Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
File: edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa (raw, json)
Hash identifier: MrgbJB8WTPDW32hWXsXRaUu95o3d3h8z1vWc82pfuyI=
Subject key identifier: 33:B1:56:DD:36:7E:17:9A:D9:0E:EB:54:C1:F0:F2:0E:89:D1:3B:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F3DB4C8F573E29DAFDD98E121D9FFE539D05201
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
Signing time: Sat 28 Feb 2026 06:21:19 +0000
ROA not before: Sat 28 Feb 2026 06:21:19 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3d:b4:c8:f5:73:e2:9d:af:dd:98:e1:21:d9:ff:e5:39:d0:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:21:19 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=5b3f286088ca10317bf7d22316ce3bd106dcc15f4751f771101bbeab7a55ebff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:84:1b:88:c3:48:a7:ce:b1:3d:3f:2b:41:
98:21:18:b6:5b:5b:e9:a5:23:3f:22:03:77:f6:fb:
a7:14:f7:08:8a:96:78:5e:f8:03:06:3d:bd:15:79:
64:f1:1c:33:0f:0c:b5:95:be:c4:c9:5c:bb:07:03:
4f:fb:e3:89:2d:0b:de:79:bb:b5:29:ec:ff:6f:4b:
b8:28:f0:9d:7c:bf:36:b1:5d:c7:e2:1c:87:33:43:
00:72:bc:1b:92:1e:00:da:01:18:58:b8:4f:94:87:
b2:f3:1e:f9:46:0a:ca:b6:5e:47:b1:c6:19:ba:f0:
95:b8:5f:41:03:d2:85:bb:5d:cb:33:80:aa:00:3f:
45:45:dc:d6:17:16:d9:42:15:6c:00:27:f8:91:ff:
0c:43:00:7a:c0:98:2e:fa:7d:75:b4:9b:1d:86:13:
90:92:eb:1d:a2:47:ec:9f:70:07:6a:34:3a:b8:77:
57:d0:f0:9c:a3:bd:8b:9a:98:32:f1:a8:57:9a:6b:
d1:9d:4e:d2:56:5d:56:36:5b:dc:e1:0f:d7:2c:ea:
19:3a:be:22:9f:93:06:9d:0b:e8:c0:e9:ba:a1:e8:
10:9d:42:c7:2b:98:4b:d0:f3:91:f2:21:07:5a:3d:
59:9c:fd:2d:51:b0:7a:84:f6:90:97:1f:70:83:53:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:56:DD:36:7E:17:9A:D9:0E:EB:54:C1:F0:F2:0E:89:D1:3B:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/38
Signature Algorithm: sha256WithRSAEncryption
30:43:3d:b1:3a:90:8b:cd:20:9e:4c:02:00:86:1e:ee:43:a6:
27:8c:48:e4:67:27:bc:27:68:fa:e0:69:a8:d0:c3:cf:22:f3:
56:97:93:d4:e5:38:0e:00:60:62:3c:43:3f:65:2e:65:d7:4a:
49:e5:29:21:c1:5a:30:04:db:c6:8c:18:fe:64:ef:e6:18:72:
8e:d4:81:60:26:2d:75:1c:36:5c:73:4b:23:e0:85:c3:2d:27:
69:bf:ee:f8:f8:85:26:d0:4b:31:fe:ac:de:aa:95:c8:d2:44:
e8:dc:87:d4:dc:5a:05:18:82:18:dd:f1:2a:8a:b7:02:83:8b:
94:07:ee:e8:5a:41:30:b8:5c:68:07:29:fd:b9:4f:8d:54:ea:
a9:12:4d:5e:4e:cf:e3:d2:7b:79:c7:a3:16:d7:8c:72:a3:37:
95:fb:ca:09:e3:53:3b:ea:85:2c:5b:c4:c2:61:a8:58:a9:31:
f2:db:21:09:28:3a:93:81:3e:e7:66:7d:f5:da:a0:26:5b:f1:
4e:78:b4:0c:d9:76:75:98:07:b4:97:f3:2b:d3:56:9c:cb:a3:
aa:91:08:80:c0:fd:6a:29:bc:06:b1:19:0a:ba:62:74:f7:c5:
63:ad:7f:88:81:e4:b4:25:33:36:42:54:d9:58:ee:80:ca:f5:
d1:04:6f:15
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTz20yPVz4p2v3ZjhIdn/5TnQUgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjIxMTlaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDViM2YyODYwODhjYTEwMzE3YmY3ZDIyMzE2Y2UzYmQxMDZkY2MxNWY0NzUx
Zjc3MTEwMWJiZWFiN2E1NWViZmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXdhBuIw0inzrE9PytBmCEYtltb6aUjPyIDd/b7pxT3CIqWeF74AwY9vRV5
ZPEcMw8MtZW+xMlcuwcDT/vjiS0L3nm7tSns/29LuCjwnXy/NrFdx+IchzNDAHK8
G5IeANoBGFi4T5SHsvMe+UYKyrZeR7HGGbrwlbhfQQPShbtdyzOAqgA/RUXc1hcW
2UIVbAAn+JH/DEMAesCYLvp9dbSbHYYTkJLrHaJH7J9wB2o0Orh3V9DwnKO9i5qY
MvGoV5pr0Z1O0lZdVjZb3OEP1yzqGTq+Ip+TBp0L6MDpuqHoEJ1CxyuYS9DzkfIh
B1o9WZz9LVGweoT2kJcfcINTVpECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQzsVbd
Nn4XmtkO61TB8PIOidE7EzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWRjYzk3ODktMTM4OC00YTVmLWExYWUtMWJiNThjNGNiMzE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQA
MA0GCSqGSIb3DQEBCwUAA4IBAQAwQz2xOpCLzSCeTAIAhh7uQ6YnjEjkZye8J2j6
4Gmo0MPPIvNWl5PU5TgOAGBiPEM/ZS5l10pJ5SkhwVowBNvGjBj+ZO/mGHKO1IFg
Ji11HDZcc0sj4IXDLSdpv+74+IUm0Esx/qzeqpXI0kTo3IfU3FoFGIIY3fEqircC
g4uUB+7oWkEwuFxoByn9uU+NVOqpEk1eTs/j0nt5x6MW14xyozeV+8oJ41M76oUs
W8TCYahYqTHy2yEJKDqTgT7nZn312qAmW/FOeLQM2XZ1mAe0l/Mr01acy6OqkQiA
wP1qKbwGsRkKumJ098VjrX+IgeS0JTM2QlTZWO6AyvXRBG8V
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:34 2026 by rpki-client