Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786bf5d2-4233-4f3d-85f2-5c990abd5f76.roa
File: 786bf5d2-4233-4f3d-85f2-5c990abd5f76.roa (raw, json)
Hash identifier: QuUG1tEQpI8sOQkiDs6ObqnWnq49hPmj9RzWwWd4TtQ=
Subject key identifier: EF:CA:BE:D9:07:03:53:DB:25:27:E2:6A:52:B3:40:24:C8:D4:15:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F8B19644890E3743DB99A3E012E2D85B50FFC0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786bf5d2-4233-4f3d-85f2-5c990abd5f76.roa
Signing time: Sun 31 May 2026 01:11:03 +0000
ROA not before: Sun 31 May 2026 01:11:03 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8b:19:64:48:90:e3:74:3d:b9:9a:3e:01:2e:2d:85:b5:0f:fc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:11:03 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=4399662ec3994641f9bd1d2903a6ea43575091cb33ab83de3b1a67a94528da1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:df:df:e6:a5:f2:30:69:7e:6b:da:c7:a6:
a1:59:a9:9e:f2:69:41:88:df:02:18:8a:b3:1f:20:
ea:0e:55:56:dc:01:27:5f:a1:9c:9b:1e:bc:0e:37:
74:ce:de:6a:85:68:85:dd:63:b0:71:9a:0d:0b:4c:
90:d7:08:4b:47:f8:cb:6e:43:ff:5f:1c:29:a3:55:
92:d6:ee:78:40:d0:da:49:9b:f1:09:b4:09:0b:11:
5c:4a:5a:b5:46:59:0f:26:78:55:35:21:c5:e8:79:
68:ec:0f:9a:a9:60:3e:df:1d:25:fd:6f:87:9d:ae:
8e:1e:9a:dc:11:8f:7e:5b:6f:82:49:71:2e:63:41:
56:68:a2:bf:46:6b:d9:26:0f:09:dd:73:65:be:66:
31:58:53:de:2c:fd:7b:c2:8d:cb:80:89:18:b0:91:
fa:38:f5:f2:a6:88:98:49:7f:ef:d6:42:8b:0b:52:
68:92:cb:56:a8:f9:0c:51:0c:5c:59:7e:ba:44:2a:
97:66:ed:8d:08:c0:9b:48:ce:9e:30:b8:c6:b7:78:
21:1a:6d:7c:fb:93:d5:d8:48:56:1a:52:be:3a:c4:
59:fa:03:86:1c:6a:41:92:0f:19:16:8a:a6:ec:32:
a6:93:1a:55:63:ce:16:6c:aa:56:aa:45:ee:eb:8f:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:BE:D9:07:03:53:DB:25:27:E2:6A:52:B3:40:24:C8:D4:15:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786bf5d2-4233-4f3d-85f2-5c990abd5f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:6d:b7:f7:81:86:53:ff:12:17:e0:c7:62:12:9f:ca:ad:33:
be:bf:f2:a6:de:d8:5a:92:9c:40:99:3e:a1:4b:0e:39:f1:fa:
44:b5:bb:f7:11:da:5d:c7:27:21:b4:2b:0e:9f:27:ea:7d:fe:
8b:79:3d:62:27:19:4b:49:67:d6:7c:8b:c9:c2:ee:24:f4:23:
a5:fe:18:2e:17:73:96:ab:71:8e:1c:e1:01:14:74:07:57:b2:
16:d6:df:12:cf:2e:48:20:61:a1:9a:b2:de:70:e2:46:ea:44:
ba:74:6d:77:2f:9f:6b:63:9c:41:cf:97:05:d5:8b:a8:14:4f:
90:fb:2d:aa:16:07:2c:88:0a:5c:d2:91:01:57:6e:30:f4:0e:
74:e0:77:04:74:13:ae:85:70:ec:ce:c4:15:c5:af:24:c2:96:
6e:c6:ac:ae:ac:ad:bc:62:ae:f8:06:ad:d0:06:e6:3a:dd:00:
a7:32:41:3e:b9:fb:f3:51:35:68:4e:a5:20:04:6d:72:d9:ff:
25:a7:e5:46:c6:85:97:ea:4c:9d:dd:70:fc:ab:52:24:2b:e3:
7f:97:90:3e:10:29:f9:9d:b2:3e:0e:ad:41:ea:2b:65:c2:21:
9b:a7:10:82:a7:d4:11:60:ab:83:0b:54:5b:a4:44:2e:65:51:
dc:18:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:25 2026 by rpki-client