Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e2dff05-ff60-49d2-9fe4-28bbd6d35d1f.roa
File: 8e2dff05-ff60-49d2-9fe4-28bbd6d35d1f.roa (raw, json)
Hash identifier: 0z6ktiBud59/s3JUZ/+y7zMnKuhZpjzCOHJwzDrEn/Y=
Subject key identifier: D8:68:10:CB:F3:99:57:FB:F3:C9:A3:84:3C:9D:FD:2D:68:92:09:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30CEB0248E843504CF483545315E2FBC48C9461D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e2dff05-ff60-49d2-9fe4-28bbd6d35d1f.roa
Signing time: Sun 31 May 2026 01:11:01 +0000
ROA not before: Sun 31 May 2026 01:11:01 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ce:b0:24:8e:84:35:04:cf:48:35:45:31:5e:2f:bc:48:c9:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:11:01 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=b9796b0477ac51bd9157953ed106faf73820edc1e719221647927577191c2f30, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:18:5e:c1:8d:aa:e0:d8:e8:07:8e:65:15:
37:8b:64:10:8a:d3:10:9a:e1:d6:55:46:13:a1:16:
06:c7:b4:b4:7b:81:4a:ff:1d:6e:13:26:de:a4:85:
b5:b6:96:48:ff:a2:05:cf:cc:ff:3b:a8:a2:d9:76:
38:04:35:57:e1:f3:35:ff:c6:b5:49:dc:d5:6e:fc:
c7:8a:e9:09:6f:70:5b:57:77:08:1f:67:62:cf:69:
09:ea:8c:cf:be:27:03:76:76:da:d2:93:19:83:19:
7e:2c:8d:38:02:8e:91:c1:c0:71:06:d5:42:7a:45:
e0:cb:d8:05:1b:3b:24:45:73:0e:1b:2a:b7:65:34:
fe:f4:12:14:53:69:bf:3f:27:d2:67:a0:cc:8e:35:
2c:99:b2:a7:fb:38:83:8a:3d:21:98:d9:51:48:e9:
a0:48:1f:32:eb:4c:61:d9:c4:bb:cf:e6:63:7e:d4:
6a:ad:9b:96:76:4c:15:31:f0:73:6c:cb:75:ad:62:
b0:45:3f:43:40:84:6e:b1:5c:c7:c8:15:eb:f8:74:
e5:b8:81:b0:7f:d5:1a:dc:4f:c6:14:d6:dd:a3:8d:
55:44:43:f0:75:e1:0a:59:72:7b:95:0c:7c:ae:0d:
b5:55:0b:00:27:98:ea:28:2e:07:9d:cd:c7:49:81:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:10:CB:F3:99:57:FB:F3:C9:A3:84:3C:9D:FD:2D:68:92:09:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e2dff05-ff60-49d2-9fe4-28bbd6d35d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
2b:27:3c:eb:2f:1a:93:ef:e3:0b:de:66:5f:e7:7f:ec:15:32:
8b:15:c3:1e:44:ea:d1:2d:73:75:0d:47:70:45:db:46:7d:f7:
7a:78:a1:d8:22:e1:f0:37:e9:83:b4:1b:2f:81:6d:88:e8:d4:
85:be:05:2c:64:c8:25:67:98:8a:34:bf:1e:0a:12:48:cb:8e:
d9:eb:a4:94:2d:e3:33:ec:7c:bb:8e:ad:61:33:e3:2b:b3:1a:
1e:fe:39:81:8a:0c:ba:31:c9:7c:e1:49:3e:62:20:c7:75:b5:
f9:13:e2:6d:e6:88:7e:88:6d:ca:85:3c:df:ea:a9:be:9c:33:
18:f5:78:30:e0:55:a9:a5:05:b2:f7:71:92:79:ba:58:7e:40:
47:11:f7:fc:fb:9c:df:ae:ca:ab:69:a7:96:46:26:7f:08:95:
21:6d:56:cb:05:92:1e:e9:ae:93:e0:f6:39:7d:5c:aa:a5:fc:
53:8b:fa:73:ea:f3:69:05:3b:06:34:e6:ba:c3:c0:c7:cb:3f:
be:10:20:fd:69:a8:02:4b:6c:74:54:be:83:67:90:43:46:b6:
40:39:21:1d:ce:b8:75:a1:46:48:fb:ef:29:88:4f:a0:ec:6f:
a0:9e:be:14:bd:3c:ca:6a:0f:9f:ff:de:89:6f:c8:ed:1f:8e:
17:e7:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:21 2026 by rpki-client