Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7037317e-bcf9-40f3-b066-0973d33451f2.roa
File: 7037317e-bcf9-40f3-b066-0973d33451f2.roa (raw, json)
Hash identifier: utQoPsMY3c3HzKXpl4uCEH/GPdfNRw1xXW5a8UBBqRU=
Subject key identifier: 96:D9:D9:12:6C:2A:08:39:8C:E2:20:3D:CE:38:6F:BF:03:A9:C2:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FB7BB4BF72795420763456C6FCB92A6A05BBEB5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7037317e-bcf9-40f3-b066-0973d33451f2.roa
Signing time: Tue 19 May 2026 05:31:20 +0000
ROA not before: Tue 19 May 2026 05:31:20 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b7:bb:4b:f7:27:95:42:07:63:45:6c:6f:cb:92:a6:a0:5b:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:31:20 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b940e36b567b099de37cfe40a7567b534d6e3e46e5cfeafb49eddda8755c24a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:f7:ba:c4:fd:e1:4a:81:1a:bb:88:d8:57:
5f:d9:22:de:f2:11:21:53:f9:d2:28:a1:b6:b7:af:
ec:e9:05:12:01:fc:8e:90:d2:1a:7e:49:7a:ce:11:
10:d0:30:a4:2b:8b:e8:ff:f7:d6:d8:85:c8:67:ce:
01:e6:ba:7f:fb:05:d4:92:c1:5e:7e:1f:74:a3:45:
9a:2f:24:9c:20:18:7b:3e:ce:49:1f:96:5e:9d:6e:
60:86:64:c4:82:7e:99:15:d4:82:e1:b7:dd:3e:11:
fa:31:24:c2:ea:5c:0b:c1:9f:6c:16:d2:0b:83:68:
da:f8:eb:4e:04:2e:8e:ed:cf:5d:3b:be:a7:38:6f:
f5:f3:6c:56:59:f9:ee:a9:a5:2c:99:7c:89:32:08:
2c:26:da:de:f9:cc:06:18:54:42:75:3a:3a:44:ca:
2d:85:0f:eb:6e:06:9e:16:8b:87:ee:63:da:a4:84:
c9:9a:8f:d2:5b:8d:56:e1:be:6e:9a:33:49:f7:17:
0c:a5:85:0f:98:f0:96:94:0c:52:01:61:c6:60:35:
f9:0d:97:50:c7:90:93:78:df:ac:3a:a4:03:69:bd:
2e:a2:dd:67:0a:0b:95:ea:95:b8:22:c8:bd:bb:5e:
ee:c3:eb:36:51:c6:e0:f6:39:8e:28:1a:c9:20:2f:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:D9:12:6C:2A:08:39:8C:E2:20:3D:CE:38:6F:BF:03:A9:C2:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7037317e-bcf9-40f3-b066-0973d33451f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:9000::/40
Signature Algorithm: sha256WithRSAEncryption
43:47:f2:8a:0f:c0:56:ec:3c:b2:64:e6:8e:ef:2e:ff:b1:ac:
4a:2f:dd:87:5d:82:78:ca:2b:7a:41:0a:88:8e:d7:b4:e0:fa:
42:e4:bd:eb:9c:cd:76:98:49:40:f9:56:f2:df:d6:27:7e:2d:
9f:25:cb:d1:c3:c3:97:89:65:0b:b5:d0:18:f2:9a:e8:eb:1a:
49:5c:30:4c:12:72:06:ed:00:b4:33:32:a6:2c:8a:bc:59:6d:
4e:59:0e:d0:cb:72:0f:98:89:ac:a9:02:ff:41:47:2c:21:cf:
56:bb:b5:f6:8a:4b:4d:33:cc:38:ab:f3:ca:ee:80:fe:61:74:
9d:25:5f:57:e4:2f:54:43:1a:3a:5e:ca:b5:a0:86:9f:d3:8a:
a6:9f:fd:07:5a:64:4a:64:3d:86:25:18:e2:6b:8b:46:c8:f6:
12:6e:5a:1b:2f:d8:1f:e7:85:39:b6:e2:09:e8:ad:40:09:20:
06:01:a6:a2:55:b6:ed:d0:7b:25:21:df:dc:64:9c:3c:5c:f1:
a6:bb:c9:06:84:d1:5a:c4:cc:7f:1c:cb:cf:15:cd:c3:02:37:
d8:d7:7f:88:c6:ba:29:06:64:d7:3a:37:83:8e:64:13:48:49:
ba:ea:a1:a3:1c:b2:c0:55:f1:a2:cd:61:6c:7c:34:20:9a:d5:
c1:18:18:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:02:14 2026 by rpki-client