Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/734fcad0-c770-461b-9f8f-6d059fbc03ee.roa
File: 734fcad0-c770-461b-9f8f-6d059fbc03ee.roa (raw, json)
Hash identifier: 0jxhb6LO+A1iR2aeQAF59+sX3PA+rQ4DtNodSJRl1+E=
Subject key identifier: B6:EF:07:0B:EC:92:9B:70:B0:CF:BA:83:71:38:D3:9D:BB:81:69:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A16F8BF6EE5A675F23E5A5BA890B8F08A0E5B5E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/734fcad0-c770-461b-9f8f-6d059fbc03ee.roa
Signing time: Sun 31 May 2026 01:10:28 +0000
ROA not before: Sun 31 May 2026 01:10:28 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:16:f8:bf:6e:e5:a6:75:f2:3e:5a:5b:a8:90:b8:f0:8a:0e:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:28 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=463b0cbb3d8e4f731017a757eb57db7f3841ab5d2cc2ea1881d1342be6e63926, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:52:5f:e0:d9:a6:7e:31:16:ca:65:04:ee:
74:c6:b2:4b:23:e4:c0:61:2b:56:4d:21:f7:de:b8:
b2:18:11:35:78:9f:72:63:96:78:40:73:c2:67:fc:
bc:66:6f:3e:16:e0:14:c1:dd:9a:1d:6e:fe:3d:96:
5d:4b:bf:f8:71:3f:6d:55:52:07:57:d5:f3:d5:bd:
b6:bf:36:bc:db:eb:61:1b:51:fa:65:1c:5c:85:9c:
b5:ce:27:de:4e:93:1f:1d:87:52:54:13:e1:80:53:
e5:59:c1:76:28:a0:d0:ab:50:1f:59:f7:cb:18:b3:
00:26:01:26:96:fc:2f:26:1d:86:3a:2b:2e:26:b9:
42:7b:2d:6d:13:92:b7:ec:51:8a:04:60:75:81:1e:
99:f2:00:51:2a:94:9c:39:3a:0b:50:d4:4d:24:a2:
9d:aa:80:ca:c1:4c:d7:03:4b:1a:27:35:1c:ea:2e:
06:12:ef:50:e5:fd:c4:93:f5:62:f4:0f:c4:17:a5:
c2:db:86:8d:f7:4f:a5:8f:52:db:c8:63:2a:df:d2:
d3:35:6c:ba:76:fe:b7:80:33:3f:15:ca:24:31:1c:
d0:41:9f:7c:c5:ad:84:30:0e:79:15:e4:ad:29:2b:
2a:44:d0:f9:a4:8e:00:4b:04:f7:d5:6e:1c:49:3e:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:07:0B:EC:92:9B:70:B0:CF:BA:83:71:38:D3:9D:BB:81:69:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/734fcad0-c770-461b-9f8f-6d059fbc03ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:a040::/48
Signature Algorithm: sha256WithRSAEncryption
58:5a:2b:bc:ab:57:f2:38:d8:8a:a9:58:19:05:0e:ff:54:63:
1c:e8:ec:f2:35:e1:17:25:4d:7b:bc:14:f7:3f:c8:25:c0:a9:
85:a9:f3:94:27:b8:7b:66:26:0b:5f:06:6d:73:15:65:53:32:
f8:89:95:02:e4:1a:14:0a:9f:70:7f:f5:12:53:6d:b8:5f:7c:
20:3d:28:31:c9:37:9c:bb:89:43:29:16:03:ae:95:43:c5:db:
e4:13:0d:3f:ce:48:99:47:46:44:9f:4d:b9:8e:e3:c9:3a:72:
d1:b1:30:83:a8:8c:89:5e:e0:f3:f4:d1:31:38:9e:0d:9e:54:
f1:30:01:2f:58:57:23:26:d9:e0:d0:0a:42:29:6c:c7:12:f2:
ac:33:79:8a:d9:7d:62:14:a7:67:0c:44:3d:3c:f4:68:75:e5:
d3:14:ad:6c:57:87:a5:05:8d:65:ca:cb:3f:7c:08:45:94:67:
82:0f:7f:9b:c6:a4:79:0d:65:35:be:79:b3:c2:ca:86:21:bf:
e9:82:31:17:ba:28:bd:39:7e:8e:34:e4:9c:81:a1:d2:de:bd:
6e:fa:40:30:0c:81:93:94:7c:0f:3d:17:a8:6a:86:f8:ce:e0:
09:14:82:c1:d8:d1:43:9c:a6:1c:b9:e6:f1:6f:63:61:af:17:
b9:3c:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:32:57 2026 by rpki-client