Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
File: d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa (raw, json)
Hash identifier: hBr8URvU6aVxzlu7nOYa3PSLoa7Gd60zoD2bDMDka+I=
Subject key identifier: DB:AC:D3:34:CF:22:6B:DD:E3:E1:A7:02:5B:06:B5:EF:F0:7A:AE:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 470850CB05F0669D78B37A4A46FB2E30074C9143
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
Signing time: Tue 19 May 2026 05:00:58 +0000
ROA not before: Tue 19 May 2026 05:00:58 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d024::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:08:50:cb:05:f0:66:9d:78:b3:7a:4a:46:fb:2e:30:07:4c:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:58 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=9213da71f7bd43356ed0e72c7db0bb3b83f4dfa135037c6d6f1fdb26b3f8cf3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:eb:3e:c2:24:f3:7e:5c:01:a1:26:97:65:
f4:0e:12:64:28:6e:82:0a:6b:34:07:21:32:98:66:
08:6d:e5:d2:48:d2:74:92:58:2e:52:e8:4e:60:e5:
88:75:57:2a:39:34:4a:05:eb:3d:ba:5e:37:a0:68:
5d:fb:04:91:bd:72:99:30:c2:de:dc:a3:61:28:20:
e0:74:fc:38:18:39:6d:ed:c7:22:6e:79:76:01:7a:
05:ab:7b:48:a8:d2:5c:2a:88:39:50:f0:71:30:9e:
3f:17:c2:a9:aa:cf:ee:27:14:14:39:27:9e:37:14:
24:ba:70:d3:35:a7:8b:d9:2b:52:b1:00:8b:53:dd:
6a:98:e8:3d:22:b9:48:53:e8:90:c7:2f:36:b9:3b:
8a:4b:d4:64:66:a2:c6:c7:75:2e:de:36:9a:8d:93:
22:22:c2:11:b2:33:9a:08:45:a0:01:89:c2:eb:6e:
bb:a4:44:46:d7:96:87:a1:87:e4:3b:25:a4:44:12:
b8:dd:c8:e6:2a:83:2a:ae:ad:ef:14:df:18:f4:e6:
88:5f:3e:82:ad:e4:ba:a5:4c:00:a2:e4:43:f9:77:
cf:98:86:d0:ec:65:3a:23:86:62:4e:92:79:46:42:
bc:80:45:ea:fa:07:4c:4d:e8:0f:86:b3:37:d2:a7:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:D3:34:CF:22:6B:DD:E3:E1:A7:02:5B:06:B5:EF:F0:7A:AE:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d024::/36
Signature Algorithm: sha256WithRSAEncryption
4b:b9:5a:7b:b8:39:f1:0d:5c:94:35:ee:2c:ab:c6:58:8c:c6:
04:98:33:d3:e9:84:56:88:5b:4f:95:e8:1c:be:22:ef:16:83:
42:fa:5d:ef:c7:b7:31:28:9c:6c:2e:89:73:9a:75:13:74:16:
ac:60:2a:e6:4a:c4:f8:dc:99:ce:21:f5:68:7d:25:0a:74:dc:
77:03:84:d5:39:49:cd:8d:a3:68:d0:60:8e:38:43:1c:70:c4:
16:72:3b:f3:84:27:9d:b3:9a:22:32:92:e6:90:ed:6b:40:19:
67:b7:79:04:04:f8:4c:b5:1b:be:3d:ce:73:3c:f6:3a:e9:ae:
83:14:9c:34:03:ce:cc:89:11:8b:f0:09:bf:6b:86:88:e0:a4:
df:c7:78:03:40:ac:3a:89:30:b3:17:16:01:00:b8:78:18:76:
fc:d9:e1:9f:6e:44:50:c0:f1:99:76:9e:a6:ea:91:6c:b7:da:
d9:6d:f4:2f:7b:8e:39:60:1c:25:ab:c2:2f:c2:c9:d1:c0:06:
f3:4a:c8:e0:49:7e:00:a0:24:11:ab:60:f1:1e:dd:66:4d:68:
db:2f:a1:91:74:0c:ab:42:a3:70:34:de:84:80:21:23:8c:73:
aa:c3:a6:32:42:0d:1f:78:b5:2b:05:5f:55:7e:58:5d:67:93:
44:5f:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:53 2026 by rpki-client