Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
File: 436b2ee4-1cd1-477a-83f9-e45d118e5574.roa (raw, json)
Hash identifier: 3harVpRPPryE1mZXQjs3naFbVZgcraEDptK8yu90VxA=
Subject key identifier: 8B:A1:9E:2A:FE:DC:52:60:35:97:27:B7:8E:16:66:A7:8C:AE:BD:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DE5896A458929125065F405F3DAC24ECABF78EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
Signing time: Fri 05 Jun 2026 00:00:08 +0000
ROA not before: Fri 05 Jun 2026 00:00:08 +0000
ROA not after: Thu 03 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e5:89:6a:45:89:29:12:50:65:f4:05:f3:da:c2:4e:ca:bf:78:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 5 00:00:08 2026 GMT
Not After : Sep 3 23:59:59 2026 GMT
Subject: serialNumber=6800c7c6f7fa2e854f10a22fb1cd443f1ee6829a4e15fbd2847b8505872fc47c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:20:75:28:fc:06:cf:6b:1d:a7:df:c0:ba:
15:86:ac:0e:8d:94:6f:33:c5:e9:d9:e6:54:66:95:
53:40:81:93:e9:9b:e7:48:de:93:69:31:32:7e:cf:
12:66:45:c5:f0:b3:17:15:ee:a1:c9:80:ef:aa:0e:
30:8d:92:11:58:b1:dd:14:63:01:ed:78:53:59:d9:
9e:4c:4c:ad:79:7f:d2:44:06:7f:50:72:7a:71:7a:
d6:c3:3c:20:39:42:15:35:3c:ad:23:76:33:a0:56:
b4:94:da:f1:ed:ed:c0:e3:61:34:b0:9e:45:da:5f:
68:e8:73:ca:49:67:b3:0e:af:c7:ab:43:79:bc:7f:
6f:ef:26:51:f0:d7:87:fa:96:cc:5c:37:86:5d:72:
5c:df:97:2b:91:13:b7:3a:92:a4:20:bb:3c:49:a1:
9d:51:b2:44:c5:c9:c7:0e:3d:0e:3d:71:ac:c4:2c:
e1:43:44:86:98:eb:97:5e:d8:e1:e5:df:43:30:87:
91:d1:c7:bd:54:18:af:76:a4:ca:9b:61:07:47:19:
54:ce:d8:ae:cd:1b:52:9e:10:89:22:d3:59:ee:e1:
b9:3c:c5:b5:01:f5:e9:12:02:d3:dd:54:1c:44:3f:
04:c8:f1:3e:14:67:b6:76:83:00:56:c4:e7:70:76:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:9E:2A:FE:DC:52:60:35:97:27:B7:8E:16:66:A7:8C:AE:BD:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/48
Signature Algorithm: sha256WithRSAEncryption
53:d7:b3:66:96:23:3f:a9:98:5a:b8:35:ac:97:20:f4:59:d6:
9d:7e:e4:9a:b5:cd:4a:2e:84:4c:05:73:93:ac:44:6a:eb:d6:
31:86:5b:8b:9b:c2:35:c7:ff:9f:d7:5a:6d:60:48:ea:07:56:
ba:ec:82:61:c4:ff:f6:f6:0c:c8:ae:3a:6a:f9:77:a7:75:2b:
c4:58:aa:54:dd:44:d8:00:95:dc:dc:ee:c1:92:99:ac:c0:a5:
13:b3:da:df:14:a5:cb:4c:ec:f4:65:6e:be:3a:80:ac:37:36:
7e:fe:30:18:eb:d1:b9:95:e6:49:c9:91:41:59:bc:e0:f2:18:
09:c2:17:63:2b:d4:20:52:f1:36:2a:d7:87:e4:28:6d:55:db:
73:d8:32:41:59:0f:8e:64:1e:ef:54:cd:95:a4:4f:b7:bc:97:
2f:3a:cc:ca:30:1e:32:68:2a:c8:95:f0:7d:37:7b:6a:d5:23:
20:ef:a3:97:43:4f:34:4b:52:75:bf:ff:b9:8f:db:92:41:d4:
75:ba:aa:0e:92:2d:8c:fa:fa:0a:0c:8a:05:73:f9:9b:c4:c5:
96:ee:eb:b4:29:b1:5e:cb:c3:4d:4e:68:d6:7c:68:29:21:1e:
5e:10:61:e6:4f:7c:83:9a:ef:95:54:88:c8:89:98:f6:f6:41:
dc:5e:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:16 2026 by rpki-client