Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa
File: ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa (raw, json)
Hash identifier: ryPPL+ensy6f+UMT8M0e6f2466pGDsyNnTal/FYoVo0=
Subject key identifier: B3:5A:90:F9:F8:2C:40:A6:53:BE:3B:1B:04:90:5C:D0:A4:B3:73:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35A6A782A62806FEB372A7351F44BB486D224404
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa
Signing time: Mon 22 Jun 2026 02:40:03 +0000
ROA not before: Mon 22 Jun 2026 02:40:03 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a6:a7:82:a6:28:06:fe:b3:72:a7:35:1f:44:bb:48:6d:22:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:03 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=8413cb78d80083dd850b216205312b8cba2c215f611e81eea3aa47aaa9ad65b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:2b:28:c6:72:f1:c5:73:64:ee:f1:3b:a0:
fc:96:a1:b8:8e:0e:4c:d4:0c:43:b7:70:d9:bf:ef:
6c:fa:d1:db:f9:43:00:00:6e:20:9c:90:f7:33:e2:
04:8f:ef:c4:c2:c6:32:df:4e:50:7e:02:2d:c8:64:
2a:9a:f8:50:c0:b5:37:19:48:50:98:bb:84:f6:6c:
6f:22:31:80:2d:6c:25:20:16:9d:d4:d2:b3:e4:1c:
b3:e2:89:d6:e9:94:5c:a6:54:11:2b:d6:84:19:15:
c0:ae:f9:04:b3:d0:06:19:67:ac:4c:05:68:5a:44:
e9:da:7d:c4:fb:e7:1a:35:8a:cc:a5:0c:0b:db:1b:
b7:38:0e:23:8b:86:17:92:7e:00:2c:24:91:7f:92:
04:b8:cd:ca:93:18:97:41:c1:1f:d6:71:21:45:0c:
67:6d:a1:5b:0f:db:dc:01:b9:f7:8a:c8:84:90:c1:
22:3c:f0:af:de:56:08:05:bf:f2:73:4f:c4:26:f8:
8b:73:d5:41:27:d5:48:06:13:df:0a:56:01:b3:1c:
d9:90:5a:99:57:dd:10:ea:12:e0:f9:69:97:f2:86:
46:b7:56:e8:0c:95:26:21:63:09:9c:d6:d7:c6:f5:
03:62:05:a0:20:57:02:96:e3:f1:c9:7e:00:41:b6:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:90:F9:F8:2C:40:A6:53:BE:3B:1B:04:90:5C:D0:A4:B3:73:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
27:0b:8c:d3:ad:0f:98:0c:6b:0a:92:9e:19:d5:ff:69:ac:75:
e0:54:6a:91:a6:bc:62:49:c5:90:36:dd:af:15:32:2f:b3:d7:
95:bf:fb:2f:39:9e:ed:be:8d:90:7e:55:a5:b2:01:da:38:b9:
87:aa:de:a0:76:c1:a8:b1:1e:e7:60:fd:73:05:bb:62:c6:f3:
80:76:23:5e:19:9e:da:20:6f:27:2a:5d:80:65:9e:5c:0c:2f:
5a:33:93:0e:34:c2:d1:ca:1f:c4:29:75:20:9b:0c:d3:75:45:
24:b1:1f:d7:85:b9:ce:f4:26:02:a4:5e:a8:c9:4b:3a:49:de:
e8:29:31:ba:3f:5c:bf:3f:79:b3:4e:2b:6e:de:9e:66:cc:63:
e4:e9:10:5d:75:9a:41:7b:e6:fb:18:cc:a2:39:4a:00:45:ba:
e5:e0:8c:c5:c1:65:73:d7:6c:c7:8a:51:5c:e4:a2:cd:38:bb:
fb:15:4d:ca:71:f6:7b:b2:82:14:4b:00:f3:23:3d:74:05:92:
42:35:d9:84:00:10:0a:4c:29:b3:1c:97:18:47:d2:74:a5:f0:
6a:ec:97:d3:c9:92:c8:64:51:df:25:31:d7:ac:3c:d6:a2:39:
7c:7e:f0:29:f5:e0:51:94:a2:cc:cf:10:9c:10:db:53:ca:d1:
ba:4b:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:22:38 2026 by rpki-client