Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: ZtIlFwoc2wt/2nMKXvWryPwG1dwlavWakcAAtEtG2ig=
Subject key identifier: D0:91:EA:0B:CA:4C:A2:51:DD:25:2C:CD:D8:80:6E:F5:18:C0:0C:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FDC0EC4934F9AEAA1F7B578709BDCC1290C260E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Tue 19 May 2026 04:40:10 +0000
ROA not before: Tue 19 May 2026 04:40:10 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:dc:0e:c4:93:4f:9a:ea:a1:f7:b5:78:70:9b:dc:c1:29:0c:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:10 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=873da84309b450327edfbccb03b38375ac63c7d235e9bcd883d33e95a1a3cbad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:62:b3:f0:27:0b:58:56:af:92:16:0c:d0:
a6:f1:16:8b:c3:bf:e5:38:97:be:86:52:2d:db:46:
96:75:21:95:a6:51:7e:07:d7:ab:c4:84:70:2e:3d:
ab:1e:91:af:0a:cf:18:7d:d6:70:90:6c:cc:aa:ca:
8e:a3:e9:df:d3:79:d4:6e:e2:96:93:32:c8:75:1c:
44:29:47:a7:b4:69:dd:58:bd:56:06:34:4e:71:fc:
41:a8:96:c6:6b:23:e9:d8:c3:a7:29:a8:e4:9f:b5:
e3:98:24:54:f7:cd:e9:ad:a7:6e:87:dc:b1:b6:d5:
dc:d0:ec:cd:05:aa:66:61:40:42:41:a6:07:fc:d1:
0c:c6:f2:7f:28:cd:86:b2:01:f5:70:3b:bf:5e:e1:
1b:d0:82:02:d8:44:28:85:cc:ac:a1:61:be:1b:0a:
e2:6b:53:dc:c2:6c:49:bc:e5:01:18:4f:e4:c3:8e:
ec:7d:02:34:0c:0f:1a:6b:ff:1d:f5:c6:ba:0b:58:
c5:94:bb:1c:d6:ee:df:df:a0:86:93:c4:74:13:1f:
f1:ad:c3:e3:a9:db:fb:86:e6:de:47:91:c9:1f:9a:
e6:09:97:08:32:7a:3f:11:9f:57:4d:f1:af:78:a7:
84:88:95:4c:4f:9f:b4:8a:30:f8:90:c9:60:aa:16:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:EA:0B:CA:4C:A2:51:DD:25:2C:CD:D8:80:6E:F5:18:C0:0C:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:61:6e:37:44:94:6c:89:35:61:1e:0a:22:17:ef:a3:a6:e2:
10:ba:95:a4:12:f6:f7:87:e6:5d:84:1f:b6:fe:c5:05:43:d6:
da:99:c7:e7:de:78:be:8c:15:95:99:89:a6:ab:26:32:0f:99:
53:b2:ce:d7:e8:ca:5d:95:80:d6:42:ab:be:52:67:e4:8f:90:
b2:9e:26:dd:2d:75:6d:5c:a2:fe:eb:14:12:f2:f7:c6:fb:72:
c3:82:9c:89:62:e7:76:3e:90:eb:dc:05:3f:63:3f:1c:e9:fa:
4a:c5:1f:85:5a:be:27:9f:19:e7:97:4c:55:a2:0f:d8:bd:69:
f8:0e:0a:bf:82:c3:6a:89:06:14:0f:18:e8:7e:d9:ea:50:3e:
64:a6:df:6f:6e:0a:13:8c:12:b6:53:20:2c:bd:f5:f6:ed:1b:
a5:4d:ad:d4:e9:38:79:be:e9:81:92:5e:03:fb:95:28:f8:1f:
6c:c5:6f:0b:f2:03:32:36:59:33:a2:7e:c7:f7:dd:e5:26:d1:
bf:bd:7a:db:06:20:ce:46:b1:8c:2c:f1:e4:21:b8:ed:66:a7:
99:36:e7:be:f7:63:aa:45:dc:46:eb:50:3d:21:c3:f8:22:54:
b6:7e:08:7b:4a:dd:24:ca:d7:f3:f9:7a:4a:a7:22:75:42:84:
7f:2d:eb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:02:15 2026 by rpki-client