Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa
File: 5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa (raw, json)
Hash identifier: Fy/fgsCK/32JRlcwbqxXFQI8HftNsqImHM7g7xpDKSk=
Subject key identifier: 4F:32:73:D7:40:23:AD:6E:65:EB:EF:39:F7:4B:B7:4F:E9:96:9C:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F0958B67BD741E861FB03D7CE83DAD8646EB04A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa
Signing time: Fri 03 Apr 2026 02:40:25 +0000
ROA not before: Fri 03 Apr 2026 02:40:25 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:09:58:b6:7b:d7:41:e8:61:fb:03:d7:ce:83:da:d8:64:6e:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:40:25 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=ba6195135b95fc52dad5cf1be3a9bc74c41c7ede641fcb62a11d17af739ca540, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:49:5a:b6:bf:e5:ab:49:3e:97:4b:0c:77:
2a:79:70:2e:d5:c9:0b:ce:c8:0a:a4:7a:d8:84:c3:
86:81:c2:94:04:90:e0:20:d3:c7:8d:21:b7:6c:a0:
36:16:bb:60:11:ba:b4:59:83:71:67:78:18:ba:64:
80:f8:07:d4:59:f6:c0:0c:91:31:6a:d4:ed:d8:67:
31:e0:10:db:c5:b9:65:35:15:60:60:d6:e9:a9:da:
17:84:7a:46:e7:93:2e:ba:23:7c:e1:65:e9:f1:0e:
02:4f:50:2f:b5:b8:c8:95:db:26:df:af:d0:ee:54:
32:29:fe:45:5c:42:90:20:28:a4:6f:fb:87:ce:77:
d1:88:5f:24:1e:97:93:d6:83:91:bd:fb:fc:a5:03:
69:83:07:bf:9a:8c:42:1e:1d:49:63:de:ad:77:02:
94:84:36:61:c3:36:4b:fd:c2:6b:0a:fe:cc:49:1f:
e7:4f:16:7f:52:4b:39:39:88:d7:a1:76:4c:ea:ea:
89:71:4c:cc:a1:cd:b5:be:0a:e5:6b:60:12:ab:83:
5e:90:a2:2e:14:ec:fb:2a:1c:a5:89:16:e0:9d:bd:
02:68:35:f9:79:24:3e:d3:78:b9:d8:e3:d9:64:16:
79:75:8b:3f:63:71:fb:1d:f4:17:a6:d5:69:44:68:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:73:D7:40:23:AD:6E:65:EB:EF:39:F7:4B:B7:4F:E9:96:9C:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:e080::/48
Signature Algorithm: sha256WithRSAEncryption
5b:00:05:1e:69:e1:2b:ff:75:97:06:e0:d2:dd:d2:0d:37:f8:
75:42:b0:f5:74:10:22:3c:08:e6:7f:10:4c:88:33:04:78:4a:
e8:f4:bb:76:a0:a7:89:30:9c:05:48:11:52:c0:67:32:e4:31:
51:90:3d:98:d4:e8:23:6c:39:41:99:19:9b:59:41:91:7f:49:
3b:25:0c:5e:74:f3:bd:eb:34:a8:5c:20:a4:5e:d7:81:70:7d:
fc:64:c9:66:c5:5c:a6:f8:fa:eb:f4:3c:08:4a:55:2e:7b:33:
d6:25:c9:5e:8c:c8:86:9d:b7:04:21:fe:7a:18:6d:fd:ff:59:
41:b1:fd:7d:15:0e:73:16:36:51:98:35:f9:92:4e:36:b7:c8:
8e:bd:13:7e:70:fe:41:aa:1d:91:dc:b8:79:3b:6e:af:e6:15:
4f:a0:35:b3:82:13:02:2b:5b:48:c9:a0:e1:c4:63:00:3f:76:
b1:13:90:bb:8c:39:b3:74:07:3c:0e:a9:83:fc:6b:75:0e:e3:
78:2a:ee:5d:db:bb:5f:4c:21:67:5c:06:e2:52:bf:91:20:55:
4b:96:4e:72:37:9e:35:f4:26:02:b5:2e:98:fb:40:57:8c:41:
7c:b2:1a:05:d8:b3:55:0a:99:d1:d3:37:5c:bc:70:a0:da:e7:
53:e6:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:41:25 2026 by rpki-client