Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
File: da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa (raw, json)
Hash identifier: xiA7pzHNi9o/VttHu+J2EJ8Td9VjsyUjUzFO7mhXIjg=
Subject key identifier: 4E:61:1A:53:E5:4C:FF:42:CB:2A:E1:FE:87:82:DA:76:93:4A:A3:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 207B30540576DE7537E70ED7F4E0E897492A21B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
Signing time: Sun 31 May 2026 01:00:28 +0000
ROA not before: Sun 31 May 2026 01:00:28 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7b:30:54:05:76:de:75:37:e7:0e:d7:f4:e0:e8:97:49:2a:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:28 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=24e2d644eafe702e2364594ffadd1e43154b1bf0b03c53a8f7ebde87a5e941eb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:79:fb:9a:0c:c9:89:7e:41:77:b9:88:9e:
d0:eb:06:f2:51:b7:ad:b2:1f:12:22:d9:3a:bc:ee:
8f:1b:3c:41:cb:a0:1a:4b:16:d0:8c:ba:6e:97:62:
3d:9b:ea:81:a1:f2:ab:61:77:64:26:aa:e2:cf:4d:
d1:86:75:67:84:2f:6e:78:52:f1:2d:69:6f:47:3d:
b8:6d:8d:92:92:9e:33:7d:aa:4f:4f:64:b5:70:5c:
30:d6:44:c2:ca:41:e1:f9:16:ed:46:b1:63:ad:7a:
93:16:97:38:38:9a:c3:22:8c:64:2f:18:9d:1c:3f:
ef:97:38:b1:a4:95:c9:7a:f7:92:1b:4f:ef:51:eb:
fb:5b:66:23:59:f7:30:6b:a2:54:94:b9:1a:16:51:
ca:37:80:6e:6f:28:8c:ff:2b:d7:96:f9:58:6f:35:
ab:9c:2f:76:84:18:49:f3:21:71:c0:9a:2b:d6:6b:
d8:f1:7e:51:1e:66:e1:50:20:b3:a2:a9:a5:4f:56:
c1:dd:2b:af:cf:5d:c1:3e:f8:ee:ab:f8:73:83:20:
04:63:52:f9:ce:42:70:d5:c4:f8:f5:8b:84:4b:5b:
c5:4b:bc:37:f1:1b:91:d7:18:c7:73:3b:8e:8e:d3:
d0:d4:d7:18:42:6d:18:0d:3b:a4:48:04:11:13:7e:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:1A:53:E5:4C:FF:42:CB:2A:E1:FE:87:82:DA:76:93:4A:A3:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da9176ec-f879-46fd-9541-76ee8d1e8ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:87:52:50:d8:87:67:f5:ab:bb:90:84:60:65:69:d0:2b:8b:
9e:c9:e6:36:bd:47:a2:1d:6a:b9:aa:61:4a:4d:4b:21:4f:03:
50:ef:8b:1c:60:42:45:cf:a2:24:c4:37:a3:fb:90:7b:f8:f6:
a5:51:6c:28:41:ab:c4:b7:23:32:0c:80:9e:72:8e:2d:65:cc:
d6:b2:53:7a:f9:13:a2:ed:90:bf:cf:36:b2:b6:13:63:72:d0:
2b:53:cf:91:be:03:09:7a:7e:77:3b:7a:c4:73:11:8f:0c:66:
57:ea:e2:f6:61:8d:67:d9:b8:09:84:d0:a9:a8:99:4c:99:aa:
09:3d:f7:28:ae:ff:b7:ea:45:24:9e:a4:f5:3e:09:2b:ea:af:
07:36:96:ba:31:30:af:59:88:4c:23:04:6d:d1:cb:ef:ee:a3:
56:94:71:49:3d:52:cf:78:39:3d:99:d2:30:5e:39:00:bd:a4:
28:8a:5e:ba:bd:27:83:7c:79:65:2d:c7:08:81:93:eb:5f:e9:
64:12:b3:f2:88:c0:47:ee:6f:7f:8d:b1:54:e4:dd:94:22:d2:
0c:22:e5:a9:e9:10:ea:c2:c1:61:61:e6:a6:94:81:d0:4a:3a:
49:0d:a6:ff:7b:14:88:fd:ec:b4:12:e7:4a:e9:b7:38:a4:c0:
f3:8f:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:04 2026 by rpki-client