Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa
File: eadba346-c29f-4797-9fab-fc53bf489862.roa (raw, json)
Hash identifier: E8Rf0gBYjls1J6pim7sqUEXvoRDJgWvhAw5xXrTsBYw=
Subject key identifier: E1:6E:72:AB:CE:90:69:C1:54:99:93:C6:76:B5:5A:0C:70:EE:94:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13E7F7ED89F52892BCDEA156E24D5DAB6A065656
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa
Signing time: Fri 03 Apr 2026 02:30:19 +0000
ROA not before: Fri 03 Apr 2026 02:30:19 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e7:f7:ed:89:f5:28:92:bc:de:a1:56:e2:4d:5d:ab:6a:06:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:30:19 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=70077f1a1bdeab8c6546398e8ad7cef5a8a1a2c8244a879fb359585f2d3ebbed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:a2:ee:35:17:b4:f4:0c:71:ea:b4:5e:6a:
95:a5:4c:e8:6a:d9:9f:08:6f:d7:cf:36:ad:52:64:
f2:fa:06:e4:d4:8a:db:6e:d9:79:a8:0d:4a:89:fc:
dc:75:32:8f:56:56:63:ce:a0:cb:7e:cc:e8:7a:27:
71:ef:c0:38:c5:df:d7:c0:49:40:eb:9a:20:53:88:
83:36:f2:68:46:96:b2:54:28:21:5f:de:78:91:03:
40:90:5a:6c:f4:ef:64:73:8a:ce:02:b5:1e:a9:e6:
40:d2:a9:d7:0e:6e:63:ec:65:5a:e9:d4:be:10:f8:
a4:ed:5d:23:65:2e:7b:7b:8f:4a:9e:28:82:2d:4b:
d2:ec:52:0f:8d:8f:3a:74:e2:ae:82:98:ba:bf:7e:
bf:20:42:59:e9:fa:10:c8:29:c3:1a:d0:60:6d:0a:
ca:e9:91:83:80:25:08:16:d4:a8:45:87:42:45:0f:
16:39:02:84:12:fc:77:53:39:18:78:ab:51:b9:11:
fe:bf:50:5e:f7:02:54:46:58:77:ae:d7:5d:2e:96:
ff:10:ad:1f:40:35:b4:40:b4:b8:16:df:a3:3c:92:
85:d3:66:6d:5c:3f:f4:9d:19:d4:bd:e6:48:3d:ab:
29:0f:b7:66:e8:55:4b:e5:bc:ed:c8:2b:8f:89:41:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:72:AB:CE:90:69:C1:54:99:93:C6:76:B5:5A:0C:70:EE:94:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c020::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a8:62:aa:9b:9b:09:cb:28:91:ec:d3:b8:6a:8d:89:22:e2:
02:a7:7c:57:f4:e4:8e:9f:70:0a:4a:e5:ab:ec:06:d8:02:bb:
43:37:14:2f:82:e1:d6:62:6d:41:e6:0f:b3:2c:20:d9:68:85:
c6:71:99:59:6e:de:57:50:39:76:5b:94:5e:7f:21:59:96:3b:
9b:e6:50:e2:18:2d:7d:2c:88:d8:e5:cd:54:b1:48:e6:ea:bb:
91:1e:94:a7:07:43:b6:c4:81:e1:fb:a7:1b:f8:55:9a:fc:fd:
5d:08:21:14:32:07:a2:27:24:bd:c8:4e:ae:64:7d:33:d9:30:
d2:fb:57:9b:96:32:70:12:44:b8:ed:92:06:03:4e:41:0c:8b:
66:0c:80:fa:dc:d7:8e:09:5d:1d:48:af:99:ab:07:52:71:bd:
94:bb:38:5a:69:0d:9a:5c:c4:21:0d:c4:15:89:03:77:60:0a:
dd:1c:e0:9f:97:0b:44:74:5b:94:3c:a7:e5:68:af:ee:02:37:
76:77:17:27:5b:30:6e:59:a8:7e:ad:bf:e0:fb:76:b4:91:31:
b4:af:2f:38:15:a2:6d:28:fc:bc:f8:08:2e:ff:4e:91:8d:8c:
6a:60:2b:18:14:d4:0d:b3:71:d9:36:2c:66:e8:42:46:9b:01:
22:e6:33:aa
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUE+f37Yn1KJK83qFW4k1dq2oGVlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA0MDMwMjMwMTlaFw0yNjA3MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDcwMDc3ZjFhMWJkZWFiOGM2NTQ2Mzk4ZThhZDdjZWY1YThhMWEyYzgyNDRh
ODc5ZmIzNTk1ODVmMmQzZWJiZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL1Uou41F7T0DHHqtF5qlaVM6GrZnwhv1882rVJk8voG5NSK227ZeagNSon8
3HUyj1ZWY86gy37M6Honce/AOMXf18BJQOuaIFOIgzbyaEaWslQoIV/eeJEDQJBa
bPTvZHOKzgK1HqnmQNKp1w5uY+xlWunUvhD4pO1dI2Uue3uPSp4ogi1L0uxSD42P
OnTiroKYur9+vyBCWen6EMgpwxrQYG0KyumRg4AlCBbUqEWHQkUPFjkChBL8d1M5
GHirUbkR/r9QXvcCVEZYd67XXS6W/xCtH0A1tEC0uBbfozyShdNmbVw/9J0Z1L3m
SD2rKQ+3ZuhVS+W87cgrj4lBIUECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBThbnKr
zpBpwVSZk8Z2tVoMcO6UmTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWFkYmEzNDYtYzI5Zi00Nzk3LTlmYWItZmM1M2JmNDg5ODYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GvA
IDANBgkqhkiG9w0BAQsFAAOCAQEADKhiqpubCcsokezTuGqNiSLiAqd8V/Tkjp9w
Ckrlq+wG2AK7QzcUL4Lh1mJtQeYPsywg2WiFxnGZWW7eV1A5dluUXn8hWZY7m+ZQ
4hgtfSyI2OXNVLFI5uq7kR6UpwdDtsSB4funG/hVmvz9XQghFDIHoickvchOrmR9
M9kw0vtXm5YycBJEuO2SBgNOQQyLZgyA+tzXjgldHUivmasHUnG9lLs4WmkNmlzE
IQ3EFYkDd2AK3Rzgn5cLRHRblDyn5Wiv7gI3dncXJ1swblmofq2/4Pt2tJExtK8v
OBWibSj8vPgILv9OkY2MamArGBTUDbNx2TYsZuhCRpsBIuYzqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:23 2026 by rpki-client