Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/783286e7-6fdb-479f-ace8-44d2a9cf2865.roa
File: 783286e7-6fdb-479f-ace8-44d2a9cf2865.roa (raw, json)
Hash identifier: Ry9S7gotBnyHEp72Uxrj9xuRFsNnEtgrgvBHYozfexc=
Subject key identifier: 0C:87:D5:36:7C:44:A4:7A:1C:34:AA:BD:B2:E7:F2:DA:52:31:77:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4329A2A59951B4113B1C1FDE40F8A7FD3E4ED880
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/783286e7-6fdb-479f-ace8-44d2a9cf2865.roa
Signing time: Mon 06 Apr 2026 18:36:51 +0000
ROA not before: Mon 06 Apr 2026 18:36:51 +0000
ROA not after: Sun 05 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:29:a2:a5:99:51:b4:11:3b:1c:1f:de:40:f8:a7:fd:3e:4e:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 6 18:36:51 2026 GMT
Not After : Jul 5 23:59:59 2026 GMT
Subject: serialNumber=21077b5fa95a6a0e9a51d733d69c4c2d3864a8dd7350fa8213c58b36419353dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:10:2c:e4:ab:58:95:6c:96:02:48:dd:28:
4e:b7:18:be:9a:b7:a2:e0:15:cd:8c:42:30:87:37:
9a:e7:f0:0e:64:ae:82:d4:68:10:63:b5:f6:80:3c:
0c:19:70:64:38:ba:cf:4a:86:bb:a2:02:dc:52:d9:
44:de:5a:ac:17:8f:9c:ff:91:63:76:c6:0a:d9:f3:
ea:13:06:e3:78:47:1f:e3:7b:e0:72:e9:d0:ac:82:
45:04:78:18:27:b0:18:79:20:c2:70:0a:aa:6c:89:
9f:4e:a9:1b:9a:db:af:c9:37:3e:1f:b3:39:f6:83:
ce:f2:9b:67:6c:f8:0e:e4:14:d8:89:2f:ef:6a:a3:
d9:ea:20:8f:ce:fa:e2:42:1b:ec:fd:c1:ce:c6:9e:
61:a5:6c:f1:18:cb:3e:fe:c0:1f:33:26:ce:23:15:
50:38:0f:45:93:73:60:bc:01:ac:80:31:9c:67:6e:
bb:4b:11:68:b0:98:01:05:90:47:c0:51:88:8b:a3:
47:75:d7:47:11:e6:31:e1:44:44:2c:4e:aa:0c:9c:
2d:e9:44:e4:46:12:59:04:cf:dd:6e:b3:73:f3:c1:
ad:64:ef:05:d5:75:fd:e7:b5:aa:20:61:14:ca:bf:
60:2b:e3:9e:a4:6e:4d:76:24:e6:78:65:03:e5:99:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:D5:36:7C:44:A4:7A:1C:34:AA:BD:B2:E7:F2:DA:52:31:77:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/783286e7-6fdb-479f-ace8-44d2a9cf2865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/35
Signature Algorithm: sha256WithRSAEncryption
1d:4a:14:d2:75:ad:c1:ba:30:00:17:4a:b3:04:78:cb:bf:97:
95:b2:3d:c5:54:e0:99:7e:64:71:37:20:88:22:04:7d:24:82:
c2:2d:87:bb:c0:55:e6:97:bb:d1:4b:14:8f:60:9f:e7:fd:87:
a4:27:0b:70:48:0f:27:15:e9:79:60:08:5b:03:41:a2:92:9e:
7b:19:4b:22:72:29:b8:56:c6:09:70:46:7b:46:09:da:8e:f2:
38:25:4d:c2:04:39:b5:8a:ee:2a:8c:76:c7:72:fe:ad:3b:22:
62:29:52:01:d6:3c:7a:73:e0:d7:c8:77:e2:7e:87:83:91:33:
a5:66:a1:62:df:79:30:0e:13:1c:c3:b0:f1:92:ad:34:e2:49:
80:9e:57:23:ce:7b:2a:d2:79:2f:25:12:93:af:92:26:46:21:
83:77:c3:eb:e6:3f:b0:8f:19:b1:59:54:59:c8:9d:67:5d:ed:
60:7f:8b:45:c1:8c:99:60:0e:26:d5:bb:a6:3c:10:e8:6f:e3:
18:c4:17:30:63:d2:5e:33:0c:30:ac:88:c0:98:37:7f:18:24:
3e:5c:27:c2:52:e5:f6:3f:13:b1:93:91:4d:e3:bc:19:02:c4:
fd:81:51:3d:0d:e3:d0:55:57:30:88:1e:0d:86:f6:90:e5:ea:
ae:69:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:40 2026 by rpki-client