Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47a5e300-1c0d-4b9c-a4f6-bb92ab1bcecf.roa
File: 47a5e300-1c0d-4b9c-a4f6-bb92ab1bcecf.roa (raw, json)
Hash identifier: gqznUenyTpIP/vd1GKh+11+INXdZ9lsbBLIdyxbI/AU=
Subject key identifier: 4F:BD:4A:44:A0:6C:A2:A4:A8:F0:13:76:6C:48:3D:84:AB:2F:63:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FD0E2B4E236D55ABFCFA658CFE6F0FCC2DE6B49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47a5e300-1c0d-4b9c-a4f6-bb92ab1bcecf.roa
Signing time: Thu 11 Jun 2026 00:00:12 +0000
ROA not before: Thu 11 Jun 2026 00:00:12 +0000
ROA not after: Wed 09 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d028:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d0:e2:b4:e2:36:d5:5a:bf:cf:a6:58:cf:e6:f0:fc:c2:de:6b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 11 00:00:12 2026 GMT
Not After : Sep 9 23:59:59 2026 GMT
Subject: serialNumber=43a74de73d4d4aebeeea7e1dea26eb58508097af02a6d3ec09a4d00859b0d1dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:81:ec:df:f3:b3:55:89:a5:2a:48:5f:5f:
69:06:46:8e:1d:f6:69:39:09:de:db:b9:d1:c7:be:
f8:04:9a:6a:01:67:f9:b5:b8:df:88:69:79:4c:93:
b7:fc:09:27:6f:4e:16:f3:51:f1:0f:f4:47:4c:6b:
3e:57:da:5a:6e:14:0e:d5:8b:10:7e:d1:e0:f0:53:
fa:72:65:33:f9:45:ae:5c:f9:66:c0:8e:e2:a4:e2:
c4:6d:50:d5:91:fd:c1:9e:2f:c0:f8:07:00:bd:89:
89:86:59:b2:89:1d:a8:db:e4:80:92:c6:ad:e9:1d:
02:30:91:e8:b1:8a:05:d5:67:6a:c3:d9:5b:69:fc:
ba:41:13:aa:f7:be:20:b9:41:a1:91:ea:16:c3:99:
aa:63:d2:b3:57:96:d8:cd:02:0d:e9:fd:ec:f0:42:
8c:20:15:30:96:eb:72:b3:60:40:e7:24:22:8d:99:
7a:cb:74:9b:31:a2:ac:07:7f:b8:c9:1d:75:5f:70:
c0:95:a1:f0:a3:8f:ee:e2:2f:2c:17:0f:00:7a:e9:
06:c5:ef:04:f4:00:1f:ae:aa:61:5b:ce:67:c0:bf:
f2:1f:b1:f3:e0:eb:19:73:a7:f7:ac:6a:84:e8:59:
a8:8d:a5:90:fe:3f:3c:eb:e4:b3:87:c2:ab:0c:79:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:4A:44:A0:6C:A2:A4:A8:F0:13:76:6C:48:3D:84:AB:2F:63:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/47a5e300-1c0d-4b9c-a4f6-bb92ab1bcecf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d028:8000::/36
Signature Algorithm: sha256WithRSAEncryption
16:57:ca:66:b1:c3:40:d5:fa:75:2f:9f:5a:96:f6:80:c4:c5:
de:08:7a:c5:ef:e2:fb:52:1e:53:ee:62:12:d5:e4:59:ee:ee:
e4:be:ff:bb:96:db:22:9d:ab:9e:9f:46:98:03:0c:4e:d3:c3:
b5:41:95:8f:ad:34:c8:ee:16:e6:f8:52:9b:1a:e0:7c:92:b5:
b2:29:66:6f:67:e7:5f:8f:a2:8f:b1:7c:b3:7f:55:7c:ec:58:
b7:39:4e:51:3f:ed:b0:b3:73:3f:4a:81:64:57:60:29:ba:a2:
29:af:83:1a:cc:1e:3c:8c:6d:e6:3e:cd:00:14:ac:6b:7b:70:
63:48:6b:72:5e:af:a5:80:0d:76:63:ed:c6:88:14:98:b8:6d:
d8:4d:0e:c0:23:ff:f2:8d:64:39:a5:df:e3:f0:68:6e:95:fe:
29:16:09:f4:9d:45:5f:56:77:f5:7a:10:7b:53:b8:dd:2b:36:
c4:fd:38:1f:43:69:4a:41:b5:9a:74:8e:92:2e:2a:6e:d8:e7:
79:da:d5:9d:08:3b:b4:77:6f:76:b7:f7:4a:c8:9b:b3:44:a0:
8b:6e:8d:48:fd:3e:15:c9:34:82:04:30:d4:b6:1b:03:63:11:
89:c4:c7:c5:26:6d:32:f0:33:9c:7b:7a:b7:e6:0b:03:a2:6e:
d6:ed:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:56 2026 by rpki-client