Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
File: f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json)
Hash identifier: M0LKKNyTpLVRcVsyFQJCOUSH/WGVjPX1i7zM8dWRa7w=
Subject key identifier: E9:88:26:34:54:13:40:CF:79:B3:B4:89:B8:24:9B:CF:CB:C6:51:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0730097D7A2523215150B4430DA21B2C02FD1405
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
Signing time: Fri 15 May 2026 02:20:09 +0000
ROA not before: Fri 15 May 2026 02:20:09 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:30:09:7d:7a:25:23:21:51:50:b4:43:0d:a2:1b:2c:02:fd:14:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 02:20:09 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=fb6208842f500ba4b79053fb2d79e263182d71459875bfc9bc122825c1cfcd7f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:0c:53:37:7e:3c:ce:89:09:53:ff:09:15:
48:44:ea:03:35:19:7b:c6:a0:0b:2d:b0:63:81:88:
ef:ed:90:75:f3:33:a7:05:e9:66:68:6f:b0:71:7e:
7b:af:52:3d:f3:da:cf:21:89:cb:74:dd:a5:38:8d:
4d:8d:2e:c7:c0:ef:c7:6b:27:70:6b:da:63:5b:43:
4e:5a:52:5b:e8:18:97:5f:13:5f:3b:81:06:b0:11:
b7:22:43:bf:74:8d:69:2d:fb:ae:d6:9d:31:58:e5:
45:46:77:50:4f:98:56:b3:ed:08:64:48:10:63:76:
f9:3a:28:cf:e9:b0:09:31:e0:bb:60:fd:2e:d1:16:
ca:4a:e8:cc:73:85:f9:56:17:c4:91:ef:f9:c3:ea:
36:d0:2c:c2:f4:94:a1:b3:16:3b:a7:71:1f:07:ce:
cf:1b:9f:bd:08:fa:b5:9b:09:fc:a3:9e:65:56:e7:
5e:ce:47:41:11:0a:f2:3f:94:6e:a0:40:8a:17:d1:
2f:3e:a5:96:a6:47:50:0b:f7:5e:e6:42:58:bd:34:
6d:02:da:c5:ad:05:5d:47:c0:aa:21:06:e7:4a:21:
2c:10:a7:2d:8f:29:87:45:01:97:d9:a3:04:be:ed:
48:93:71:48:bb:c8:00:06:22:a5:53:c5:09:35:b9:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:88:26:34:54:13:40:CF:79:B3:B4:89:B8:24:9B:CF:CB:C6:51:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:e1:14:58:12:62:f1:34:7e:be:c2:f7:1e:ee:11:e0:6a:11:
ff:55:49:ce:35:32:a5:f1:5a:da:a7:65:c9:6d:f9:34:29:b3:
26:43:89:d3:10:4f:a2:3f:5d:04:a6:a1:c5:10:ef:56:bc:ff:
6c:29:7c:8e:10:08:f6:ea:ad:81:22:93:73:21:4d:29:21:23:
ea:60:78:12:20:e4:f4:1f:29:93:72:e7:5a:1f:a0:ad:10:94:
a9:06:ae:c7:41:ab:2c:f8:5b:a6:00:16:82:ca:84:60:f7:7a:
35:4f:d6:e0:96:c6:91:56:5b:fa:ac:a9:7e:19:b7:c4:45:11:
43:e1:18:12:56:62:cf:a5:d4:ab:8d:3c:7b:3e:fb:6b:38:e6:
e7:53:2e:7d:f3:66:50:92:70:80:51:32:82:0e:b0:b4:01:58:
21:27:e2:06:46:14:a3:5f:54:51:59:79:39:a7:df:48:74:12:
33:14:6b:b2:06:60:80:ec:37:7a:2b:33:7c:cd:4f:01:97:2e:
c7:ff:e2:42:d4:8c:99:e2:67:26:b3:ce:9f:b3:1a:78:8b:59:
de:e8:83:1d:26:87:19:38:73:5b:c8:d0:8a:c2:96:35:7f:bd:
19:55:3f:3e:af:cf:31:0c:1b:c6:bd:cd:b6:fd:59:e5:6e:0e:
fe:dc:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:58 2026 by rpki-client