Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56a8ce5c-1a9d-4180-8e0c-b46acde25c4c.roa
File: 56a8ce5c-1a9d-4180-8e0c-b46acde25c4c.roa (raw, json)
Hash identifier: zl+YpcQgzQKTeyXhCt0Scuq6iT8f4zExhxRG4dqy9lQ=
Subject key identifier: 2C:F8:EC:08:F3:72:09:87:E4:36:5E:CE:DB:5B:8F:5B:D3:E5:FF:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29C77C02BB9C0DBECACF84B3DF0D5939E86F2F22
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56a8ce5c-1a9d-4180-8e0c-b46acde25c4c.roa
Signing time: Sun 31 May 2026 01:10:46 +0000
ROA not before: Sun 31 May 2026 01:10:46 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c7:7c:02:bb:9c:0d:be:ca:cf:84:b3:df:0d:59:39:e8:6f:2f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:46 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=31f8d57916a2595451ab678dc4d616d31fbc76cd8d8c5f4a195f83695032b7d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:5d:73:a3:93:b0:5e:b4:89:91:ee:23:36:
82:fb:a8:de:ce:ea:ef:88:69:cc:6a:a7:68:31:49:
39:42:b7:43:de:2a:6d:73:3f:5b:a4:ae:78:ff:88:
6a:8f:82:46:f6:48:03:ec:a3:d8:d2:c2:26:d0:df:
ac:4d:23:61:5e:b5:c6:02:a7:c4:37:f0:b5:76:10:
9a:22:bf:e3:30:e4:c8:b5:15:b6:95:f7:08:a4:79:
b5:13:00:ca:b6:3b:a9:59:1f:c7:34:f0:de:ed:85:
4e:4a:e7:bb:53:d4:28:8b:03:b5:f3:29:12:60:7b:
ae:e1:78:06:47:99:bb:4f:18:fc:da:dc:86:14:d9:
ce:d2:dc:5e:7b:cc:d9:10:88:3e:7c:84:0b:24:19:
fe:76:4e:a9:bf:7f:5d:f8:4a:d8:2a:19:92:0d:0c:
6b:49:60:f8:58:62:39:55:d6:66:8b:4a:8f:a8:e6:
05:42:76:26:4e:a0:a8:bc:72:92:3d:fe:65:8d:4c:
23:84:5a:0c:e4:48:c9:d7:6d:fd:9c:dd:72:0b:c9:
ec:04:78:1f:33:2f:f5:42:58:a1:42:ce:1d:29:6e:
a7:ce:20:d8:ff:bd:8d:80:f7:83:10:c6:58:a5:ee:
65:f8:2a:be:19:6f:92:f2:1b:36:62:12:ec:7c:65:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:EC:08:F3:72:09:87:E4:36:5E:CE:DB:5B:8F:5B:D3:E5:FF:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56a8ce5c-1a9d-4180-8e0c-b46acde25c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8040::/48
Signature Algorithm: sha256WithRSAEncryption
a5:dd:d0:98:fe:c3:d9:5e:4f:92:d5:ec:19:aa:54:42:3a:3d:
e5:b3:e0:b7:ac:40:9a:1f:cc:a8:9b:9e:26:03:1c:27:c2:89:
e4:0b:04:ed:47:2f:63:36:ff:15:55:1e:81:d5:98:56:b6:fd:
52:9c:eb:41:53:62:41:4c:aa:6e:5e:e0:55:e6:3b:b7:15:89:
ff:0b:86:ce:ba:1e:ac:1c:be:4c:81:6e:f4:20:a3:6d:41:c7:
4b:03:75:86:6e:88:61:00:53:1c:12:98:3f:70:69:e6:6b:d0:
a2:ab:28:89:33:ec:82:9a:37:a7:3a:ff:a9:7d:c4:bf:2a:c9:
a5:ee:4c:e3:a9:72:e1:4e:ab:cb:e7:2f:5e:0d:89:af:68:de:
09:11:b7:39:ed:03:a2:4e:16:82:e2:20:b2:95:42:a7:3b:d3:
70:83:60:0d:7c:92:30:2c:59:8c:ab:87:c8:9c:81:94:37:20:
c7:ac:10:cc:2a:be:a4:f5:4d:6a:14:5a:87:62:13:17:1f:ce:
0b:1b:22:53:d8:5b:4f:22:b9:a6:a2:79:db:71:0f:ba:3d:67:
c5:20:1e:9a:3b:76:35:42:23:35:2b:f5:7c:0b:82:af:20:4a:
21:ef:f6:1e:f5:9d:34:e8:6a:2a:17:36:69:83:3d:ad:1e:88:
e4:f6:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:02 2026 by rpki-client