Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
File: 9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa (raw, json)
Hash identifier: pbfwMKoFlvA9iCgmZmpWXIDcjJKWck0hyzkri6sqCzE=
Subject key identifier: 23:1F:14:31:C8:72:C4:D9:6F:EB:9C:74:5F:A4:05:4C:17:99:6E:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 113546EBA62BC2197BEB32A97BECD07707D84B02
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
Signing time: Tue 24 Feb 2026 03:00:10 +0000
ROA not before: Tue 24 Feb 2026 03:00:10 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:35:46:eb:a6:2b:c2:19:7b:eb:32:a9:7b:ec:d0:77:07:d8:4b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 03:00:10 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=138976c74c6fb24413496c9b717966d15a4ffad533e791dd427f9d4f17178a7c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:c9:5a:41:4d:c7:0e:c4:70:2f:0a:cc:fb:
27:19:91:23:ad:28:35:55:ee:e0:20:a0:46:80:76:
a9:f8:8d:6a:ed:d3:23:e6:86:1d:4d:d4:22:b6:d3:
3d:bb:64:e7:f7:e9:b5:26:8b:b9:45:b0:bf:26:4b:
ab:b6:56:d2:75:b7:df:c9:51:30:0d:d3:5d:3e:b8:
c8:1b:0e:7d:56:bb:a4:f3:1b:be:b5:70:39:0f:f4:
a5:2d:52:5c:8c:4a:63:37:30:db:84:34:8a:f3:53:
66:1c:a4:ee:a5:78:b3:66:da:b4:6a:90:38:5f:ec:
1b:b6:d2:e9:be:57:fb:fd:e1:42:fa:d0:fc:91:d4:
35:01:17:6b:48:5d:82:90:3a:25:46:5e:5f:33:c3:
e0:80:ff:85:de:f9:be:82:65:3b:67:9b:93:5d:da:
7a:56:cb:02:27:36:f1:2a:30:dd:97:b1:06:35:dc:
79:90:58:bf:ae:d0:b6:5c:48:db:38:dc:4e:ff:82:
5d:48:10:62:8d:2d:45:c6:08:c0:27:8c:c8:ec:42:
9c:4d:c1:88:7c:3d:6c:2a:2e:32:cb:f0:65:79:b8:
88:9e:5c:5b:68:61:34:60:8c:9c:3a:45:be:2d:7a:
e6:46:d1:c2:9a:4b:66:59:ce:2c:5d:01:d9:25:1b:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:14:31:C8:72:C4:D9:6F:EB:9C:74:5F:A4:05:4C:17:99:6E:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:e000::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4a:19:61:fc:be:fc:f1:92:0a:e7:d5:88:60:86:01:bb:f4:
e0:6d:ef:db:44:8c:d0:70:ba:85:7d:f2:16:cb:8a:47:7a:84:
10:18:dd:53:d4:5d:8f:df:72:f9:ae:c8:36:0d:db:17:59:d8:
ed:cc:4f:3d:bf:47:92:bf:e0:8e:4e:16:59:cd:ae:7b:71:9f:
fb:5b:9b:19:f6:4a:1f:5a:35:71:01:09:01:36:fd:c8:d3:e1:
12:7c:f3:98:de:2b:57:ba:cd:92:62:93:96:6c:bc:0a:3b:d4:
1b:45:4e:76:15:5c:af:27:b8:c7:29:19:5b:09:a2:98:e0:91:
a6:c7:01:a6:36:1d:44:94:a6:c5:cd:22:d2:a3:17:42:f1:16:
45:d7:b6:48:1f:de:23:ac:1a:fe:26:33:2c:f5:6f:af:1f:12:
d2:b7:3c:ba:53:36:2b:74:99:e5:d2:1c:e7:b2:55:b8:50:c8:
8a:06:09:51:c6:bc:d7:76:03:61:a7:c9:9c:ea:49:d1:53:95:
69:d9:ba:c8:e8:35:f1:d5:df:4a:cb:a5:23:0c:c1:49:4f:ec:
f1:9a:16:a4:89:66:05:34:43:37:5d:0d:92:52:3e:ba:4b:97:
e7:8c:25:55:4f:54:8d:b6:b8:92:d7:15:28:92:c0:d4:23:13:
0a:09:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:05 2026 by rpki-client