Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
File: 5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa (raw, json)
Hash identifier: AVeiEr9BhXtVMaSKxiYBWRbBFNgtWM/OjfF70B+cU+g=
Subject key identifier: 01:20:FE:B2:7B:51:5B:59:A9:81:C1:99:14:2D:0B:F0:00:98:94:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E4929E5BCFCA7C3B3AADCDEF92CE1DA3571D157
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
Signing time: Wed 11 Feb 2026 01:20:06 +0000
ROA not before: Wed 11 Feb 2026 01:20:06 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:49:29:e5:bc:fc:a7:c3:b3:aa:dc:de:f9:2c:e1:da:35:71:d1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:20:06 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=2248605a8ded5397565183c3ccb3a16695bd7ddf4e93476075eee33300a43801, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:6d:64:da:33:21:bb:00:e7:c4:04:ad:fd:
d3:b7:b0:2d:17:74:13:8b:db:3f:83:a5:fc:13:64:
58:7a:5a:9b:e9:e2:6b:db:e4:38:60:bb:07:7c:97:
62:7b:1a:f8:04:9f:83:04:4b:6c:55:df:40:dd:00:
98:a0:61:06:65:95:a9:00:2f:4c:64:4d:10:5d:b0:
5a:03:f3:a3:ef:96:9b:5b:a7:38:04:b9:91:f8:51:
89:eb:73:1a:3e:26:aa:89:13:ed:10:28:ed:7b:d3:
a7:93:7e:b9:95:36:35:5c:2a:33:e9:3b:74:b6:50:
0f:fe:e0:9a:b2:1e:d4:f4:5c:93:ce:74:bf:cc:e3:
24:54:a1:58:3e:fd:5d:78:d0:e4:6c:a1:22:39:25:
aa:72:0e:9b:93:73:2a:b8:23:d9:e3:b8:ed:98:51:
71:17:c2:7c:33:27:40:6f:df:98:28:e8:bc:8e:b2:
a5:cb:2d:90:86:ac:5b:44:06:ed:51:e9:af:10:b1:
de:d9:73:27:c6:4b:a9:43:9e:d4:e3:4c:f6:7a:f5:
01:41:56:5c:a3:fb:1a:fd:da:b5:9a:d4:67:44:e3:
70:83:82:b1:e3:f9:33:2d:92:80:11:b0:a1:5f:7c:
4e:5f:ce:bb:94:0c:2d:8f:ae:e1:41:cb:0b:48:d8:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:FE:B2:7B:51:5B:59:A9:81:C1:99:14:2D:0B:F0:00:98:94:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9f:07:74:d4:91:1f:aa:9e:bf:8f:5f:56:f4:6a:5f:35:cd:
08:e8:3f:e4:cd:8b:87:26:37:40:7a:14:59:c0:bb:fc:8c:6c:
71:02:b4:48:8d:d2:45:c9:0a:b3:10:6e:23:d6:35:a2:9d:9a:
32:cf:c3:13:f7:fe:66:72:96:61:0a:17:16:27:dc:ed:57:d5:
a7:22:99:86:72:f2:dc:a4:ed:b4:0b:c4:0e:13:bc:44:69:c1:
66:3a:3f:10:c9:a6:14:62:e1:3c:b8:bf:5f:60:f2:f2:cf:69:
42:ab:49:2c:3b:02:7e:8b:2d:af:ad:7f:7a:f6:ad:d1:55:0c:
91:7e:70:fb:2f:2e:ad:f5:80:16:3d:b8:6c:02:35:51:5b:f2:
8c:de:03:67:e3:85:a4:ce:f8:6c:b4:e9:68:55:c1:b0:22:5b:
81:cd:ba:d5:68:99:21:53:3d:90:79:b1:b5:fb:b8:c2:20:46:
39:81:0b:10:ae:31:87:d4:91:8d:d8:7e:fc:1d:d6:bf:30:84:
db:c9:f8:bd:1f:9b:8a:a2:b4:9d:3c:e1:85:4e:a3:eb:38:ee:
e7:0f:49:04:5d:13:4b:be:90:4a:1f:7d:b8:84:d1:d3:01:df:
e4:da:fa:ec:bb:60:76:36:c6:4a:05:62:6f:c8:d9:cd:c8:9d:
76:ee:af:6f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTkkp5bz8p8Ozqtze+Szh2jVx0VcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMTEwMTIwMDZaFw0yNjA1MTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDIyNDg2MDVhOGRlZDUzOTc1NjUxODNjM2NjYjNhMTY2OTViZDdkZGY0ZTkz
NDc2MDc1ZWVlMzMzMDBhNDM4MDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOEZbWTaMyG7AOfEBK3907ewLRd0E4vbP4Ol/BNkWHpam+nia9vkOGC7B3yX
Ynsa+ASfgwRLbFXfQN0AmKBhBmWVqQAvTGRNEF2wWgPzo++Wm1unOAS5kfhRietz
Gj4mqokT7RAo7XvTp5N+uZU2NVwqM+k7dLZQD/7gmrIe1PRck850v8zjJFShWD79
XXjQ5GyhIjklqnIOm5NzKrgj2eO47ZhRcRfCfDMnQG/fmCjovI6ypcstkIasW0QG
7VHprxCx3tlzJ8ZLqUOe1ONM9nr1AUFWXKP7Gv3atZrUZ0TjcIOCseP5My2SgBGw
oV98Tl/Ou5QMLY+u4UHLC0jY1VcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQBIP6y
e1FbWamBwZkULQvwAJiUAzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWQ3OWYzNmMtZDM2Ni00YWU1LThhYjAtMTc5NjZmYjhjZjhiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA
wDANBgkqhkiG9w0BAQsFAAOCAQEAXJ8HdNSRH6qev49fVvRqXzXNCOg/5M2LhyY3
QHoUWcC7/IxscQK0SI3SRckKsxBuI9Y1op2aMs/DE/f+ZnKWYQoXFifc7VfVpyKZ
hnLy3KTttAvEDhO8RGnBZjo/EMmmFGLhPLi/X2Dy8s9pQqtJLDsCfostr61/evat
0VUMkX5w+y8urfWAFj24bAI1UVvyjN4DZ+OFpM74bLTpaFXBsCJbgc261WiZIVM9
kHmxtfu4wiBGOYELEK4xh9SRjdh+/B3WvzCE28n4vR+biqK0nTzhhU6j6zju5w9J
BF0TS76QSh99uITR0wHf5Nr67LtgdjbGSgVib8jZzciddu6vbw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:57 2026 by rpki-client