Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File: 4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier: 09ACSzytto8wpLP9TlMGJNTfw6TfcY3xJuZoGdt9MhI=
Subject key identifier: AA:FF:A4:D2:F0:72:5C:B0:7A:C0:C6:78:2A:21:40:00:BA:3D:44:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18723036855A8D7380F20BFD246E78926F7472D3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time: Tue 19 May 2026 05:31:01 +0000
ROA not before: Tue 19 May 2026 05:31:01 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:72:30:36:85:5a:8d:73:80:f2:0b:fd:24:6e:78:92:6f:74:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:31:01 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=ddfbc27808f7b732b1ff9deb44b04f8ca3e9085ceea8bd1d47ccde97cbd67fe0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:95:37:00:15:0b:0f:f7:ed:2a:69:77:23:
37:2b:cd:f9:ea:d9:ad:8d:8f:12:a1:f5:e1:7a:44:
3c:88:82:4d:cc:36:c8:31:07:98:78:59:82:04:75:
8b:6a:be:9b:69:49:55:d8:2a:fa:3f:b4:a3:16:77:
0a:2e:27:1a:e1:41:c2:08:58:2b:2f:b9:6c:6d:50:
05:34:2e:59:a6:e9:3b:16:06:fc:91:40:ec:4b:e0:
86:64:02:f0:64:05:e1:08:fd:4c:54:c8:03:f0:e4:
90:51:b9:6b:91:97:4e:da:9a:37:15:4c:ba:25:4d:
3c:fa:61:3d:94:49:9a:4d:ac:40:cb:a9:2d:9f:61:
1e:e0:fe:cd:89:2f:f6:f2:22:35:92:12:15:0f:78:
51:c9:79:5a:b8:02:60:58:48:2e:36:04:3a:9b:ff:
71:2d:d8:c5:2e:c2:3b:ed:59:44:14:4f:92:e1:ca:
01:71:67:36:84:27:7a:4e:57:14:e3:24:bb:5d:41:
ed:da:28:f8:9e:ac:1d:3f:1d:b3:8f:42:ad:b5:01:
ec:6d:db:64:43:75:02:4e:13:4e:e9:70:85:a5:fe:
47:57:b4:c9:ef:cb:02:98:72:57:ef:8f:9e:39:2c:
0b:9a:bf:0f:93:1a:db:fd:04:79:07:87:b6:72:2a:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:A4:D2:F0:72:5C:B0:7A:C0:C6:78:2A:21:40:00:BA:3D:44:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5080::/48
Signature Algorithm: sha256WithRSAEncryption
77:4a:2c:ca:2f:5b:9b:74:47:78:48:d8:8b:60:82:e4:39:b5:
97:46:ed:8c:28:8d:e9:28:c5:e8:9d:3e:4a:d8:03:fe:1d:48:
b0:9d:c2:4e:8c:b3:25:66:96:8a:ad:f6:ec:9b:f7:58:c3:fc:
b3:2a:3e:49:c7:c9:27:bc:d1:66:ec:bb:df:67:74:7b:bc:a8:
81:fa:6a:2f:f4:ba:0e:7f:dd:8a:b1:58:86:20:66:8d:46:bb:
7d:20:5b:1f:7f:49:4d:22:c0:ec:8e:c0:c7:f0:e3:51:32:00:
2a:1a:5a:22:65:5a:92:a7:6f:15:33:5f:83:41:eb:83:42:f2:
7c:c2:d5:1a:76:97:4d:56:76:c3:d2:e1:47:72:38:8c:c1:11:
e8:91:99:c5:55:59:95:75:21:c3:be:1b:0f:f0:de:78:f3:ae:
3a:59:c1:50:c0:7e:e6:b7:5e:29:9a:35:24:2c:2b:8d:81:a2:
75:30:64:16:8e:52:cb:1a:dc:67:39:06:b8:95:db:b6:06:a9:
b0:2b:87:aa:1c:72:4b:8a:58:a0:20:b5:ba:6b:b3:06:9f:18:
96:f4:bd:ba:04:55:b8:5e:df:09:c0:5a:32:36:e4:27:b0:7d:
7c:7e:c7:af:10:c3:96:f0:68:2c:34:52:32:fb:05:61:50:ea:
c1:c3:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:01:49 2026 by rpki-client