Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa
File: 73488a43-875c-415a-9969-c278b245b9fb.roa (raw, json)
Hash identifier: HPYjNqvDxbAkJvBJqifSTz8vptxZJ4033CSHiQF2O94=
Subject key identifier: 73:D3:3F:49:4B:95:7E:EF:52:47:26:73:AD:92:E2:99:73:9C:8C:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D576526D8F5CCBE8568A892DEB91CB8C0E0E2D1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa
Signing time: Tue 19 May 2026 05:40:52 +0000
ROA not before: Tue 19 May 2026 05:40:52 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:57:65:26:d8:f5:cc:be:85:68:a8:92:de:b9:1c:b8:c0:e0:e2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:40:52 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=47f18b4e21df611222999a1a4b46be9aaa23c92288028ab39ab7303319d08d69, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:2b:73:9b:4d:70:43:bb:82:4e:3e:10:c2:
91:46:1f:d9:a8:9e:09:c4:62:f7:0c:e6:7e:c6:ee:
70:07:ce:d8:05:3f:1a:44:0f:c5:b1:d2:45:bc:5c:
81:99:34:46:55:af:91:e5:26:3b:2f:f4:af:96:f6:
1d:e2:f3:20:ba:8c:56:27:70:21:04:84:7d:68:9b:
13:69:04:85:b4:d4:de:69:63:dd:89:e8:a2:49:24:
3f:2c:a5:20:11:0c:ad:2d:ed:62:2f:97:5d:be:00:
16:5a:57:5d:1a:bd:ef:8e:be:0a:46:8f:bb:2f:d8:
c9:44:f5:1d:e3:90:dc:d5:04:e2:7e:03:34:38:1a:
70:20:d7:26:1a:91:9d:d3:8e:e7:4d:88:9d:d0:b7:
c3:34:d3:53:a8:01:a4:dc:34:33:74:1a:ee:eb:6a:
9b:0d:8f:f5:58:62:40:c8:ae:7f:93:8e:e1:89:bf:
b0:65:82:f5:b4:58:cb:eb:a8:5e:6b:c2:ff:ec:d6:
f2:40:35:00:2e:86:36:18:53:1a:14:95:a9:24:f4:
58:b4:cb:16:f5:a6:01:45:5a:42:c2:a2:af:a0:4e:
0e:2c:51:34:8e:0b:bb:cf:b9:19:c8:9b:7d:47:ae:
cb:3a:0b:03:1a:81:f4:42:21:09:16:ee:dd:1e:10:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:3F:49:4B:95:7E:EF:52:47:26:73:AD:92:E2:99:73:9C:8C:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e080::/48
Signature Algorithm: sha256WithRSAEncryption
94:62:9c:15:e3:85:ea:64:89:b3:d1:4a:6c:a1:4c:d4:d4:4d:
ef:b0:59:e5:ad:00:c1:3b:1f:ee:d8:93:f7:e9:9c:81:28:20:
06:3c:72:58:d3:dc:0c:27:8e:ac:5c:34:6d:95:16:88:24:24:
e3:12:11:53:85:34:9a:09:4e:47:cf:e2:bd:f8:99:47:a7:bd:
55:9d:6c:0f:ca:9d:8a:a4:ab:9f:28:e9:63:ae:de:87:53:a9:
d2:a0:8e:90:82:ac:9e:af:fc:62:fb:36:9a:4f:41:1e:a7:c7:
6f:e1:20:a4:ad:11:55:b6:f6:46:57:00:52:72:2a:7a:13:aa:
ca:c5:ab:d3:93:07:f8:e0:c9:12:82:c2:84:08:4d:c1:56:1a:
b1:cb:15:fb:af:a5:9a:42:b6:a7:5c:e8:f7:94:22:3c:5d:45:
cb:3b:06:a0:27:66:71:7c:9e:0f:9d:c1:47:09:f3:4c:52:f9:
7b:6d:b8:aa:97:78:99:41:c7:7e:c5:2d:97:88:11:20:a4:ae:
86:e3:40:ae:00:29:b5:4f:90:e3:bc:dd:ea:15:48:1e:eb:71:
78:a6:25:59:2a:0f:a0:fe:5a:35:ed:7d:c0:28:5f:d2:96:59:
e2:e9:64:33:bd:0c:39:c2:eb:0f:40:0d:75:af:d3:27:00:e8:
67:d5:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:12 2026 by rpki-client