Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: OSTuucyLg8+bTUF3ZGL+kaIycDrLKqlHdNI2Yc5OF5U=
Subject key identifier: 61:A7:99:48:F7:A5:5B:E0:C5:53:77:3F:E5:39:FD:35:03:4A:86:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15E5703EF58B4EC9A099356C6658EAF3AAAFBBB6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Sat 28 Feb 2026 05:30:59 +0000
ROA not before: Sat 28 Feb 2026 05:30:59 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e5:70:3e:f5:8b:4e:c9:a0:99:35:6c:66:58:ea:f3:aa:af:bb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:30:59 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=2bfa0fa25cb3cee83949a6d75670c2d5d825ce186c772fa5d4b45203eda4eaaf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:24:c9:d2:0e:1a:1a:54:c5:fa:86:96:54:
17:ad:48:e6:dd:08:7f:e6:f7:5b:83:4d:20:dc:91:
ef:1c:ae:e3:db:47:32:c7:41:62:1c:c6:63:7f:28:
26:ab:cd:3c:35:11:8c:74:fe:20:35:27:59:b5:72:
05:62:2b:91:43:be:35:f4:1c:e5:42:7a:76:5c:d3:
7c:ab:e3:08:e1:b0:77:c7:a4:52:99:bf:4b:5a:1c:
b1:c0:ac:53:b0:7e:ae:0f:75:47:9f:c9:ef:13:6e:
02:8d:0f:16:cb:83:ad:a0:11:25:8a:9c:d3:18:a7:
0b:3d:6b:27:63:af:36:5d:d6:e1:0e:6e:0d:5c:38:
64:93:17:28:2e:e7:b2:d3:26:cd:9b:16:00:6a:1a:
1e:1b:98:9a:7c:9e:b2:f1:3c:f3:14:d4:db:e0:ed:
e6:f3:81:12:66:d4:81:18:dc:ac:44:32:78:6d:6e:
60:5a:ab:4d:43:33:78:36:07:f7:af:a8:38:e5:94:
72:49:cb:d4:ec:d9:0b:98:31:dc:02:28:7a:cb:02:
25:94:b2:12:d4:62:20:70:77:ee:12:1f:aa:8a:bc:
e6:eb:f0:6c:fa:5f:97:54:ab:81:7a:e8:45:35:4d:
7f:2e:c2:c8:e7:cc:b3:c7:e2:78:1a:a4:ec:e7:94:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:99:48:F7:A5:5B:E0:C5:53:77:3F:E5:39:FD:35:03:4A:86:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
8a:68:57:6e:0d:c1:6e:31:e7:2b:a3:55:d2:64:3b:58:f0:f0:
3a:b8:dd:f1:1e:70:67:f9:9d:1d:29:98:a9:5d:dc:24:2d:21:
a8:cc:da:98:e6:23:8d:f5:9e:eb:b7:be:f0:7b:29:38:e2:96:
72:a7:ff:10:c9:03:22:df:85:05:87:f8:76:a9:59:54:34:e2:
b2:8b:54:68:06:4d:43:b5:6a:ba:61:fc:46:70:6e:60:9c:f1:
6e:17:70:9d:bf:a7:7a:a7:ad:dc:14:52:05:f7:5c:36:88:b2:
8b:5a:84:1c:f7:d6:a6:f9:51:ce:bf:71:8c:97:ae:ca:5a:c9:
fe:29:4e:e7:43:ac:9e:aa:ec:84:ab:5c:ab:dc:b7:bf:47:ed:
97:2c:1f:6d:3b:97:64:6d:4e:c2:f0:3b:09:39:95:78:e2:ca:
dc:b8:09:71:1a:c2:36:3b:00:fe:de:70:f7:81:36:22:b2:75:
73:cd:68:cf:3a:3a:0c:69:8e:ab:a9:73:14:8d:20:af:10:1a:
5d:82:0a:24:d9:27:33:c4:6e:fe:0c:ad:d7:ff:f0:3c:30:dc:
7f:55:db:a7:f3:99:71:4d:0f:d9:a5:57:f7:eb:fb:e2:ec:2a:
67:dc:00:12:70:db:b3:36:eb:f4:d6:b3:39:80:8f:96:87:8b:
70:8f:a2:79
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFeVwPvWLTsmgmTVsZljq86qvu7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTMwNTlaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDJiZmEwZmEyNWNiM2NlZTgzOTQ5YTZkNzU2NzBjMmQ1ZDgyNWNlMTg2Yzc3
MmZhNWQ0YjQ1MjAzZWRhNGVhYWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGKJMnSDhoaVMX6hpZUF61I5t0If+b3W4NNINyR7xyu49tHMsdBYhzGY38o
JqvNPDURjHT+IDUnWbVyBWIrkUO+NfQc5UJ6dlzTfKvjCOGwd8ekUpm/S1ocscCs
U7B+rg91R5/J7xNuAo0PFsuDraARJYqc0xinCz1rJ2OvNl3W4Q5uDVw4ZJMXKC7n
stMmzZsWAGoaHhuYmnyesvE88xTU2+Dt5vOBEmbUgRjcrEQyeG1uYFqrTUMzeDYH
96+oOOWUcknL1OzZC5gx3AIoessCJZSyEtRiIHB37hIfqoq85uvwbPpfl1SrgXro
RTVNfy7CyOfMs8fieBqk7OeUrnMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRhp5lI
96Vb4MVTdz/lOf01A0qGazAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2NlNDEzYWQtNTYwZC00ZWI4LTkxNWItOGM2ZTAxZDk3OTEwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ABQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCKaFduDcFuMecro1XSZDtY8PA6uN3xHnBn+Z0d
KZipXdwkLSGozNqY5iON9Z7rt77weyk44pZyp/8QyQMi34UFh/h2qVlUNOKyi1Ro
Bk1DtWq6YfxGcG5gnPFuF3Cdv6d6p63cFFIF91w2iLKLWoQc99am+VHOv3GMl67K
Wsn+KU7nQ6yequyEq1yr3Le/R+2XLB9tO5dkbU7C8DsJOZV44srcuAlxGsI2OwD+
3nD3gTYisnVzzWjPOjoMaY6rqXMUjSCvEBpdggok2SczxG7+DK3X//A8MNx/Vdun
85lxTQ/ZpVf36/vi7Cpn3AAScNuzNuv01rM5gI+Wh4twj6J5
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:26 2026 by rpki-client