Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77b6b975-322f-4b1f-ae7c-9f5f58f00cf6.roa
File: 77b6b975-322f-4b1f-ae7c-9f5f58f00cf6.roa (raw, json)
Hash identifier: 1vzWSvosFreIxuYqxjSR139aZ2YgDTigUemvGQgG52Y=
Subject key identifier: 10:1D:92:4D:85:D9:1E:3B:04:BC:99:91:06:70:8F:CF:35:7B:61:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 353F32FC2AFC2077615CD6C99167ECD499474D00
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77b6b975-322f-4b1f-ae7c-9f5f58f00cf6.roa
Signing time: Sun 31 May 2026 01:10:43 +0000
ROA not before: Sun 31 May 2026 01:10:43 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3f:32:fc:2a:fc:20:77:61:5c:d6:c9:91:67:ec:d4:99:47:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:43 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=9ee2d5eb5c1d64bba054bab7250abde35a0e6a8a66bf6196a60d24ffd3017f00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:e3:63:63:4e:3d:9a:35:8e:d3:6c:59:82:
a9:5d:f9:77:5b:63:fe:4c:a0:91:30:d1:27:d4:6b:
7c:e2:d6:61:2c:2b:cb:1e:72:f3:52:70:d8:d9:43:
4f:22:cf:67:57:8f:e3:c9:9b:6e:33:0d:7f:e7:5a:
11:8b:24:07:94:62:d4:79:39:3a:b1:bc:76:db:a9:
87:f6:a4:b9:30:c6:3e:d2:46:31:64:05:8a:e1:eb:
4d:85:c5:d2:b2:d5:39:38:1f:90:5f:4b:94:29:1c:
bf:f7:cc:8f:47:36:51:5f:9a:ab:16:f5:80:09:7f:
89:62:b0:0d:9b:1d:57:1b:0f:bf:04:18:4a:87:5e:
8d:8a:74:0c:54:1f:ca:da:e4:a9:5e:75:13:88:a5:
62:31:e4:57:80:45:91:a3:be:cb:00:54:11:cc:f4:
18:44:86:c1:67:79:bc:e1:54:74:c5:71:b9:b4:4d:
f2:4a:9a:3e:a9:f4:c9:63:a1:91:da:b3:e9:fe:df:
45:c3:54:45:6d:c5:4d:10:ab:03:1f:a9:be:7f:da:
b5:31:8e:41:9c:7b:60:43:ef:8d:c1:d1:e5:ce:61:
0a:5e:c5:53:95:4b:1c:59:48:97:79:14:72:17:5f:
60:91:f2:0c:b2:4f:a7:73:27:8d:f7:90:df:ff:cb:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:92:4D:85:D9:1E:3B:04:BC:99:91:06:70:8F:CF:35:7B:61:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77b6b975-322f-4b1f-ae7c-9f5f58f00cf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
92:06:db:77:90:fb:1e:f4:31:02:75:2a:5e:50:02:2c:bd:13:
ef:3f:c1:9c:47:cf:9f:c3:66:9c:27:55:35:f3:5b:56:5f:ff:
4b:a8:26:7f:d3:7c:18:53:fd:e2:8e:53:f8:08:22:bb:af:9b:
ec:02:dc:96:4c:2d:9d:fa:aa:89:67:65:e6:5c:5c:db:83:6a:
ff:14:d3:bd:40:da:7c:1a:bb:f5:bc:b6:e9:ff:80:8b:32:e8:
b8:50:8a:2f:b3:3a:00:44:eb:35:f9:56:e2:73:9c:e7:8f:c3:
28:6b:73:cd:4b:63:ae:91:e3:df:55:5e:eb:32:50:3a:f6:af:
3f:4e:11:c4:a5:40:8b:29:0d:15:c5:7b:4d:b3:87:a2:4c:20:
33:f9:21:ef:c5:e8:94:10:2e:62:49:c2:d3:16:7b:86:28:b5:
c3:3e:45:ec:1b:02:ea:9b:3a:13:03:06:d8:4d:e4:21:83:74:
ec:7c:05:b7:b8:f4:3b:9c:03:88:28:2f:8d:71:52:79:06:0a:
77:ac:05:14:91:2b:b8:4c:b2:16:a6:af:c6:88:4b:fb:40:80:
89:62:b6:43:72:20:1a:f5:7d:3a:7c:9d:09:39:30:9f:9b:69:
5c:3b:58:ff:20:db:32:88:86:4b:d6:97:ec:51:93:55:6a:e4:
05:93:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:44:52 2026 by rpki-client