Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
File: 1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa (raw, json)
Hash identifier: ZPB4QuGscZpiWgMXZsNCl+T5SiJEA97yxRjVK6OaANE=
Subject key identifier: 0E:BB:8A:CF:9D:CF:77:A6:4F:A0:BC:62:E3:0D:7C:A8:A5:77:68:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F4E4059CDED253115EF18656808AEC0C4AB2C8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
Signing time: Fri 20 Feb 2026 01:40:06 +0000
ROA not before: Fri 20 Feb 2026 01:40:06 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4e:40:59:cd:ed:25:31:15:ef:18:65:68:08:ae:c0:c4:ab:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 20 01:40:06 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=4d45e70879e093e1a6c89675d1228ea9be27b26a899ef872d6b021c9e3fd2daf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:56:ff:9b:d7:91:07:ae:e2:05:d8:3a:ca:
67:27:13:1c:cf:ea:b9:5d:b2:a8:66:b6:b8:f2:8e:
62:a3:25:fc:c3:cf:7b:50:4b:4c:c0:58:10:d4:29:
dc:8c:cf:0d:f3:f2:ea:40:8e:5a:7e:05:58:40:d9:
d7:8a:64:93:65:11:15:92:aa:46:21:58:c0:25:81:
20:c8:56:81:b0:b1:09:80:f4:52:c3:25:d4:db:e7:
38:63:3c:9c:bd:3b:4a:4c:ad:a4:32:53:b6:19:10:
e3:4f:83:1e:7c:48:d4:65:1e:79:87:7c:4b:e0:ff:
2c:7d:37:ef:37:c6:d7:94:37:66:c2:63:75:c1:23:
af:bf:4c:79:79:1f:8d:b3:6f:71:e9:73:38:5f:e4:
35:42:10:17:ba:32:b4:8a:d4:9a:62:9f:ae:75:25:
ed:e9:82:79:31:8a:05:c8:87:05:c8:f6:42:63:91:
28:59:cd:49:8d:94:ea:22:81:22:2e:cd:c1:c8:dd:
64:53:f5:bf:69:0f:08:f1:32:1b:f7:39:6b:29:bb:
79:a2:50:05:be:d8:1e:3d:a1:4e:7b:d7:a7:4f:65:
60:6e:56:51:e3:12:c4:3a:15:a3:97:e5:ac:11:eb:
8a:d5:79:ec:d1:5c:c3:94:51:6b:ce:1e:54:69:c1:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BB:8A:CF:9D:CF:77:A6:4F:A0:BC:62:E3:0D:7C:A8:A5:77:68:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:7e:d1:34:06:fd:35:72:b8:37:12:f2:30:79:90:9d:ab:ff:
0e:96:b7:28:27:7e:50:37:1d:3a:4d:32:5f:4f:d2:9a:b7:fb:
c5:52:3a:b7:ec:f4:66:f9:5e:7b:75:99:b6:24:36:2d:45:de:
5f:81:49:d4:d4:da:85:cf:a2:32:e1:d1:f2:25:e9:9d:9b:92:
ef:84:65:06:4c:8c:68:e4:2f:6c:54:06:14:19:7b:9e:60:53:
8c:4d:e8:7c:05:34:62:9b:62:d3:d4:b3:f9:1a:17:38:c6:d3:
a4:2f:8f:58:03:6d:58:47:e3:87:d1:b6:e4:db:28:32:62:98:
b2:e4:36:dc:f1:45:22:4b:54:3b:1c:44:9d:a2:7c:7d:b9:4d:
7f:7d:ab:32:ee:2e:c4:fd:87:28:57:f0:c6:1f:db:b1:09:55:
fd:73:1f:42:f4:77:a6:43:21:09:f1:cf:bb:cc:6e:2f:ab:20:
19:6d:36:d0:52:fc:bd:bd:ab:4a:33:a5:cd:c8:b0:58:5d:ee:
dd:cc:f6:c8:dd:93:f8:99:3f:eb:5e:d5:dd:e6:68:ad:8a:21:
fb:4b:47:52:a3:0f:c0:44:e0:75:47:f1:67:4b:e6:a8:1a:3e:
86:fc:d9:5a:ba:8d:00:ed:14:72:ff:35:3d:39:0f:b6:c0:84:
a9:07:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:34 2026 by rpki-client