Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ecd0de1c-1796-4eb4-bed5-384a3da9b388.roa
File: ecd0de1c-1796-4eb4-bed5-384a3da9b388.roa (raw, json)
Hash identifier: 4bS5KLpyYLUUKIBtXqAdeh0mnfl9moaGaB/5SDjVdAE=
Subject key identifier: 71:81:85:8A:00:2A:3B:32:3B:25:51:90:21:BE:B7:AC:97:55:8E:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 509BB969A378C13086EE055509D206E8B6856596
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ecd0de1c-1796-4eb4-bed5-384a3da9b388.roa
Signing time: Thu 16 Apr 2026 23:02:13 +0000
ROA not before: Thu 16 Apr 2026 23:02:13 +0000
ROA not after: Wed 15 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:1000::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9b:b9:69:a3:78:c1:30:86:ee:05:55:09:d2:06:e8:b6:85:65:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 16 23:02:13 2026 GMT
Not After : Jul 15 23:59:59 2026 GMT
Subject: serialNumber=58173f63704a1fd5bb5dc975a58d5c06cb86fde05f7f321d8864c4409e2b57c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:9d:1c:4e:15:d7:cb:45:dd:ec:56:47:ba:
fd:37:97:81:33:bd:93:29:69:25:05:c0:a8:35:56:
ac:40:07:a2:a1:b0:77:6f:e5:8d:bb:59:79:b6:85:
b1:52:ca:5a:d2:d7:fb:20:24:7b:a2:24:f4:83:c8:
c0:77:16:dc:4e:4c:08:49:ba:63:bf:e2:c7:96:53:
fe:99:7b:3f:dd:4d:ae:a4:48:e9:86:d8:da:3f:af:
b7:4f:2e:92:3a:a1:b2:cb:af:af:4e:89:75:d8:c7:
4b:ef:92:6f:4e:6c:b7:79:ac:79:83:6e:3d:83:2e:
c1:3e:2d:d4:24:e5:f6:b9:f5:00:f6:17:43:67:4a:
ac:e9:68:95:39:34:39:81:01:b9:f8:4f:6a:5c:38:
7f:77:0e:45:91:81:0d:05:4d:d1:66:b7:0d:7b:47:
9c:74:57:e1:9f:ca:ce:27:e1:63:6c:a7:f0:f7:05:
da:0f:4b:74:eb:a3:e8:ef:17:43:43:2e:9d:31:99:
2d:a8:aa:61:c1:11:99:5d:42:30:15:79:02:55:5b:
54:98:58:cb:17:21:5c:1d:9e:8d:4f:be:59:1c:cd:
bb:e4:9a:5f:36:1a:0e:63:8a:30:c0:5e:8c:fc:e7:
75:f8:fd:10:c9:fb:b3:02:47:9a:14:05:52:23:b6:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:85:8A:00:2A:3B:32:3B:25:51:90:21:BE:B7:AC:97:55:8E:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ecd0de1c-1796-4eb4-bed5-384a3da9b388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:1000::/37
Signature Algorithm: sha256WithRSAEncryption
22:0a:3c:38:1c:72:a7:26:37:58:fc:37:4d:8f:47:e7:8c:a9:
89:bc:6e:15:8c:c8:31:be:b2:77:73:36:fe:87:5e:3a:b7:a2:
82:14:b8:12:72:6b:62:52:b2:d7:58:7b:a1:6f:9c:16:a8:18:
0f:99:20:03:d5:39:37:2a:50:7a:55:e4:96:66:f8:e1:f6:56:
1a:c0:47:09:dd:da:e4:79:e3:11:33:93:97:a2:2e:af:7f:13:
00:b9:b5:81:09:f8:37:3a:93:8c:e9:c5:e0:e0:54:42:10:93:
a9:1d:7b:7c:dc:30:fa:2f:ae:4e:93:67:83:54:78:72:d9:35:
50:d7:9e:20:e2:f9:36:35:38:aa:57:ce:51:d6:33:62:70:34:
37:0d:c9:82:7b:ba:01:1f:eb:b5:54:02:bc:fa:da:09:3c:8a:
60:71:dd:a5:cb:e8:ba:0a:c5:3b:0a:58:84:b5:02:6e:16:90:
b5:87:6f:db:8d:da:0d:29:26:76:dd:02:99:4d:0a:77:a6:ec:
b3:76:5c:9c:80:8d:7f:ed:35:2e:79:d5:26:e8:b1:44:4f:55:
2a:b5:17:6c:3c:29:71:28:d0:c5:7e:09:da:a3:da:59:cc:d1:
29:40:37:47:c2:0e:4c:4b:d5:81:f1:a3:c2:fd:25:56:14:49:
62:7b:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:45 2026 by rpki-client