Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa
File: f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa (raw, json)
Hash identifier: tgrMoyyQtRyeAGjXzF8TJMIP/1k9eXUBjQSXlxb5YbQ=
Subject key identifier: 6F:EB:08:F9:BA:1D:08:05:75:32:37:AC:D4:75:40:91:EE:FE:83:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E0FC84E542EAF11E67944C026A47B239FD4C961
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa
Signing time: Fri 22 May 2026 16:03:31 +0000
ROA not before: Fri 22 May 2026 16:03:31 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0f:c8:4e:54:2e:af:11:e6:79:44:c0:26:a4:7b:23:9f:d4:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:03:31 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=a556f22600f108310208cd8efc66e7c562a25b506689c864d6761fa02e4d0d8c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:7a:a8:0d:6b:0a:eb:43:94:37:01:a9:83:
1e:b1:7d:2d:f7:e7:a3:d4:99:15:93:e3:ec:9d:f9:
2d:7d:af:21:6e:d1:55:3c:46:44:cc:79:2e:12:a3:
43:12:af:73:d0:26:d4:bb:c4:80:f9:d6:66:1b:66:
de:98:69:ff:e1:39:46:f1:ec:f5:f8:66:55:15:f1:
72:e1:29:9a:b8:6b:19:d5:46:32:86:86:84:eb:26:
49:0b:91:a4:b8:9d:db:53:13:38:65:b7:c0:dd:70:
92:75:f2:17:bb:9c:bd:ce:be:de:88:bc:6f:7c:99:
28:c5:22:c6:70:e5:3b:31:7f:80:ff:2c:0b:7a:47:
ab:0e:da:22:99:ab:9b:ba:6a:7c:c8:96:79:12:fa:
06:8c:5f:2c:ef:33:7e:e2:8a:da:ca:16:62:54:bf:
b7:81:bf:8f:91:6d:11:32:94:6b:2d:a7:0e:20:9c:
5d:3c:d9:3c:da:88:c9:6c:b1:a8:9e:32:00:0e:70:
7c:4c:58:f2:5e:2c:8c:98:ea:a7:02:d1:76:99:f6:
f5:36:82:9f:a4:ba:d3:2e:a5:5c:01:b7:14:12:00:
bd:59:6b:94:8d:e9:e4:8b:a8:72:36:f2:5d:fc:d3:
79:92:82:0e:85:0a:2d:ef:af:60:87:28:f8:7d:cd:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:08:F9:BA:1D:08:05:75:32:37:AC:D4:75:40:91:EE:FE:83:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
ba:7d:ee:ad:b8:40:b1:5d:ce:f8:ee:a4:be:cf:d4:a5:9c:e3:
50:ff:9f:cf:c6:0a:77:50:f3:b1:77:ee:4a:f2:34:86:7c:54:
22:df:0a:ed:8d:b8:b1:21:2b:3a:3c:6e:b4:46:36:82:72:ee:
25:53:fb:a7:bc:90:4b:0b:c9:7b:01:59:5e:15:0a:56:2a:a0:
9c:82:dc:f7:33:78:e8:35:68:40:29:3e:14:b6:c1:73:de:f1:
1b:95:20:0e:b5:f9:c0:c1:49:4e:38:c4:f1:ec:51:2a:9c:a0:
3d:01:f7:b5:4e:3d:f0:52:22:b4:0e:0f:f1:ea:4b:32:1d:38:
89:95:1c:1e:d2:f4:6f:09:81:87:96:77:61:db:b1:78:ae:61:
a3:79:9a:5c:65:1a:b8:5a:7e:1f:bf:a1:96:8d:27:c6:38:84:
68:fb:d2:aa:ba:a9:5e:f6:92:1c:31:92:c8:c9:22:57:75:6e:
6d:c4:90:a6:dd:aa:fc:71:a3:31:f0:c1:f6:cd:f1:d6:4f:3e:
2c:c9:36:3e:6f:8c:a9:67:fa:ab:2a:f6:63:54:fc:87:0b:fc:
43:ca:48:48:de:87:4d:0e:24:a0:67:7a:23:52:9c:e4:55:58:
2c:a4:3d:a6:a2:b3:aa:93:4b:39:a4:5e:cf:28:ed:c4:96:86:
49:3c:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:03 2026 by rpki-client