Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
File: e3c7ab12-58a1-44db-9063-7d7fef442d38.roa (raw, json)
Hash identifier: OVQO+XpuL/vBffSYb8P5jl5d9ZgpmYahJIGXKhKIhaY=
Subject key identifier: A5:64:D5:B7:95:92:C4:A6:95:55:63:8D:4E:59:67:4B:FF:B2:2D:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D15E5A05D228D32DEAE242C11590B6883A5E563
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
Signing time: Sat 02 May 2026 01:30:09 +0000
ROA not before: Sat 02 May 2026 01:30:09 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:15:e5:a0:5d:22:8d:32:de:ae:24:2c:11:59:0b:68:83:a5:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:09 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=4d028c2859bed1dce12a4ffe86a8cbdcd175b507a66767ae735314c725195e5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:69:f6:5b:5d:29:09:00:35:66:28:38:4d:
54:74:a9:d0:c8:f7:c7:ce:f7:e6:77:a5:26:2b:4a:
e8:cd:6a:0b:a1:6e:e8:a0:78:bf:7e:6b:7a:99:a6:
9e:73:52:e2:be:b2:3c:21:1b:ab:86:28:cf:8b:39:
d7:d7:e7:c7:6b:9d:0b:f3:61:c6:1f:99:33:09:03:
a5:ea:7d:78:cb:f1:e1:08:97:1e:b3:9e:d5:7a:9d:
8c:3b:aa:03:73:67:d2:4b:f5:38:09:8a:19:5a:3b:
bc:88:17:5e:ce:26:d1:db:5a:0d:92:32:46:2d:0b:
bc:6a:81:9e:ef:ee:0e:c2:47:30:b3:19:e4:41:ee:
73:e7:a1:1c:24:10:b4:4a:b5:41:a4:25:f9:b5:34:
5f:97:1f:d9:05:d5:d9:2c:93:24:e4:83:11:a7:24:
99:3f:1f:8d:bc:d0:90:c7:b3:bb:4f:34:e3:b8:fa:
5d:c9:71:24:fa:c8:a1:2e:25:a5:e2:5b:9c:55:d5:
93:49:b2:c6:d8:7c:cf:24:fa:99:63:f9:af:20:1b:
8f:76:70:c3:85:76:1c:84:d1:76:b7:58:50:b3:ed:
da:d5:43:1b:22:77:e5:94:a9:cc:b8:ed:76:4c:9e:
f3:36:9c:44:3f:d7:f7:75:df:e2:63:5b:ce:72:54:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:64:D5:B7:95:92:C4:A6:95:55:63:8D:4E:59:67:4B:FF:B2:2D:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c080::/48
Signature Algorithm: sha256WithRSAEncryption
3b:92:75:4b:c0:e7:5f:e9:a9:7a:fb:a2:ab:53:b2:ee:03:f7:
ed:e4:a6:54:22:06:ef:b8:6b:f3:3f:0f:d5:0a:02:e0:ea:4c:
7e:9e:aa:1f:23:b9:d0:eb:f9:36:5e:65:b0:91:2f:d9:ef:22:
46:86:13:23:a8:9f:b4:5d:a4:66:27:bb:a3:a6:0f:1c:c8:aa:
74:6a:48:5f:23:45:10:6d:84:52:06:21:5e:e9:1c:b0:b5:c6:
30:c7:dc:c8:f9:a0:ce:4e:b4:1f:d1:6f:d8:64:24:af:85:8f:
82:4b:dd:f2:36:d3:82:d4:b6:23:26:08:76:ed:a7:db:ef:ad:
b2:0f:56:b1:be:3c:1d:70:70:40:13:f0:c6:28:43:54:71:cf:
40:37:45:b5:6a:3b:bd:86:ef:e5:bd:be:1c:bf:9a:b2:80:58:
49:74:85:8a:9e:7f:49:bd:08:93:d3:fa:41:03:8a:ee:59:78:
ae:7b:f1:44:75:23:09:e9:ad:05:cf:8a:10:6e:0c:06:7b:7b:
a5:71:63:33:b4:d0:21:f3:79:68:39:0d:fc:6a:76:c7:d8:5c:
b6:57:23:dc:03:17:5a:a8:0b:58:85:a4:30:ff:be:dc:17:3d:
51:15:07:19:8f:2f:66:d1:cf:73:cd:c1:9c:07:0c:3a:2c:b7:
a7:96:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:32:23 2026 by rpki-client