Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa
File: 1b481025-758b-4274-9258-687a3a99b530.roa (raw, json)
Hash identifier: 52t1DAxwA3lwsM/W0T+z4o6gp2P/Xq264ntB8EQmVUo=
Subject key identifier: 3C:E5:3A:E2:A8:84:23:55:10:F4:A6:3F:1E:F9:B7:7B:69:85:37:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B31BD186BE52647D5020A2861A87F2246C72596
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa
Signing time: Fri 03 Apr 2026 02:40:37 +0000
ROA not before: Fri 03 Apr 2026 02:40:37 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:31:bd:18:6b:e5:26:47:d5:02:0a:28:61:a8:7f:22:46:c7:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:40:37 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=a77def2e8eeb47e398028e940f6750cb05546e8de409ecfff9b75520881746e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:74:9e:40:f7:1d:cc:7d:49:aa:31:27:c4:
65:d3:78:78:7a:37:ed:53:70:44:e5:2b:c6:ca:82:
76:6b:f1:d2:47:f7:66:0d:06:1d:2f:68:54:a3:30:
03:cf:4d:1e:0f:a2:ad:f4:e2:3f:6d:21:6f:c4:88:
76:a4:a3:f9:f8:98:8a:66:eb:88:07:82:63:8c:2e:
39:e9:a6:65:9a:1c:59:de:9f:d3:95:f0:b1:77:ec:
98:59:2a:d1:74:d2:7f:10:97:7d:34:c7:f8:13:4d:
d1:cc:16:c9:b8:b3:ca:75:ba:cd:d4:4f:4c:7d:72:
35:c4:60:4c:68:8c:74:0b:a3:3d:e0:77:1b:6b:40:
e7:55:54:d7:62:58:d5:33:57:85:0d:df:d2:6f:bb:
53:a9:b5:5d:f3:65:72:a5:a7:b4:f3:8b:a6:ff:bc:
b0:66:4c:df:ae:15:26:83:8b:9a:a6:b1:5a:cb:50:
6b:6c:d0:dd:ba:75:a9:34:50:58:0c:96:8e:97:f4:
b5:05:16:a0:48:d7:01:1c:ba:33:d9:bf:9e:97:4c:
43:07:12:a3:14:9d:df:a3:0b:aa:c9:75:be:c3:bf:
a1:44:b3:2f:88:bc:52:8d:f5:f3:7a:f8:f1:b6:a7:
6f:d5:58:f1:45:a2:51:f7:64:cd:08:1f:16:dd:c4:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:3A:E2:A8:84:23:55:10:F4:A6:3F:1E:F9:B7:7B:69:85:37:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:e040::/48
Signature Algorithm: sha256WithRSAEncryption
30:06:9e:0d:4b:db:c4:ba:9a:e4:a1:89:e3:10:6d:76:a4:4e:
1c:2e:7b:f2:7d:1e:a7:93:c3:c1:e3:a3:7a:7a:4e:3c:10:b1:
5f:75:fc:c5:b1:0f:f5:1e:45:c0:f6:8f:69:98:11:2c:1a:32:
1b:4a:b9:36:c3:04:0e:c5:02:ed:40:32:6b:44:67:59:0f:d2:
f0:ae:2c:31:18:42:78:25:c8:fb:f8:27:eb:ec:13:60:e1:59:
e8:3e:66:d8:35:7c:a7:52:82:b8:7a:39:d8:9e:a0:8e:39:ab:
3f:04:50:4a:0a:72:7f:4a:a8:aa:22:86:87:d1:a8:78:f5:09:
48:d4:ec:9e:b8:8a:a6:f6:69:98:91:91:15:1c:98:43:c3:28:
8f:fe:e7:d3:f1:b5:d5:27:e3:c6:34:6c:69:aa:cc:11:f4:6f:
51:5c:36:8b:74:c6:c9:cd:dd:0b:51:e7:76:55:62:ea:18:c1:
18:19:ab:98:73:db:c9:8e:a6:7f:b1:c2:cf:77:5a:dd:04:18:
9a:94:8d:a6:97:47:35:f9:a4:dd:2d:87:dc:6f:58:d3:86:63:
9b:97:ed:1c:65:66:a9:72:ee:89:35:e2:e2:a8:ad:06:6b:f4:
d1:fb:ed:ae:87:e1:29:ce:5c:a8:b2:c2:27:24:5b:1a:98:16:
6b:21:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:10 2026 by rpki-client