Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8111f7cb-1b55-4e3d-84f0-90da492b6068.roa
File: 8111f7cb-1b55-4e3d-84f0-90da492b6068.roa (raw, json)
Hash identifier: ZwxbSlZm2VJYLD7b71J2iLtNrZBExFXLb+bCAUmMZNQ=
Subject key identifier: 98:1C:D3:2F:60:5B:7A:00:C8:9B:D4:1B:88:80:D8:8E:6D:AB:47:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6812AB36BA83D37F979A5DF8AB2284F069692416
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8111f7cb-1b55-4e3d-84f0-90da492b6068.roa
Signing time: Sun 31 May 2026 01:10:24 +0000
ROA not before: Sun 31 May 2026 01:10:24 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:12:ab:36:ba:83:d3:7f:97:9a:5d:f8:ab:22:84:f0:69:69:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:24 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=0d81803c9df3db95b780cb6a9a940dc5cad28530a483947ce28b4f3eb4c6b850, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:05:a1:a5:2f:8d:74:01:3f:83:47:1d:f1:
88:04:e3:1c:5a:1c:2a:b4:11:50:49:99:f3:0e:3a:
02:62:c6:b3:d9:cb:a5:ed:63:c3:ca:fb:d4:35:8e:
15:79:03:b4:d5:7e:26:d8:f6:e3:ba:20:0e:ce:fc:
f2:eb:1d:79:a6:ad:1c:6c:f7:c0:2f:68:c2:1e:79:
7b:a6:64:2c:08:bb:d2:63:81:c0:00:5b:9f:e3:8b:
ad:2b:25:d0:63:ce:b7:b3:8a:3c:5e:6b:c6:93:a7:
2f:bb:44:44:82:88:c5:82:c7:35:cb:ca:a1:2f:e5:
aa:2d:2a:03:04:c7:35:a6:7b:02:78:38:80:31:ce:
ed:b8:26:90:82:c4:46:25:49:6f:6d:1a:b4:bd:71:
5f:31:02:85:3b:05:0b:47:3f:9e:11:e7:00:cb:fb:
b9:d1:55:06:fb:22:51:4f:92:2b:29:2c:d3:3f:8c:
5e:b4:60:42:7c:8c:b5:85:6d:55:bc:c3:f6:14:61:
0c:db:fc:d8:a3:8c:d4:a9:ec:b6:17:91:2a:21:7f:
4f:1b:ea:6e:21:dc:f2:63:d0:0e:43:59:1b:25:51:
23:43:c9:db:10:8b:94:19:a7:84:e3:1d:2d:c4:29:
f5:fe:87:ce:49:2f:3c:6d:cd:ec:18:f6:8b:1a:2d:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:D3:2F:60:5B:7A:00:C8:9B:D4:1B:88:80:D8:8E:6D:AB:47:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8111f7cb-1b55-4e3d-84f0-90da492b6068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
a0:6b:af:e2:d3:07:b4:2a:33:97:ef:2e:5a:73:c3:45:10:0d:
2b:ce:de:69:ec:ff:6f:3f:ad:d4:7f:ad:63:88:2f:69:6e:54:
c1:c1:0e:29:01:51:1f:a7:15:4c:45:3b:95:9e:b7:0c:6e:22:
03:f3:3e:65:aa:54:8d:3e:31:93:d6:13:b1:e4:68:61:ab:5b:
35:4f:10:26:6a:84:9c:43:bd:32:d2:3f:77:91:49:da:07:a9:
92:71:96:bb:24:49:f7:a2:82:ab:be:7e:d7:24:85:dc:76:c2:
58:24:01:a7:41:6a:f0:1a:61:ed:91:c9:fa:ce:5f:04:2b:6a:
25:30:1d:90:94:30:c9:73:67:f7:6a:06:2a:8f:d8:09:34:5b:
2b:a4:8e:0f:d1:04:43:a7:1b:c2:ce:21:14:88:70:31:e3:c2:
24:63:4d:67:ec:44:de:bc:e6:99:eb:58:ac:74:1a:4b:88:88:
de:a9:e0:98:2f:ea:04:24:58:96:2c:ca:3d:8d:9b:b6:1c:5a:
c7:45:57:cd:1a:d6:d8:97:e0:4c:61:43:33:c5:13:22:72:2c:
4d:ce:5d:52:09:b1:a0:81:dd:27:ef:8e:a4:b1:5a:c5:ec:58:
47:77:a6:1a:86:cb:24:3f:ef:b2:60:dd:c8:35:f1:05:1d:6a:
4c:c4:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:33:31 2026 by rpki-client