Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
File: cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa (raw, json)
Hash identifier: UR0W+hMiM+EyN2rm2Q1f4iVB2IZLr7ECovaLkYbcEgo=
Subject key identifier: 0E:C5:6D:60:17:2A:06:C5:79:4C:7C:34:17:11:D5:6C:71:C3:FE:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 609DBBEC592E892A958B638D964719BB3A94AF2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
Signing time: Sun 17 May 2026 02:00:02 +0000
ROA not before: Sun 17 May 2026 02:00:02 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9d:bb:ec:59:2e:89:2a:95:8b:63:8d:96:47:19:bb:3a:94:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 17 02:00:02 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=c5e7898fbb1578c23b95938e46a2cb033a6ff16012924ebdae5081985f081c55, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:ff:e0:a5:01:0d:9e:85:40:36:3f:af:90:
91:9e:50:d5:42:65:27:cd:e0:aa:dc:fb:53:58:ef:
c9:df:cd:f2:47:93:36:06:2b:05:30:dd:6b:e0:0c:
07:c7:ab:ad:d5:23:c3:33:b4:30:b1:8e:83:c7:c9:
69:fc:c3:1e:7e:7b:de:51:8c:59:7d:82:3b:ec:00:
bb:8f:85:4d:1c:ac:17:2c:a5:72:bb:d2:3a:db:5e:
ff:39:33:a8:d1:a8:a6:f9:5f:9c:ee:11:25:e4:5d:
42:35:3e:cd:1d:b9:3d:fa:1d:5b:50:2e:b3:27:67:
45:00:c1:4f:18:0f:eb:c8:29:8b:0b:ba:c2:0e:c2:
1a:20:df:e6:fb:3f:6d:a7:c6:bc:91:5e:af:90:76:
15:ef:eb:4e:78:7f:34:73:a3:56:16:d5:4c:bd:0f:
8e:29:44:e5:a9:ea:f6:b1:c3:60:67:86:e3:ed:e9:
d3:71:b6:6b:eb:e7:4f:ea:b0:88:a2:c0:dd:94:01:
87:64:82:c2:a4:5f:cf:f2:0c:82:3e:75:38:12:9c:
62:5b:33:ae:c2:7f:bc:e2:67:e6:d6:d9:fc:b6:8a:
d6:c0:44:ec:83:89:06:26:ef:41:fc:cd:be:40:23:
e5:ed:2d:f9:7b:5b:71:dc:11:0e:37:4e:6d:fc:af:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:6D:60:17:2A:06:C5:79:4C:7C:34:17:11:D5:6C:71:C3:FE:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:800::/40
Signature Algorithm: sha256WithRSAEncryption
65:c4:3e:df:86:1f:e3:24:99:ab:c4:c3:6f:d7:6c:01:c4:ee:
1b:09:a7:47:d7:e3:1e:df:83:7a:0a:dd:33:01:7d:38:b3:6b:
e2:45:77:77:fe:f4:8a:d3:a2:d3:89:e4:22:cf:f2:f1:af:a5:
9d:10:7b:62:68:a5:d0:d5:30:69:b2:e1:eb:55:2b:c0:d6:f1:
26:93:47:51:76:62:a5:69:29:32:77:9c:3a:2f:60:fb:9c:09:
d8:e5:e6:d6:10:97:1f:fc:91:04:c8:d3:de:60:c5:ba:ac:97:
91:11:b7:df:af:e3:6a:f7:fc:16:cf:c8:0e:fd:fd:90:8b:c9:
90:68:9f:b2:f1:c1:9e:08:b4:46:24:65:da:77:36:ae:62:95:
67:69:7f:43:ca:b8:ae:0a:2a:f7:62:8d:a6:c3:e5:24:fd:01:
0a:02:e5:be:84:f7:b1:6f:ee:d3:1d:78:95:d9:92:5c:16:8d:
88:e5:7a:80:41:af:35:99:65:84:e1:88:00:a6:49:32:f1:b7:
71:4e:5e:c1:76:4d:4c:74:80:0e:7a:fa:4d:09:13:f0:90:ba:
23:96:71:e4:10:c0:80:b2:96:5e:69:2e:9e:01:5c:8d:09:3b:
7a:6f:ea:13:b7:7c:4b:f0:a5:07:b3:60:40:49:51:31:81:28:
6f:31:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:04 2026 by rpki-client