Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
File: a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa (raw, json)
Hash identifier: bZ2LFCji/NOJbq0616djqWNTwvxsuExoDsW3gZ1vCLM=
Subject key identifier: 74:23:B2:81:B4:46:32:6B:1A:A4:1B:44:3D:E5:DD:4B:94:1C:C9:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A8317D0B4B064138CAE7BE52C0DBB72E001CF40
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
Signing time: Sat 28 Feb 2026 05:31:28 +0000
ROA not before: Sat 28 Feb 2026 05:31:28 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:83:17:d0:b4:b0:64:13:8c:ae:7b:e5:2c:0d:bb:72:e0:01:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:31:28 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=6eabfebbde9199ded6d53a63df760b22b9e73f519f5e1e081a2540cb0d1c73d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:be:7a:3a:16:38:ca:01:a0:27:2c:36:55:
8f:03:83:9c:9f:f8:6e:c5:ff:78:11:fc:0b:0e:16:
5e:ad:7d:37:76:a1:30:c7:43:63:9d:0d:80:ac:de:
85:a3:7d:4d:fa:89:6b:9f:46:08:fb:5a:09:50:be:
d4:e5:ba:56:82:fa:1e:86:a8:ef:ba:af:bf:2b:f0:
f6:48:e2:eb:a2:51:99:98:31:c3:ed:1a:ed:85:3f:
34:3d:f8:12:c2:60:08:c1:6d:55:f2:4a:19:8d:50:
6c:61:97:d7:21:5a:2e:3f:76:86:6a:f0:a2:61:4d:
1b:f7:d8:c8:27:5f:b2:21:90:19:4e:a5:f1:e8:00:
a9:d6:fa:9c:84:80:f0:09:47:d0:cd:e5:41:a5:bf:
82:22:1e:61:dd:7c:0d:48:ab:a5:d2:89:68:6a:14:
13:22:75:ca:c2:59:50:ef:c5:35:a4:ef:de:ad:a8:
b4:d6:29:17:20:04:24:8e:9c:b1:08:54:26:0c:d2:
14:ca:3a:11:fe:45:57:5b:2c:d1:3b:d4:35:fd:2c:
e1:a2:6d:c8:8e:1e:52:d7:7d:a1:78:62:b7:39:23:
0f:29:46:a4:7c:27:d9:b2:79:9e:6f:f1:61:75:bc:
7a:18:b2:66:20:c1:e5:d6:f0:51:b0:53:4c:ee:ce:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:23:B2:81:B4:46:32:6B:1A:A4:1B:44:3D:E5:DD:4B:94:1C:C9:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:61:36:2b:fb:ec:2b:34:81:44:b3:d2:c5:6d:de:ec:b3:dc:
bb:d5:ff:c4:96:47:6c:9a:6d:7b:10:ac:57:84:b7:54:73:58:
de:5b:98:b5:77:a5:e5:67:04:ea:78:2d:d9:5d:82:52:7f:ee:
ab:7e:48:9f:5c:87:15:a9:57:7f:50:a4:b9:15:f1:5f:e2:c5:
31:79:b2:85:e1:5c:8a:33:d2:e8:5e:51:71:c0:73:94:61:1f:
96:eb:69:43:dd:4f:22:1f:40:3d:66:2f:cc:cc:9f:11:6c:43:
86:e4:5a:ad:d7:5b:67:dc:fc:93:eb:97:a4:d7:13:bf:15:de:
be:77:d7:e7:7c:0c:9d:33:07:e6:d0:dd:ab:51:06:6d:d7:3b:
cd:cb:e2:98:08:51:f1:72:99:e5:69:58:b0:ad:a6:89:c7:55:
c3:8d:59:1a:58:4a:5c:29:36:42:ae:52:e5:a7:27:0a:4e:c5:
78:83:8c:6f:0e:8c:0d:56:ee:73:dd:3e:9a:1b:92:00:db:f6:
59:70:6e:92:b8:d9:53:df:d2:8b:97:76:6a:70:ef:27:98:ce:
ed:2f:08:95:23:02:3b:a1:6f:58:c3:fc:75:a5:ec:d7:fe:8b:
d8:c4:5b:72:ca:44:ad:33:05:78:a1:31:db:57:36:3a:02:ac:
e2:4b:55:b7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKoMX0LSwZBOMrnvlLA27cuABz0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTMxMjhaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlYWJmZWJiZGU5MTk5ZGVkNmQ1M2E2M2RmNzYwYjIyYjllNzNmNTE5ZjVl
MWUwODFhMjU0MGNiMGQxYzczZDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKPsvno6FjjKAaAnLDZVjwODnJ/4bsX/eBH8Cw4WXq19N3ahMMdDY50NgKze
haN9TfqJa59GCPtaCVC+1OW6VoL6Hoao77qvvyvw9kji66JRmZgxw+0a7YU/ND34
EsJgCMFtVfJKGY1QbGGX1yFaLj92hmrwomFNG/fYyCdfsiGQGU6l8egAqdb6nISA
8AlH0M3lQaW/giIeYd18DUirpdKJaGoUEyJ1ysJZUO/FNaTv3q2otNYpFyAEJI6c
sQhUJgzSFMo6Ef5FV1ss0TvUNf0s4aJtyI4eUtd9oXhitzkjDylGpHwn2bJ5nm/x
YXW8ehiyZiDB5dbwUbBTTO7OHAcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR0I7KB
tEYyaxqkG0Q95d1LlBzJAjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTJjNGMyOGMtMGRmOS00MGQ0LWJmNGQtOTI2MTA0YjY5MWY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DpA
MA0GCSqGSIb3DQEBCwUAA4IBAQC7YTYr++wrNIFEs9LFbd7ss9y71f/Elkdsmm17
EKxXhLdUc1jeW5i1d6XlZwTqeC3ZXYJSf+6rfkifXIcVqVd/UKS5FfFf4sUxebKF
4VyKM9LoXlFxwHOUYR+W62lD3U8iH0A9Zi/MzJ8RbEOG5Fqt11tn3PyT65ek1xO/
Fd6+d9fnfAydMwfm0N2rUQZt1zvNy+KYCFHxcpnlaViwraaJx1XDjVkaWEpcKTZC
rlLlpycKTsV4g4xvDowNVu5z3T6aG5IA2/ZZcG6SuNlT39KLl3ZqcO8nmM7tLwiV
IwI7oW9Yw/x1pezX/ovYxFtyykStMwV4oTHbVzY6AqziS1W3
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:09 2026 by rpki-client