Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json)
Hash identifier: Wo7mezo8KROELQlHOpicCpa2HNVXANfexYCud3jojjc=
Subject key identifier: 7D:9B:93:ED:CE:D5:9F:4F:E5:B2:D0:AA:96:0C:DC:19:AE:61:5D:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45F9553C17AC886AA4F7AE2A2F255F2D97E8165D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
Signing time: Tue 19 May 2026 04:40:20 +0000
ROA not before: Tue 19 May 2026 04:40:20 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f9:55:3c:17:ac:88:6a:a4:f7:ae:2a:2f:25:5f:2d:97:e8:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:20 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=02ea51b43c0cd3cc381fec0403df10d829b252d25d43ecd4eeca18cac4bcb7df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:6b:46:00:a4:be:a2:79:5f:27:ba:71:2f:
31:d4:18:23:88:1a:51:29:6c:41:ea:a4:72:8f:7b:
13:b0:16:d1:c2:9a:71:f5:c7:a1:ad:37:fb:dc:48:
02:89:33:1e:23:dc:0a:b1:51:4a:8b:4c:a1:e8:a0:
e4:14:97:92:ea:67:d2:0f:23:26:a4:7d:09:c4:8e:
bf:2b:2c:05:73:46:f3:da:7b:06:2f:4e:d9:b5:89:
c3:b1:6a:f4:98:d1:ea:a6:42:9d:0e:ed:b8:ee:56:
b1:5b:34:1f:3c:2a:96:d1:0e:66:39:42:4e:05:2e:
f2:33:bf:09:73:f8:58:32:4c:c0:34:ba:a5:ac:13:
98:37:be:c8:22:c0:f4:d6:47:b5:fc:b0:b8:6f:0b:
26:3f:47:eb:a4:2c:e0:12:71:ae:c2:d0:6d:25:6c:
47:66:07:4f:3c:29:66:e0:c3:c0:c9:fe:e0:a6:73:
63:19:fc:52:fc:50:2c:a0:20:26:22:ee:cc:09:0d:
48:85:d9:8f:15:d4:17:7d:fb:a4:85:ca:4d:71:86:
ec:c4:cd:97:80:78:d3:fa:e7:32:c2:d6:8e:59:2b:
04:5f:73:64:cf:ec:de:af:46:a1:66:ba:99:e3:b8:
0b:db:e5:a7:f9:82:1e:22:22:f0:63:a4:81:c4:66:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:93:ED:CE:D5:9F:4F:E5:B2:D0:AA:96:0C:DC:19:AE:61:5D:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8030::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a4:79:36:cd:67:16:15:a9:24:e1:a1:2e:dd:73:f1:e2:42:
01:60:14:ed:5f:b3:bd:5e:3b:34:d4:84:84:0d:bd:94:63:03:
3b:13:86:05:5f:a3:d5:30:99:c6:02:b3:49:5f:5e:b9:d4:a2:
bf:ed:71:c1:93:0d:b0:d4:9e:bd:26:35:9d:1b:8c:38:11:09:
da:08:34:82:dc:3c:c0:ec:04:9c:64:25:ac:18:42:bc:e2:58:
18:e1:07:6a:35:e7:1c:cf:63:e8:d2:f2:22:df:0a:8c:f6:44:
d0:cd:d8:2b:7e:20:17:5a:88:1d:89:08:a1:55:ea:37:aa:b1:
ab:22:ff:45:bc:83:21:46:f5:79:de:5f:cc:a7:f3:c9:e1:ff:
10:9c:60:7d:52:fc:c0:8e:79:de:e0:cc:b9:59:3e:45:60:0d:
33:f4:65:a1:33:13:1b:c5:63:bd:6d:db:92:18:80:c4:31:48:
8d:e9:0c:5e:7d:06:59:b9:96:5b:d8:ca:82:3b:28:cb:82:e5:
f2:b6:45:26:f7:7c:8f:9d:0d:fa:3a:b3:c8:62:f6:93:2e:5d:
58:14:0e:c8:3f:de:29:3b:00:e8:3e:1b:8c:1e:68:ce:d9:a0:
3b:f2:e0:be:1d:7c:bd:14:fa:a7:74:2c:5d:0e:72:99:71:02:
17:f9:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:57 2026 by rpki-client