Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
File: b8a24699-2493-4e45-8227-bd2ec32f88ab.roa (raw, json)
Hash identifier: YKuXclq6oLVd+oD7zaNU/xQtpeveFxiprUsteAn7MhY=
Subject key identifier: E0:54:91:9B:D3:66:B6:01:DB:47:3C:25:1D:A2:1E:0D:70:42:76:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0BC93D9868525496A3FA77CF09E9404C68C438D2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
Signing time: Sat 28 Feb 2026 06:21:06 +0000
ROA not before: Sat 28 Feb 2026 06:21:06 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c9:3d:98:68:52:54:96:a3:fa:77:cf:09:e9:40:4c:68:c4:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:21:06 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=52e900b46609940dd87811aa32c7d8deec580002be0fd8b061b0b65f58aa628d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:ec:b5:d0:c5:bc:56:d6:12:db:32:ce:b5:
e1:0d:a5:d1:e0:ee:2f:fd:b1:cb:32:1d:a6:12:37:
b1:79:0f:30:aa:05:b5:6e:fa:9b:35:b1:3a:83:e5:
ae:ca:b4:e9:46:fe:86:47:34:15:0a:7d:69:50:6c:
dc:80:3b:29:d0:ee:e5:22:47:52:50:da:ba:d4:85:
53:18:e2:f7:0f:cc:08:d3:bd:c4:29:cb:34:c0:25:
c5:a1:33:b0:25:1c:ca:bc:1d:f4:80:9d:73:49:3e:
24:2f:e7:6b:0f:00:31:6f:72:c3:e1:2a:03:4f:e4:
c4:55:f6:2e:b4:f4:03:ba:62:a2:cc:e9:9e:40:0e:
a7:b8:41:81:7c:46:a9:37:b4:b8:98:02:1d:9a:ac:
ba:2f:75:92:ac:17:ee:a0:8d:ee:1d:da:b0:6f:c5:
73:0c:86:05:b5:32:f7:f0:72:a7:34:56:96:ef:9e:
83:d7:33:28:75:43:d0:8f:11:87:f0:78:64:0c:be:
a6:d8:53:6b:e7:78:ce:cf:1a:2c:a0:59:97:9e:4c:
7b:59:b8:c3:29:2e:59:d7:3e:54:52:24:e1:83:31:
b9:57:27:68:d5:7a:c5:35:5a:a4:c6:f3:4e:fc:c4:
e9:f1:83:7e:d8:6e:93:0c:67:8e:1b:0f:80:a5:48:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:54:91:9B:D3:66:B6:01:DB:47:3C:25:1D:A2:1E:0D:70:42:76:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:a6:02:6e:a8:2a:49:b1:3c:18:86:0d:4b:a6:54:93:66:30:
ae:6d:88:a2:0c:f0:d1:20:8e:f8:ef:79:12:d1:a9:7d:1f:8b:
3d:d7:f9:ca:3a:3e:3b:35:05:b5:43:b5:3c:48:40:01:88:ee:
2d:3b:7d:48:5b:69:34:db:9d:65:e9:9a:5b:ea:93:7a:db:03:
e1:c7:04:33:a8:66:62:0a:2e:1b:a2:b7:08:56:10:c2:3c:09:
43:6c:7d:87:b1:36:0b:a1:c6:8c:ec:a5:f5:67:01:9c:67:ff:
d9:08:7b:29:f8:02:0c:6a:1c:0e:bb:77:94:41:77:23:5a:49:
fc:d9:b0:8a:43:1f:e9:34:aa:93:68:02:cd:64:8a:b9:aa:cf:
5d:80:b6:12:33:cd:a5:ca:ff:45:03:07:e3:3b:71:f3:55:35:
37:00:e4:a3:bd:f7:b0:6a:87:4d:88:27:b2:91:40:b9:f9:ef:
9d:de:f9:a8:3c:1a:be:6c:56:90:6b:1d:f4:86:fb:15:69:58:
03:63:06:67:d2:ee:31:89:80:3d:5d:6d:f0:3d:e5:6a:f9:77:
be:72:03:bf:24:3d:d4:33:f4:64:69:52:8f:fe:ba:3c:d7:72:
4b:8c:06:bf:63:99:8b:87:83:5e:d8:c3:86:5a:97:b0:60:3a:
5e:34:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:01:38 2026 by rpki-client