Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
File: 356f05f3-9814-4715-9f58-bf044bf5d10f.roa (raw, json)
Hash identifier: u7gbgxii6Uw8Nn48B2qu3vZ4R4vMC2wso/64eBSrZtA=
Subject key identifier: 22:D5:89:11:20:C8:05:CB:DD:88:9A:66:24:EB:FA:B0:21:CA:F8:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D00327D7F0F1829A176252F4447870F7BFFB971
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
Signing time: Fri 13 Feb 2026 15:20:47 +0000
ROA not before: Fri 13 Feb 2026 15:20:47 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:00:32:7d:7f:0f:18:29:a1:76:25:2f:44:47:87:0f:7b:ff:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:20:47 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=69303627839a8de69542db8447764afcff4980f1b1ef386eaec6f9c819ea2573, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:a3:7d:03:d6:2d:af:17:e0:f6:ce:15:f1:
87:4f:2e:0d:65:7f:ac:7c:b6:6f:d8:9a:e9:ac:9d:
12:d3:81:09:f3:d3:1d:ec:dd:a1:ca:01:90:1b:53:
e5:20:30:87:2c:38:aa:22:97:d7:5b:60:2a:ab:2f:
42:4b:c1:9d:93:36:4b:61:b6:c5:fc:7c:b0:52:3a:
32:f1:02:1d:0c:90:3f:1c:c7:88:72:df:51:b3:74:
f8:86:f8:1a:0a:ba:07:2b:57:e4:cc:db:6e:0d:24:
d0:c9:b9:34:8d:0e:59:08:ec:68:f3:db:0e:09:d8:
41:8b:8d:cd:06:ff:db:f2:5f:bf:33:fc:e9:44:58:
a7:d3:27:ad:81:41:ea:1d:ad:20:c1:12:f9:c7:83:
86:12:8f:01:57:3b:9a:0f:71:fc:df:32:1a:f3:d4:
fe:13:15:3e:82:1f:36:d0:fb:35:79:aa:b3:c0:45:
ee:5f:36:64:1f:d9:f5:c0:fb:f6:c1:b9:44:3b:af:
9e:47:3b:bd:39:4c:c3:a7:62:3e:ec:f5:f5:0b:d1:
8c:f6:c0:89:02:79:1a:83:69:e9:d5:12:dd:92:7f:
2a:a2:d0:c1:eb:ee:09:1d:62:17:57:55:d5:c0:93:
2c:e1:6f:bd:42:35:9f:40:9d:79:f3:9f:cb:56:f2:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:89:11:20:C8:05:CB:DD:88:9A:66:24:EB:FA:B0:21:CA:F8:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:880::/46
Signature Algorithm: sha256WithRSAEncryption
0d:8a:27:65:4e:3e:0d:96:a8:66:4d:4f:9a:09:3d:97:df:f8:
b0:6a:41:03:e9:dc:51:21:c1:20:8e:7f:e1:3a:a9:b0:0b:a4:
00:f7:7e:91:d0:78:36:27:85:68:a2:95:20:09:24:7e:54:e0:
93:e5:27:c1:fd:d6:d7:56:95:3d:62:ef:98:55:a5:8d:56:c5:
ff:a9:3c:cb:fe:09:9e:aa:63:96:8c:a7:13:36:f8:08:47:32:
b1:88:97:19:e5:10:34:ec:02:28:65:a0:6e:4f:2d:a3:14:01:
58:19:90:48:63:b3:a1:9a:5d:02:5f:91:6c:c8:35:4e:b3:74:
36:77:45:fa:90:c3:91:24:a3:5b:3a:58:ed:b0:df:87:f2:25:
59:ad:9e:08:ac:23:8e:f7:61:83:3c:01:50:9f:80:45:76:e2:
b8:4f:bb:9c:34:0a:53:bf:71:19:73:98:27:bd:7e:77:4e:32:
87:ac:db:1a:cd:f6:d0:84:e8:66:5d:ff:0e:f8:6e:ba:bb:83:
ef:81:d1:89:93:96:bf:21:9c:da:83:68:e1:38:19:60:4e:e4:
e1:7f:a8:c2:07:7a:22:89:42:76:dc:0e:fc:57:01:6f:9a:6f:
c2:7c:c8:29:e3:a0:5f:01:d2:26:97:79:91:87:3c:ec:09:d0:
31:16:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:44 2026 by rpki-client