Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
File: c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json)
Hash identifier: xfCHqJM3tMhyWA7io+Es+wLz4VQ6J50sLL7ehs4/OG4=
Subject key identifier: E6:74:B2:51:59:CF:28:61:F6:DD:21:37:7A:D5:62:6E:66:5F:59:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FAFEF41137506FA471E5A183DBD680629C6EC71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
Signing time: Tue 19 May 2026 05:00:03 +0000
ROA not before: Tue 19 May 2026 05:00:03 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:af:ef:41:13:75:06:fa:47:1e:5a:18:3d:bd:68:06:29:c6:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:03 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=dabeb08bb6cca2139210f67e948fcd3e2372b97d480fa8b128544b9d60021cec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:6c:cd:f2:de:b0:21:c5:50:5b:2d:c9:93:
72:45:50:a3:ec:af:a7:43:2d:ac:2a:d1:4c:68:67:
e4:89:3d:4e:56:51:9d:fd:43:e7:06:77:cd:19:f3:
47:04:d1:f9:c0:21:12:01:b6:fb:40:c4:0e:13:9a:
ca:92:cf:cd:b8:3e:6b:4d:40:58:d3:c6:2c:3a:22:
99:9f:03:3e:56:61:a7:62:d8:08:07:53:ab:31:8d:
dc:04:8a:f3:92:8e:b5:6c:a0:2a:04:34:e4:d3:cc:
60:7f:bc:3a:9d:38:8b:93:2b:9f:8f:e4:2b:ca:51:
f4:a5:3f:1f:4e:5e:27:ad:08:4b:b1:09:88:b8:9f:
97:18:fc:df:c5:bd:b0:c6:1b:9b:62:aa:ff:45:f2:
8f:d7:4a:bf:d6:dc:42:91:92:65:c3:41:8c:05:7d:
50:bb:73:bb:c2:72:dc:4a:03:5c:ba:13:e1:e3:7b:
5d:13:f6:c7:e0:df:f6:65:fd:cb:1a:40:a2:ec:2c:
04:73:3a:40:8c:50:fe:4b:82:d4:91:bf:54:24:4a:
e4:95:06:df:0e:78:a0:ac:3b:f1:fc:f2:33:a6:2a:
c6:a0:79:92:cb:ea:e2:de:7e:99:d0:7f:c0:17:fc:
0a:b8:54:21:e3:1f:01:50:08:b3:79:7f:df:92:a4:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:B2:51:59:CF:28:61:F6:DD:21:37:7A:D5:62:6E:66:5F:59:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:49:13:fd:32:a1:ca:ba:be:67:68:22:26:0e:1e:64:47:34:
82:9f:83:ab:82:f2:b6:93:e3:bf:a5:45:c6:45:71:79:bd:83:
fa:6e:0b:75:4e:45:fb:17:ea:a1:39:76:86:47:c6:dc:b1:14:
23:25:27:de:ba:b4:b4:08:1a:3d:2a:b9:b2:34:69:54:1c:75:
54:a5:44:ac:70:d8:59:f7:a5:24:df:6b:0f:68:16:3c:40:f2:
d2:8d:a4:ba:08:90:bc:a0:a7:b5:07:91:40:91:5c:22:a4:3b:
3d:64:05:08:ee:8e:9e:1f:7d:48:e9:c9:89:f8:ac:0a:d0:80:
c9:4c:56:ed:83:84:2e:48:d3:09:10:2e:99:2d:89:54:7f:13:
0f:a0:61:77:fd:5c:69:80:cc:38:65:a9:ec:6f:47:7c:bf:dc:
49:14:3d:e7:b9:2e:2b:99:c9:3b:77:b2:f3:1c:5f:9d:97:8b:
0b:8b:55:1d:f5:06:ae:13:81:3a:79:5a:92:16:c5:7d:cf:d3:
0c:86:ad:66:c6:db:d4:d6:fe:0a:36:44:08:49:6e:8b:5e:dd:
c8:0c:e4:6f:11:55:d6:01:4e:a2:21:ae:27:99:22:15:dc:11:
78:56:b8:a8:e9:16:6e:98:62:88:1d:11:73:95:0a:90:bd:61:
80:84:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:37 2026 by rpki-client