Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa
File: c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa (raw, json)
Hash identifier: yxSQxOJiJ+rq6tNRL+hf2veb19PNItIB6GKBU4sQ7qI=
Subject key identifier: 3C:51:D4:2A:DC:07:82:0C:38:C3:BA:50:E8:0B:E4:44:42:01:08:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25014AAA7A2BC7912BA0CF096D820E9AD4636000
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa
Signing time: Sun 31 May 2026 01:00:36 +0000
ROA not before: Sun 31 May 2026 01:00:36 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:01:4a:aa:7a:2b:c7:91:2b:a0:cf:09:6d:82:0e:9a:d4:63:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:36 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=47714bd963d149afdaa4509e129ab481203eb61e504b475ab24ac1b475792282, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:fd:55:01:15:28:92:e4:e7:ef:69:95:cf:
e4:a6:fa:79:a7:05:39:99:14:58:9a:e8:36:3f:63:
c7:b5:9b:a5:4b:ae:d3:9e:dd:9f:36:c5:55:19:d4:
41:27:09:38:9d:ce:be:04:79:d3:d4:77:83:d1:b9:
f3:3a:e6:64:4e:b3:be:ee:7e:f5:e2:fd:1a:52:54:
9e:a7:7e:36:5c:0c:92:bf:f6:3b:95:69:75:d8:f8:
b5:dc:39:a1:c3:c0:a3:54:f0:1b:d2:78:e7:fd:f0:
0e:b8:8e:9d:4c:97:cd:a9:9f:ac:f2:c6:d0:43:58:
12:1d:24:a2:49:12:7d:88:6a:04:48:13:da:f7:67:
d9:16:d8:7f:c9:9b:5d:1c:28:44:d6:52:1e:07:d5:
c8:81:6d:82:dd:65:1d:ac:e7:cf:a5:fb:61:bb:53:
a0:10:0a:64:29:90:53:c7:e8:22:dc:08:4a:38:94:
15:ef:03:70:79:c6:d0:59:2d:55:72:24:c2:6c:1c:
27:78:ba:4a:01:10:49:9a:84:21:b3:2b:c1:b3:98:
6a:da:d9:a3:49:45:f3:48:56:7c:16:5c:84:e5:3e:
8c:72:7f:7a:df:7d:77:f2:c6:ba:bf:6f:fc:24:99:
43:50:8f:fc:55:19:ea:2c:2f:84:b5:28:44:bc:52:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:51:D4:2A:DC:07:82:0C:38:C3:BA:50:E8:0B:E4:44:42:01:08:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c513b43c-23f8-4be8-b4b2-c45eeccf32a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:a000::/40
Signature Algorithm: sha256WithRSAEncryption
3f:e5:5f:55:ae:a7:80:f9:55:f1:fd:ff:0a:1e:1c:2c:61:39:
3b:37:82:06:a7:00:cf:9a:33:1c:ac:6d:40:d8:22:3f:7e:2a:
b7:08:6f:ff:6b:4e:87:7c:39:31:af:5e:18:98:17:c4:fd:94:
76:15:3d:77:cc:b3:6a:9e:ab:f4:81:6c:c9:4c:d8:66:65:ab:
60:e3:ff:0b:62:35:a1:7c:01:47:80:2e:a5:44:44:c9:90:54:
3f:c9:de:54:69:4d:6f:bb:53:41:8b:89:7d:91:25:5c:92:9f:
64:f6:11:e5:3f:31:bb:3b:78:69:ec:d6:05:c4:7f:26:9b:d8:
d3:bb:84:ed:32:07:be:b0:93:a5:3d:21:df:c3:7e:ca:ea:fa:
44:74:73:49:6f:a0:9e:68:ab:b6:68:a9:14:1d:ab:ff:79:f2:
5c:0b:c7:d5:64:95:07:14:c0:9f:59:b7:16:c2:a7:62:27:11:
43:73:88:28:ac:73:12:38:82:6b:27:56:a4:b3:ed:76:29:51:
8a:dc:02:cf:df:71:5f:d4:40:1c:51:5c:fe:97:03:c3:c2:6c:
2d:63:73:8c:91:c1:ae:f9:cc:1a:ca:6b:2c:c6:7e:11:0d:92:
1e:ee:2a:2d:44:73:98:51:e0:29:aa:b5:8d:34:0e:b9:43:44:
36:09:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:39 2026 by rpki-client