Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
File: 6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa (raw, json)
Hash identifier: WJLBgDUeR1K6o1K2HnmT8wdmoeuPGrPy0xfmHZtVQBw=
Subject key identifier: E5:BD:A3:75:E3:03:5B:29:62:EB:ED:D5:1D:6D:C1:13:5D:56:3B:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34DF1276E0EBAF378EC1D7A38A5F68394CF329E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
Signing time: Wed 11 Feb 2026 01:30:12 +0000
ROA not before: Wed 11 Feb 2026 01:30:12 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:df:12:76:e0:eb:af:37:8e:c1:d7:a3:8a:5f:68:39:4c:f3:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 11 01:30:12 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=0499cc48977118913c7917efa3f267b98b049621b30db94652cee14412146c4f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:18:37:9c:d7:35:63:d6:8a:c3:67:e9:d6:
12:cf:9a:30:7c:62:9f:9e:8c:ef:c3:7c:a7:1e:8a:
b0:f7:51:0b:9d:6b:8a:c7:42:45:b9:c2:e1:41:34:
3b:f6:53:ed:76:b3:38:2d:7e:8e:3c:02:10:0b:c3:
bb:bd:ae:e9:9c:81:eb:7d:7c:ed:c6:fd:67:8a:0f:
ca:a9:9e:e8:f7:dd:66:19:90:67:d2:1b:06:d9:f9:
f3:2d:be:e4:13:26:a6:7d:20:f1:a6:f0:15:00:4e:
e3:a2:e3:c9:c0:88:9b:fc:70:86:21:37:27:c0:07:
a8:e3:c1:4d:1f:b6:0f:7e:80:ba:f3:7e:f3:2d:7c:
52:f2:64:d2:ca:70:62:fa:e9:13:e9:25:57:98:b7:
8e:52:71:a2:3b:3e:53:10:96:7b:a6:62:b4:89:ed:
ae:49:2d:0d:fd:21:e2:ff:50:96:c4:c6:cf:52:24:
eb:2e:dd:0b:4b:08:71:ee:8d:18:c1:18:98:28:d5:
b3:2b:60:3e:39:cf:b7:45:3f:d7:19:59:d4:28:69:
a0:d5:22:40:d5:a7:cd:20:29:65:f0:b8:3c:66:66:
5a:e7:de:dd:4e:be:75:4b:51:df:e5:d3:d9:a0:b4:
79:ac:b6:15:cc:4a:de:4c:07:f2:5b:48:b5:a4:f1:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:A3:75:E3:03:5B:29:62:EB:ED:D5:1D:6D:C1:13:5D:56:3B:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8020::/48
Signature Algorithm: sha256WithRSAEncryption
4d:33:fe:94:3e:c0:0e:26:d7:35:7a:21:72:8a:9e:31:ef:bd:
8f:7a:bf:0f:7c:39:e6:92:5f:97:08:24:d3:16:a9:85:21:a0:
22:36:3c:52:0b:e3:d1:d9:df:af:85:55:f4:e6:8a:2d:59:d6:
88:14:6a:a1:6c:3a:df:96:3d:c0:1e:a8:e8:7e:32:34:25:3d:
31:ee:fd:c4:f6:32:c4:c0:67:a3:a9:0e:be:38:57:2f:6d:fe:
b7:4a:88:3c:13:f3:80:67:8f:e5:db:98:66:89:16:6a:61:db:
e1:a8:d6:80:38:cd:30:38:28:32:fe:c7:53:75:b2:90:3a:aa:
92:14:99:f7:4f:79:97:42:81:2d:ce:a0:4e:3f:bc:05:88:a2:
52:94:f3:1c:b0:23:d8:45:8f:74:35:d0:88:76:f3:9a:97:96:
1c:3d:26:02:48:ac:3b:7e:ff:f6:1a:d2:95:82:b6:28:3c:64:
7a:91:7b:3a:92:cc:b4:da:30:e9:c6:18:34:09:b8:b4:ef:a8:
0f:6b:8c:7f:d9:d6:a3:57:be:e0:be:a4:6c:9d:dc:62:f5:18:
13:fa:03:1b:ce:66:4a:4d:2d:91:86:f2:91:f8:6e:1c:a5:c1:
33:59:14:72:0c:78:93:5b:17:4c:90:85:7f:83:5e:0c:30:90:
0e:fa:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:00 2026 by rpki-client