Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
File: a039a10b-545b-441d-bef2-b67325de50a1.roa (raw, json)
Hash identifier: b9JuwvE5BT4KiQDC93EG5dnUsDbH+8V+ciFv56O5tbg=
Subject key identifier: F8:03:F5:48:C0:4C:01:D4:F6:05:EA:B0:5B:95:4E:A8:1F:79:83:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31AC0BDE3C58C88AD87232FB96E5FE233E3C71BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
Signing time: Tue 19 May 2026 04:50:40 +0000
ROA not before: Tue 19 May 2026 04:50:40 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ac:0b:de:3c:58:c8:8a:d8:72:32:fb:96:e5:fe:23:3e:3c:71:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:50:40 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=ef626d0b93d9654d71f1f5b9a517a5c1cfa1246869b2cef3bfa4eea44ae817d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:73:2d:57:46:7d:c2:78:e8:a9:13:ab:1a:
e1:0a:6e:3b:97:94:d9:03:24:aa:55:96:df:54:a4:
3c:88:1e:db:4f:12:cc:7e:36:46:4b:44:47:99:09:
b1:4c:1d:f3:bf:81:e1:5d:71:81:39:ba:7c:ba:e0:
97:3c:e2:ec:ec:a2:05:38:69:12:23:73:98:86:c3:
81:46:ba:35:1e:9c:e5:c8:d8:02:62:4e:33:50:a1:
81:f5:d5:e7:8c:8d:cc:68:ce:81:3b:be:af:c2:d3:
77:05:08:62:26:31:47:c7:f5:c2:07:9e:96:2a:12:
98:16:5f:8b:0c:19:7f:ca:93:42:99:c0:e3:cd:c7:
b4:a3:49:92:dd:a9:a3:51:a4:b0:94:f4:10:7c:49:
d1:99:ca:07:b6:d4:a3:3d:80:a2:cc:55:3f:6d:2f:
bc:55:47:d0:61:3b:b2:bd:21:28:47:5c:52:1a:bb:
fa:82:0a:31:88:aa:b3:37:93:37:08:59:db:55:9f:
b1:07:c3:2e:80:e2:08:93:bd:74:be:2c:7a:58:a3:
af:bc:63:7e:f0:ea:f6:f7:a1:a8:1f:43:7b:e3:f4:
e0:82:6a:65:68:17:29:1e:df:63:bc:e8:03:c1:d8:
f3:2f:52:47:35:1d:de:c6:e1:03:b3:b9:0e:36:61:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:03:F5:48:C0:4C:01:D4:F6:05:EA:B0:5B:95:4E:A8:1F:79:83:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:6000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:d0:cb:f1:5a:67:f6:2c:bc:1b:06:6b:dc:cc:07:96:20:47:
cd:ae:c7:0f:3a:b6:48:a6:57:eb:6e:d6:c2:35:db:06:28:85:
ac:8e:44:a1:03:94:f7:c5:67:fe:ac:40:de:4f:06:72:f0:4c:
76:f6:a8:0e:e6:7c:09:ce:6f:04:aa:c4:cc:a0:17:e2:f4:fb:
f7:71:08:49:64:41:52:40:e2:64:60:5b:bd:9b:a4:f6:f4:cc:
16:61:ba:b5:bd:0c:c3:b2:db:d2:67:ce:ed:9a:d2:e1:06:30:
ba:a6:5d:bd:00:46:21:7a:bf:67:b6:2e:b4:bc:d3:5a:fe:f6:
fa:8d:89:a6:5a:af:b0:fb:a1:fb:50:ef:ca:b8:95:3f:ba:cf:
0b:27:10:61:e5:3a:90:10:42:9a:1e:dc:00:53:3c:ac:d8:9a:
da:5d:b6:0b:04:5a:57:79:d2:40:d0:a1:6f:46:34:a5:d2:3e:
5a:45:c3:57:24:a6:7d:26:b7:e4:87:77:eb:b7:30:73:9e:a2:
05:2c:e9:41:5b:ce:93:6e:cb:d8:a6:c8:dd:e1:fe:6f:f4:d1:
92:fc:a4:32:0c:13:7a:73:26:f1:c5:e4:bf:2e:76:60:03:6f:
84:6d:c0:a0:13:17:d6:a0:d7:db:aa:b7:e6:f3:d6:f6:cf:bb:
b8:7e:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:17 2026 by rpki-client