Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa
File: 0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa (raw, json)
Hash identifier: 3455IUPSpQKcp9roXTkJ9KB/IijKw1cHlrC9YKgrkGI=
Subject key identifier: 3C:5D:0E:75:B9:DA:1C:93:53:04:08:A2:B4:2E:69:A4:84:7B:8F:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5938311AEF8C18239E7BD0734D3BA7DB6A926C46
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa
Signing time: Fri 13 Feb 2026 15:21:05 +0000
ROA not before: Fri 13 Feb 2026 15:21:05 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:9080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:38:31:1a:ef:8c:18:23:9e:7b:d0:73:4d:3b:a7:db:6a:92:6c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:21:05 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=20af05cc3b3535113ea17c13a91ecd842ad68526fc72b3f3535395b11a0efe2e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:38:83:fe:46:56:cd:f9:fb:e2:e2:7c:32:
f0:35:b7:f4:ea:11:00:22:e6:a2:ad:4c:53:ff:c9:
63:42:a6:42:43:e5:23:0f:86:5a:e0:00:85:8e:d9:
15:64:c7:0f:a3:fa:6a:bd:4e:18:c3:c2:61:d9:2a:
d9:fb:62:8b:a2:ff:cc:71:ec:7b:97:2a:33:8b:0a:
cf:a9:4d:96:19:45:a6:a9:0d:d7:1f:a7:17:13:c4:
73:60:49:08:2e:c5:76:ba:77:88:d6:9e:9c:94:b9:
10:fd:17:6c:0c:9a:de:f4:b8:59:a9:74:9e:60:7a:
7f:c1:fe:0c:1e:85:49:5b:fe:75:c1:3c:fa:0b:04:
aa:3a:b0:4b:83:1f:a3:8a:03:97:7c:f2:1e:c5:ab:
5f:4b:b5:2c:85:85:5c:a4:84:94:c7:03:42:92:23:
f6:f3:79:74:ec:9d:72:5d:32:39:34:bc:59:7d:f3:
bc:b2:e3:bc:96:33:2f:62:65:9e:a2:4f:7a:db:69:
5d:78:08:18:b2:e2:13:a3:79:34:3a:99:fd:25:a3:
da:46:c1:93:a6:eb:0a:b4:fb:c4:04:ba:3c:9d:e7:
16:1c:b3:1d:1e:a7:ff:44:14:02:ad:bd:a5:94:35:
05:d9:7b:d1:1e:3b:c5:4f:84:21:6b:f8:78:d1:47:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:0E:75:B9:DA:1C:93:53:04:08:A2:B4:2E:69:A4:84:7B:8F:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:9080::/46
Signature Algorithm: sha256WithRSAEncryption
0a:78:af:87:91:3e:a3:09:60:d8:5c:5a:5d:79:63:1e:85:f7:
44:07:28:1d:19:7b:2e:80:6f:34:15:25:bf:cc:3b:03:13:45:
d0:d9:ad:39:81:1b:61:34:50:57:b2:16:96:d5:6c:ae:bc:96:
77:d0:c7:23:4a:d6:4e:5d:d7:04:b8:2b:0a:a3:4b:8c:fb:10:
29:7e:77:a7:62:d2:b3:97:9d:b8:32:78:90:84:0e:77:f9:5f:
70:e6:3d:c0:f0:e2:9c:c7:6e:b7:2d:13:5b:43:83:04:d5:d4:
b1:91:26:0c:47:1f:05:72:12:b5:11:51:da:dc:b7:87:9d:7f:
89:e9:f7:45:57:20:32:db:8f:23:77:e9:5a:bb:07:07:4e:b3:
99:58:d2:4d:a5:92:56:c7:ab:24:00:46:09:d1:15:04:05:b7:
71:e3:46:1d:fd:d1:d2:b3:18:2a:59:86:8d:91:49:54:10:55:
a7:97:08:5e:99:e7:be:7c:f8:b0:ad:c5:61:ad:41:54:f1:23:
17:81:a6:fc:3e:cf:db:f6:9a:e5:a5:a8:a2:a6:f5:5f:8a:e7:
82:60:c5:33:04:87:cd:b0:33:5b:86:6b:05:34:3c:e7:d9:64:
00:ed:c3:ae:8a:42:42:a8:e2:6d:57:30:0f:70:d3:66:03:d9:
b7:ef:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:26:40 2026 by rpki-client