Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
File: e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa (raw, json)
Hash identifier: NnDMCMkFF0Ab6mjcOWGpPrCCNOousaSgV6HJbQRHdfc=
Subject key identifier: 0C:DD:2A:B3:11:F5:A0:EE:01:F2:47:E6:31:A1:C5:9C:F8:9F:9A:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56330569846648F548E678A7B63F626633CA0984
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
Signing time: Sun 31 May 2026 01:10:45 +0000
ROA not before: Sun 31 May 2026 01:10:45 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:33:05:69:84:66:48:f5:48:e6:78:a7:b6:3f:62:66:33:ca:09:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:45 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=c8d58eb05dabc1e53b49a9e0110e864fe952dbf1f46080fef5a8d6f071f76640, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9f:ca:55:67:31:79:ff:9b:6c:5c:6d:9e:ef:
46:c3:20:98:cc:92:f6:40:4f:eb:7a:eb:8f:74:d9:
48:55:58:d1:26:e2:04:4b:52:96:c4:53:72:22:3f:
c0:5b:05:03:3f:a4:c6:4c:50:0e:2f:fe:7b:e1:4d:
39:d0:49:e0:09:47:8f:47:d4:f4:e9:d1:d0:7f:fb:
6b:1e:21:b3:53:6b:65:1a:3e:a5:ea:c0:bf:db:e1:
87:89:9e:31:09:24:f5:e9:1c:5b:74:ca:ae:dc:3b:
21:0b:e9:08:00:41:83:dc:18:97:f0:78:51:02:c1:
f9:2c:48:b5:35:62:a0:58:d4:65:dd:01:66:5a:a7:
14:77:cb:45:b0:02:87:8f:e3:47:6d:45:71:6b:f0:
43:20:c0:34:77:2a:df:20:c9:81:4c:07:37:fb:71:
65:d9:12:37:72:b6:28:46:6d:f4:a5:7e:ab:ae:5a:
71:56:e1:c1:30:22:d0:42:3c:a0:d3:7b:46:94:e6:
c8:34:46:76:98:2d:40:49:89:d9:db:57:1d:76:47:
2e:97:26:33:df:8a:4e:7c:5d:77:42:2a:97:04:4c:
59:09:34:d3:01:e7:ef:89:63:8d:ef:54:0c:7b:5d:
44:bd:a6:36:76:73:4e:d0:ea:16:4e:9a:7d:f0:18:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:2A:B3:11:F5:A0:EE:01:F2:47:E6:31:A1:C5:9C:F8:9F:9A:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1f1e07d-6189-4ba5-8912-3018d6712d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c080::/48
Signature Algorithm: sha256WithRSAEncryption
7b:80:31:d0:2c:7b:7e:a4:bc:22:45:51:cd:e9:81:e2:50:d6:
5d:ca:aa:ff:70:3f:7f:97:14:2d:c5:2c:7e:08:d3:ea:b9:72:
03:bf:8e:1b:fd:af:db:40:97:59:ae:95:ec:08:b8:3e:8d:d5:
d4:32:5f:5a:8a:74:b5:4e:92:e8:f9:3c:7b:42:13:20:a3:ad:
70:e8:b0:17:07:6b:f1:30:4a:13:5c:bd:c8:38:60:97:6d:f0:
eb:ff:cd:e4:62:87:8a:a4:f7:18:4d:7b:4b:cc:fd:b7:12:dd:
4e:e8:99:a7:ce:80:9f:c5:2b:e5:57:83:cc:12:99:23:af:4e:
17:fe:8a:f8:30:11:57:59:5e:36:7a:c1:3d:0a:0d:68:aa:e4:
ab:36:1f:02:4f:0f:09:fa:23:81:9f:9f:84:f4:36:37:0a:8d:
1e:08:8a:c9:59:42:6c:86:a4:ae:c2:c5:ae:57:b4:6f:c2:9b:
31:08:ba:7d:d2:4e:fc:07:34:d5:a1:da:a2:c1:2b:f2:91:7b:
24:a0:7c:b6:b0:e2:b3:72:44:be:10:00:f4:c5:7b:3a:fb:3e:
6e:04:46:82:42:bb:39:aa:f6:73:0d:23:65:c5:cc:88:34:e0:
08:a6:c2:33:b3:ad:b8:22:fa:06:90:fe:65:26:3b:e8:34:5e:
f5:d5:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:35:35 2026 by rpki-client