Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa
File: 3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa (raw, json)
Hash identifier: MGZ/svUx4ShWqkKWoIt79WnVMXJALrpuSpI4g1qfA+4=
Subject key identifier: AC:44:7A:9E:22:07:B5:16:8A:D7:05:D7:E9:44:3A:8D:EA:51:89:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E144DCCB0E3503C7973539828EE44241957365A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa
Signing time: Wed 11 Feb 2026 01:30:12 +0000
ROA not before: Wed 11 Feb 2026 01:30:12 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:14:4d:cc:b0:e3:50:3c:79:73:53:98:28:ee:44:24:19:57:36:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:30:12 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=2ebdb153529bad29b9502ac95641b98ae33e3ba4d93104002038db0f3aff9d2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:c4:08:14:84:9a:76:2f:97:fd:a3:f0:03:
65:91:fb:da:e2:b1:6c:a0:53:6a:51:c0:50:72:87:
82:cc:b8:e3:9b:67:c9:f9:d3:ff:e3:4f:8c:47:72:
a6:0d:99:d0:88:46:70:1e:f0:1d:f8:21:ea:35:55:
20:90:24:47:0d:25:26:c9:9b:85:57:0c:de:1a:86:
09:6b:aa:ba:d8:e7:86:d6:da:aa:0c:5d:67:a5:fb:
ef:4a:ed:06:3c:a1:08:37:0f:22:a6:ed:87:62:fd:
47:47:37:79:9e:00:eb:76:29:30:fc:dd:e2:ae:1c:
f0:ca:66:98:b3:ab:6c:de:70:99:dd:df:6b:42:2e:
53:7a:a3:99:e7:41:90:03:3b:20:e8:d0:9f:bf:e5:
3f:a4:77:73:3b:af:d7:63:3c:3f:4c:bf:b1:01:96:
51:f6:0b:bf:2e:9c:42:c4:05:2d:92:c4:5c:14:81:
98:95:71:fd:6a:4b:74:c7:40:f9:ab:31:ab:00:9f:
04:e6:d7:b7:08:2c:41:f1:ad:24:49:52:90:69:a9:
50:78:e6:c1:4f:a7:57:ad:76:4a:95:7d:44:1c:b9:
c2:ef:e4:be:55:c1:7c:74:41:fa:ab:57:39:d0:83:
c0:b3:8c:8b:26:d2:f6:fa:4c:c0:f6:42:31:59:b4:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:7A:9E:22:07:B5:16:8A:D7:05:D7:E9:44:3A:8D:EA:51:89:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4080::/48
Signature Algorithm: sha256WithRSAEncryption
27:b7:4e:d6:fd:34:1e:b1:05:00:63:8b:1c:e4:07:98:44:43:
6b:d1:00:21:32:fb:f9:7f:08:b1:09:6e:37:32:5a:c4:22:b3:
61:60:56:02:13:3e:48:a0:da:fe:a9:14:1e:e4:08:44:f3:5d:
3c:ca:2c:08:18:21:e6:ad:18:d8:53:46:29:b5:34:14:b8:b0:
a2:7d:dd:92:56:b5:e8:f9:0b:11:cb:d3:4c:06:67:87:bb:de:
3f:c1:37:ff:a6:92:b0:9d:16:40:57:06:00:70:3d:c8:5d:57:
e6:d2:80:0c:8c:2a:29:3b:dc:68:05:95:f8:df:84:f9:2d:ce:
9d:87:bf:3d:e9:ec:c1:97:0f:f4:7c:2f:f1:6d:e7:1b:4a:e7:
81:09:ad:e9:db:bb:1a:2a:23:3a:d8:1c:5f:91:11:7f:83:e3:
4b:b6:03:07:1e:02:76:6d:2d:df:45:48:98:e2:d6:ed:e8:fc:
3a:06:35:26:a3:a2:6e:76:5c:8c:2e:7c:0d:8d:21:75:7d:d8:
d1:ab:b9:cb:a5:5e:8c:69:f4:c0:e8:e8:ba:84:c3:f9:59:d5:
70:57:0d:5e:a1:f1:57:75:68:58:57:86:ce:27:84:44:c4:a1:
bc:9f:ec:59:8e:56:9a:4c:7b:09:e2:c8:7f:5f:1f:dc:4c:f1:
62:01:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:34:38 2026 by rpki-client