Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
File: e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa (raw, json)
Hash identifier: kvwZf0HLN3pQNvTIQVoldN+N2WZF90XtGzSj4jyTe7A=
Subject key identifier: 45:F7:C7:C4:70:4B:9D:54:5C:F8:C2:9B:CE:6C:28:E6:6F:36:D4:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71F75B044E14993AD9981D3701B7E64F466D169E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
Signing time: Fri 08 May 2026 03:20:51 +0000
ROA not before: Fri 08 May 2026 03:20:51 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f7:5b:04:4e:14:99:3a:d9:98:1d:37:01:b7:e6:4f:46:6d:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:51 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=fa7cf2f02e5ca4beb998f46e5e2007941e9a34f43ec3c9b3b8ce1cf13795be08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:fe:60:56:c4:71:3f:6c:25:c3:10:6f:29:
6b:51:9b:90:3d:3b:a9:59:bf:30:84:36:79:79:87:
ac:58:87:a4:00:8a:e3:7e:a7:4d:c5:40:73:10:d0:
2f:4f:5c:6e:55:99:6d:50:4e:66:b9:69:cc:e1:5a:
4f:f6:d4:e0:8f:ca:6f:17:b8:1e:e3:25:72:f5:8a:
3f:0a:ae:93:61:79:53:e3:ca:c2:6d:0a:8f:ff:8d:
fb:9e:84:be:7f:8d:be:8a:d2:83:36:a4:73:f1:bc:
4d:6a:b2:af:fe:db:70:9a:1c:3a:ee:9a:3d:f9:e2:
b1:b4:05:3f:a9:10:87:84:8e:dc:32:bc:e3:fd:13:
0e:36:ab:f9:32:54:9e:d6:fa:32:a4:69:49:47:81:
5b:50:86:f0:34:e7:d3:a1:1d:3a:1b:6b:74:f9:ec:
0c:fa:b8:59:17:a7:70:71:63:29:43:26:ce:08:50:
2b:48:e3:08:1e:ee:aa:ee:36:e7:78:3d:d1:6f:5a:
36:28:1d:29:78:4d:28:ca:82:ff:a5:d6:b8:69:19:
45:22:b6:8f:97:4f:cb:13:4a:6c:ac:6c:f1:36:98:
77:b3:1f:38:f1:3a:0b:74:f2:1e:e2:43:53:c8:91:
20:14:99:bd:7c:3f:68:dc:fd:61:62:e5:6e:2e:e6:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:C7:C4:70:4B:9D:54:5C:F8:C2:9B:CE:6C:28:E6:6F:36:D4:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:880::/48
Signature Algorithm: sha256WithRSAEncryption
79:aa:52:bc:22:d8:6b:e7:b5:33:2a:77:df:71:66:8f:80:35:
d2:f0:41:2e:5c:bd:24:b7:ee:ed:15:cc:c7:69:36:54:b2:6f:
3a:2d:44:b2:54:bb:6c:09:d3:96:73:04:71:74:06:a6:cd:67:
41:9e:33:ee:f8:97:4b:b5:d1:3f:88:8c:56:91:e0:62:a2:04:
61:9f:7e:c6:9b:9a:ef:74:dc:ec:a6:eb:59:e7:1d:80:35:68:
e0:94:b9:99:c9:04:98:d0:09:db:ff:5e:8b:6e:1c:4b:66:a4:
9a:55:e2:af:ab:bc:b0:12:5b:2a:d8:d5:8b:d9:84:04:42:85:
7e:a8:25:ca:4a:35:19:49:64:7a:3f:90:04:89:67:f3:3d:90:
2d:10:4b:72:c8:e3:e2:1a:72:b9:bb:ce:5b:1e:0d:73:f9:a2:
61:8a:7e:d9:63:05:51:b1:49:68:02:65:d9:68:15:a4:bb:bf:
9c:bd:7d:d9:69:8e:12:8c:25:74:b5:9a:62:4b:de:af:eb:43:
fc:cc:f5:61:4a:14:2c:4b:0a:09:80:01:df:d5:d1:0e:ef:e3:
78:57:78:b1:90:92:e1:fd:f6:34:3f:80:0b:77:97:61:1c:55:
c6:0e:19:af:0e:b1:19:a7:5c:8f:8d:db:41:c5:d3:3f:7e:4b:
7e:e4:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:44 2026 by rpki-client