Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
File: 1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa (raw, json)
Hash identifier: B5DbJnBcc2asDa6YwxEj+GffGSYVw/jyrfCgFJsM7uQ=
Subject key identifier: E1:40:EC:9D:A6:2E:8D:0A:4B:80:A4:4C:F0:1B:8D:BB:8D:EC:29:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0844B5AAA6664C63CB3E3504CAE37D118B5E3887
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
Signing time: Fri 15 May 2026 03:50:07 +0000
ROA not before: Fri 15 May 2026 03:50:07 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:44:b5:aa:a6:66:4c:63:cb:3e:35:04:ca:e3:7d:11:8b:5e:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 03:50:07 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=7e6c1f9ccb5e5c054b7a009f63b62473cd772c3850b8f181b07171ce09b0161a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:1b:83:c6:7f:95:54:96:71:67:5b:1f:db:
9f:d9:4f:eb:d8:b6:e1:c7:43:0e:d0:27:4d:3f:f8:
a0:25:14:b8:2e:1e:24:34:a5:5b:30:be:74:70:07:
82:ac:37:03:73:98:f5:bb:95:24:55:8f:e6:4b:61:
02:b1:8c:d9:58:00:63:9f:14:aa:53:6c:49:a5:90:
1e:dc:f1:3a:49:e7:5a:41:77:4d:4a:50:fe:2e:a3:
30:cc:de:c7:3e:e0:e0:bd:e4:54:30:57:50:8a:1b:
fb:c6:c5:51:3b:56:38:3a:51:e7:9e:35:ba:87:5a:
ee:44:4f:bd:92:fe:76:12:94:10:bb:cb:c4:f8:8b:
3e:89:c0:a0:c0:39:37:36:f1:de:fb:63:55:fb:5d:
9d:09:6e:a9:f9:e8:0f:6f:72:df:33:44:12:7d:fa:
23:62:51:a9:64:3d:9e:80:72:41:08:67:13:83:14:
99:d4:f6:23:36:7f:50:24:bc:df:70:c0:74:15:80:
15:75:34:1c:9f:9b:c6:a1:cf:3b:81:02:57:58:d4:
66:5e:17:e9:51:4e:60:bc:3d:c2:8b:06:2e:e5:9e:
70:77:af:63:9f:38:8b:60:de:11:0a:6d:3a:ed:2a:
5e:1d:98:2d:8a:d1:61:01:51:0d:75:34:fd:85:8c:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:EC:9D:A6:2E:8D:0A:4B:80:A4:4C:F0:1B:8D:BB:8D:EC:29:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1000::/40
Signature Algorithm: sha256WithRSAEncryption
2c:3e:55:42:d3:fb:36:73:92:31:b7:d4:cf:72:48:38:aa:b7:
da:59:6b:33:2d:40:cc:d9:33:65:73:5d:d3:76:8f:3e:23:41:
0d:23:de:5e:b8:70:31:10:b8:1a:cd:88:e0:12:6f:53:7c:f1:
26:e9:ef:dc:4c:0e:a9:5e:20:da:98:bb:a3:5c:c6:4e:5c:cc:
61:a9:eb:ee:81:ec:ab:6b:c2:49:5a:3e:30:d7:ed:02:40:82:
de:d6:8b:52:fd:aa:2c:7b:c0:4b:d4:54:fb:80:46:21:6c:dc:
a0:b4:a8:93:a0:7f:fc:6f:16:f7:aa:c0:54:6c:f3:87:00:d1:
01:2b:b7:8e:05:4e:f1:05:98:10:a8:cc:b5:f1:65:f7:c6:81:
fd:34:ab:e5:75:23:3e:c9:4b:5b:5b:d7:e6:e2:52:0b:ca:7d:
ce:d7:91:39:1f:61:87:44:bf:b8:bb:49:17:17:d7:c1:df:8e:
d8:46:eb:99:9c:37:f7:77:c3:48:f3:c5:bb:91:06:96:81:01:
ef:9d:cf:a0:20:fc:19:1a:e1:53:46:eb:42:ec:ae:6d:61:0f:
5a:af:78:31:d1:5e:90:01:98:18:25:1f:98:2a:1f:eb:a3:10:
17:18:9e:36:79:0a:57:5e:9b:aa:c1:ee:55:b4:df:f5:be:79:
a0:be:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:43 2026 by rpki-client