Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15602881-cde5-4e79-ad73-9dc0c87ea1cb.roa
File: 15602881-cde5-4e79-ad73-9dc0c87ea1cb.roa (raw, json)
Hash identifier: vUqH/WHxOdP0lHZ2papu6NVUJveF0I9y7hRpHIaD90Y=
Subject key identifier: 16:31:72:A0:26:80:32:D8:A7:FF:0B:67:98:C3:5B:26:F4:C0:A3:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 245E73116C3CE61EC7DE8776C503E10DE2904DFF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15602881-cde5-4e79-ad73-9dc0c87ea1cb.roa
Signing time: Sun 31 May 2026 01:10:49 +0000
ROA not before: Sun 31 May 2026 01:10:49 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5e:73:11:6c:3c:e6:1e:c7:de:87:76:c5:03:e1:0d:e2:90:4d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:49 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=2c084734aad280c677e570f41d2b6abde874f2ec2f10ffe01ef08883fab112a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:99:cf:a2:87:24:58:34:be:07:42:54:9a:
67:f4:fa:29:a2:4a:a1:85:5f:fa:cd:fa:11:99:06:
a2:63:f7:c4:53:50:86:38:b4:a6:95:c7:14:81:7d:
58:a5:25:cb:4c:21:62:aa:e0:8c:d9:b9:a0:45:b2:
f7:02:10:62:fd:ae:14:2b:dd:b0:0a:55:d4:7a:27:
01:4c:07:dd:01:a5:67:e6:a9:8a:a2:10:6f:eb:8b:
2a:03:af:22:fa:57:a2:ad:35:a2:4c:ca:cd:90:6d:
53:13:ec:5b:9b:c5:5c:a0:41:2c:aa:ab:9e:1b:3c:
df:0f:88:54:a3:bf:4a:2e:9c:af:26:e7:3e:26:89:
80:d5:02:59:ad:8f:0a:64:9d:3d:54:d7:15:be:d3:
06:fe:5a:9b:7b:f8:cc:0b:ca:7d:a1:88:50:00:2e:
f5:3e:d2:84:ab:bc:f0:47:bb:8e:61:ca:f1:19:e4:
ac:8a:6f:a1:63:a6:b9:78:d4:b2:9b:80:30:48:6f:
f8:df:12:7b:3f:c9:b5:9d:f1:fd:7a:31:ff:b6:c9:
a4:5a:cb:4a:20:30:cf:31:0c:16:d0:cb:c2:c1:96:
7a:fd:48:c2:84:cc:1b:d0:2f:5b:ee:0c:01:3f:0b:
39:72:6f:81:05:5c:a3:0f:06:05:a1:72:14:97:d8:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:31:72:A0:26:80:32:D8:A7:FF:0B:67:98:C3:5B:26:F4:C0:A3:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15602881-cde5-4e79-ad73-9dc0c87ea1cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:c000::/40
Signature Algorithm: sha256WithRSAEncryption
18:65:8d:58:97:34:21:8c:23:6a:9c:f1:a4:98:0d:16:39:a0:
cf:4d:2d:98:e2:b7:05:cc:15:a5:00:46:b8:f9:48:09:0d:30:
49:f1:0c:ca:d2:b2:4c:12:d5:99:f3:fc:bc:7d:06:cd:31:6a:
b5:20:fe:be:60:6b:66:07:70:39:e8:9d:06:9b:a5:ad:68:0e:
22:f2:58:66:f2:99:4b:36:7f:f0:f8:55:ee:07:76:06:b6:43:
08:37:5f:a6:f5:2a:38:fb:02:bb:95:83:9c:b9:16:29:b9:3e:
6e:80:35:15:62:e8:d2:04:e4:3e:f7:5c:d2:30:d2:2a:20:0c:
21:6b:3d:84:d8:e1:16:48:88:88:60:a1:8a:af:42:7c:e1:35:
1b:fb:3d:b4:a3:f9:aa:25:7f:0a:21:e6:b3:33:0c:3b:92:3c:
e0:9f:7d:d2:2a:a9:a3:60:cf:35:08:58:3f:97:f8:03:23:cc:
d8:ed:f0:d9:27:f0:a6:bb:58:d4:d5:14:7a:1e:4f:da:aa:1f:
44:29:98:49:cc:a8:12:f9:fa:77:bb:3e:5a:db:88:ce:ed:96:
9c:8f:18:6b:17:eb:2a:dd:ba:bc:4b:c3:43:6e:9e:6e:37:6f:
d9:a6:4a:b7:8c:58:0e:44:e3:c5:a1:bd:08:0a:9d:4f:16:33:
a4:05:8b:46
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJF5zEWw85h7H3od2xQPhDeKQTf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MzEwMTEwNDlaFw0yNjA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDJjMDg0NzM0YWFkMjgwYzY3N2U1NzBmNDFkMmI2YWJkZTg3NGYyZWMyZjEw
ZmZlMDFlZjA4ODgzZmFiMTEyYTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOJLmc+ihyRYNL4HQlSaZ/T6KaJKoYVf+s36EZkGomP3xFNQhji0ppXHFIF9
WKUly0whYqrgjNm5oEWy9wIQYv2uFCvdsApV1HonAUwH3QGlZ+apiqIQb+uLKgOv
IvpXoq01okzKzZBtUxPsW5vFXKBBLKqrnhs83w+IVKO/Si6crybnPiaJgNUCWa2P
CmSdPVTXFb7TBv5am3v4zAvKfaGIUAAu9T7ShKu88Ee7jmHK8RnkrIpvoWOmuXjU
spuAMEhv+N8Sez/JtZ3x/Xox/7bJpFrLSiAwzzEMFtDLwsGWev1IwoTMG9AvW+4M
AT8LOXJvgQVcow8GBaFyFJfY1ksCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQWMXKg
JoAy2Kf/C2eYw1sm9MCjhDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTU2MDI4ODEtY2RlNS00ZTc5LWFkNzMtOWRjMGM4N2VhMWNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DPA
MA0GCSqGSIb3DQEBCwUAA4IBAQAYZY1YlzQhjCNqnPGkmA0WOaDPTS2Y4rcFzBWl
AEa4+UgJDTBJ8QzK0rJMEtWZ8/y8fQbNMWq1IP6+YGtmB3A56J0Gm6WtaA4i8lhm
8plLNn/w+FXuB3YGtkMIN1+m9So4+wK7lYOcuRYpuT5ugDUVYujSBOQ+91zSMNIq
IAwhaz2E2OEWSIiIYKGKr0J84TUb+z20o/mqJX8KIeazMww7kjzgn33SKqmjYM81
CFg/l/gDI8zY7fDZJ/Cmu1jU1RR6Hk/aqh9EKZhJzKgS+fp3uz5a24jO7Zacjxhr
F+sq3bq8S8NDbp5uN2/Zpkq3jFgOROPFob0ICp1PFjOkBYtG
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:43 2026 by rpki-client