Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
File: e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa (raw, json)
Hash identifier: AHUkBfD2wS4FD9MhX3BEa8bpcIzguuNXGD8bM9MJDEg=
Subject key identifier: 8D:CB:3C:FE:D9:C7:C3:43:B6:D1:98:4B:D1:7D:48:47:11:2C:A9:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A96189F53F689096555AA3315948DFB891A3B33
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
Signing time: Sat 28 Feb 2026 05:30:55 +0000
ROA not before: Sat 28 Feb 2026 05:30:55 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:96:18:9f:53:f6:89:09:65:55:aa:33:15:94:8d:fb:89:1a:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:30:55 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=e2c9f161da98f75f2e87558faa2a01a835d287eb5a4975ebf1222bc4a002b218, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:4a:ff:3c:fc:e1:7f:e6:40:39:24:0b:cf:
11:f4:c6:34:4c:01:31:2e:8f:ae:29:87:a6:63:90:
4b:7e:43:34:a3:ff:88:3d:b4:31:07:b9:e8:2b:f7:
8b:79:f3:b6:35:fb:27:78:3a:d0:00:f9:93:7b:04:
3b:59:03:84:5c:e6:7b:e6:68:0b:65:03:a5:aa:8f:
2c:da:45:fc:50:0b:27:79:cf:05:05:89:9d:9d:9a:
74:6a:67:f9:f6:97:b0:d1:b4:2d:23:dc:80:b3:76:
d7:31:38:37:82:59:57:30:8c:70:70:e5:3e:eb:f8:
c5:f2:60:78:bc:3a:6f:be:50:01:c1:68:e2:fa:4e:
e7:8a:77:2c:74:8d:85:8a:b5:a6:d9:2d:c0:04:08:
3a:de:3b:72:37:50:4f:fc:40:90:8f:7c:1e:47:8d:
c9:5c:65:87:4e:ef:ae:91:51:fe:85:e3:f4:ae:25:
01:83:8b:ab:36:36:7c:c5:98:e3:0a:e5:91:b0:d5:
e3:0a:60:b1:b0:9e:70:14:16:e2:f8:a1:76:a2:e9:
3f:e9:7b:95:bb:40:92:2b:8f:52:2a:c5:48:cf:f0:
61:dc:b4:a1:59:04:44:7f:43:25:65:22:e2:fb:27:
3a:28:10:bb:21:88:e4:a6:1d:08:22:23:60:87:97:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:3C:FE:D9:C7:C3:43:B6:D1:98:4B:D1:7D:48:47:11:2C:A9:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:c000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:de:20:ba:89:5c:4a:6f:12:47:a0:0d:02:fe:f2:a9:fe:b8:
5a:2b:32:de:5b:b5:87:fd:cb:a0:ba:84:16:77:d3:30:8f:e2:
72:d6:9e:7a:a8:4b:fb:66:e3:b4:79:a9:21:a2:25:ba:11:14:
38:5c:82:1e:f3:6b:16:35:e2:1a:ae:45:c5:ec:22:63:f0:a4:
88:92:a3:23:58:6e:43:72:5d:f8:f6:49:ed:b2:58:cc:80:b2:
fe:8f:82:f5:4e:da:d8:c7:c2:c4:24:08:21:91:d5:05:73:18:
ca:26:64:cf:02:9e:ee:de:14:3c:ed:9c:f4:08:cb:a6:88:34:
d8:c4:63:24:63:35:f8:18:b4:7e:f0:6d:22:e0:2f:a3:ad:39:
d0:a2:b2:4b:64:43:5b:d2:1a:f9:62:49:07:df:ca:d5:86:dc:
ae:d9:9f:01:5f:45:f3:ca:8b:66:3b:c2:55:73:11:fe:b5:d1:
29:34:8e:04:b5:c2:33:67:d0:52:81:ea:21:cf:b2:b2:93:26:
9d:5c:18:b0:e8:da:af:92:80:c2:c6:0d:61:7c:c8:39:ab:13:
d2:1c:1b:4a:e8:5e:5d:f8:9b:9a:13:a6:86:79:e8:f8:d1:48:
9a:b0:2f:7a:c1:29:b7:96:36:07:53:7d:85:7c:53:1e:9e:9e:
e0:c4:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:56 2026 by rpki-client