Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
File: c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa (raw, json)
Hash identifier: riIjKbLfnObHk4khZ8WzhwytZEtMoctfRql9a95ozqM=
Subject key identifier: 7F:61:8E:50:23:F4:90:F7:88:75:FA:48:4D:E9:DE:88:6F:DC:A5:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33FE7EC114A23E5E9B6E41850B345A31BC2177FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
Signing time: Sat 28 Feb 2026 06:00:36 +0000
ROA not before: Sat 28 Feb 2026 06:00:36 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fe:7e:c1:14:a2:3e:5e:9b:6e:41:85:0b:34:5a:31:bc:21:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:00:36 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=06ec695bf79c4d5cdfd66428d9be587e42b2f5182c2bffa6849377e1796b7729, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:7a:28:4d:60:0f:3e:5f:41:9a:11:ad:50:
60:69:cb:fb:fa:62:36:89:89:7c:20:b5:bc:50:11:
a2:9f:f0:d9:dd:2b:2f:7b:32:7a:5a:83:5f:7c:e1:
7d:34:39:77:c4:37:50:de:ff:ae:4d:2d:74:70:f7:
00:05:da:98:b1:b9:9e:e4:3c:28:ca:38:4e:27:1b:
3d:5b:b9:b1:94:08:0c:ef:ad:e9:d0:41:cf:b5:02:
99:6b:f8:b4:96:0e:fc:b4:b6:95:fd:ee:22:14:4b:
39:aa:6a:73:1c:3e:6f:2a:5e:82:69:f9:c1:2a:20:
68:31:65:18:e1:ba:bc:49:cd:f4:56:a8:d8:7f:22:
99:7f:fd:26:57:0c:53:9a:9d:53:1e:6a:9f:7f:85:
f2:70:81:c1:20:75:1a:55:fd:23:56:f6:53:9e:38:
97:bd:7a:42:ac:13:c3:95:74:db:7a:29:50:00:64:
33:39:0c:81:15:b6:08:8b:a1:45:f5:07:98:6c:9c:
18:f5:71:bc:66:84:37:b7:0c:7e:d6:92:6c:79:46:
5d:1f:3b:7d:45:2b:90:96:7d:56:e5:f1:14:b0:03:
b9:8c:dc:73:06:bc:db:c5:9f:e0:a3:2c:6d:e4:c0:
7b:f9:b0:b2:24:2a:3b:94:01:03:28:e6:c0:70:85:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:8E:50:23:F4:90:F7:88:75:FA:48:4D:E9:DE:88:6F:DC:A5:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:a000::/40
Signature Algorithm: sha256WithRSAEncryption
06:18:6c:71:4d:2f:cf:c3:8e:fc:35:52:9b:bc:8f:9d:28:30:
17:56:5d:e1:39:3b:f2:25:58:a4:c0:36:5e:e9:fd:10:1d:d9:
97:35:6b:c9:d5:1c:1a:c1:15:6e:fa:a8:3b:f3:21:ad:f7:30:
37:c3:bb:2a:44:a5:74:e7:1a:8f:0e:18:9f:dc:f4:66:0b:c5:
0c:97:e5:82:a7:83:99:e4:5b:2b:1a:04:39:01:90:cf:5b:1f:
e7:44:9f:06:94:0d:08:60:b1:bd:66:67:d9:01:94:ef:75:ef:
38:94:03:00:e2:c9:68:55:a8:e2:bb:f0:fc:eb:93:b6:4c:2f:
6e:a4:20:9b:77:fe:4b:9b:de:2a:90:c7:95:c4:c2:5a:d4:e9:
44:09:bc:69:c8:fd:a2:ba:1e:1a:eb:79:5d:17:4e:20:12:f7:
3d:04:71:8d:fc:5c:ed:80:af:94:a2:01:d4:c8:68:09:e4:85:
b4:1f:7c:34:06:76:e2:a6:23:70:75:d8:d3:ad:ea:35:61:0b:
57:c0:96:52:7d:fc:1c:3d:02:a5:bf:d9:e3:69:3d:a9:36:b9:
82:bd:ed:6b:e6:09:a5:57:50:e1:e9:2c:49:81:08:be:aa:cf:
90:74:01:39:63:1e:3a:78:f2:ea:aa:a1:e9:ce:a7:ce:79:fb:
6b:e7:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:07 2026 by rpki-client