75:8c:1c:b8:
32:b1:40:d6:52:61:d9:13:83:c4:92:db:46:f8:71:50:75:a9:
77:f4:65:df:5d:09:5d:2e:ed:26:7f:a7:98:4c:a0:14:d9:07:
f9:2a:07:a1:28:16:8d:14:fb:d5:10:f1:ed:7d:cd:f7:c1:84:
d8:ad:d8:a5:9f:f5:07:0d:97:82:ea:ec:d4:9a:af:e4:bf:ea:
0d:05:eb:53:5f:bf:e9:0f:7f:27:87:fe:e9:de:97:40:9a:c7:
00:da:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:31:05 2026 by rpki-client