Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
File: 01309cf4-63f2-4f18-9689-8db4888bbe62.roa (raw, json)
Hash identifier: 6Gc58piDSsSCNKvqBIfIGSwTQUACeIieykbxu+th/Zw=
Subject key identifier: 66:CA:4B:CB:19:59:AD:86:04:CA:19:86:69:C2:5E:54:71:76:4A:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49DAFB29F3E1234C34163C5EF6B4220063C01F35
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
Signing time: Fri 22 May 2026 16:03:30 +0000
ROA not before: Fri 22 May 2026 16:03:30 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:da:fb:29:f3:e1:23:4c:34:16:3c:5e:f6:b4:22:00:63:c0:1f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:03:30 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=69a63a6a18f6f30fee506400654003d01e82aff6cdb264f1ba4123e6061c6871, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:f9:7c:f7:20:e9:f8:e7:78:ba:01:3b:36:
fa:a2:61:82:66:7a:25:06:ab:48:77:dd:43:c4:b9:
74:51:e0:85:2d:17:09:10:b0:bf:a3:6a:e6:17:21:
16:97:8c:0d:a2:24:af:a1:36:48:99:46:58:1e:6f:
25:c2:65:c0:38:f6:c3:d2:25:28:b6:1f:10:9c:f3:
20:c4:e5:f5:dc:16:99:65:a0:4c:d3:4d:f3:a8:60:
29:d5:51:34:11:42:8f:48:21:87:9a:4f:93:14:61:
af:dc:77:d8:9d:37:19:db:ce:e0:31:69:60:a5:91:
69:15:df:07:a7:1e:ae:fb:38:de:7c:10:51:91:7f:
2b:27:16:d5:86:04:b3:03:fb:46:bd:da:e2:9d:7f:
06:25:25:cf:9c:1d:3f:6b:fa:7a:9c:11:1f:4e:68:
17:c4:c2:b6:68:c8:41:9a:18:33:f6:af:83:60:e7:
5d:ec:49:3c:01:bf:1a:25:f5:78:69:7c:9f:0d:17:
bb:5b:fe:ed:f8:82:32:31:33:43:0a:49:84:7c:e7:
c4:f4:d9:d9:1b:09:99:51:76:32:c5:b5:95:1b:fb:
39:ec:39:09:73:79:b5:85:fb:ee:22:5a:eb:a5:2a:
15:83:45:ab:06:b8:5a:cb:d8:2e:b9:3f:68:e1:99:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:4B:CB:19:59:AD:86:04:CA:19:86:69:C2:5E:54:71:76:4A:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:5040::/48
Signature Algorithm: sha256WithRSAEncryption
51:8b:f6:e2:7c:b2:73:1c:06:3a:33:55:4b:56:ef:a9:1d:75:
9e:55:49:b3:24:38:94:d5:fd:9e:c6:52:b1:40:b4:4d:7b:aa:
6e:9f:a0:9c:dd:f2:37:9a:04:f7:ad:38:bf:24:f1:c0:68:a5:
a7:17:89:9e:bc:00:f2:1e:cc:92:a8:6d:e9:93:e9:56:67:4f:
d6:90:cc:bb:f9:6d:8b:2a:65:df:23:5a:73:7a:d6:2d:d8:70:
3b:67:aa:e8:75:85:fe:38:a4:d1:c5:36:7a:4e:82:ac:f3:0d:
dc:5a:0a:68:e0:f0:10:9b:30:56:ea:2e:35:33:fa:c1:5a:aa:
cc:ed:72:12:08:46:e8:7a:3b:dc:37:9c:e5:86:e3:4a:ec:51:
4f:29:e5:c0:db:fe:c6:f8:08:ac:d2:bc:db:95:eb:5a:dd:90:
79:73:45:34:41:b4:11:e9:56:dd:6a:c0:28:74:e1:b8:d8:6a:
f7:a6:c2:ed:9e:d6:4d:85:1b:11:61:d4:1a:29:6e:69:7c:9e:
ce:e4:f0:b2:bc:5a:d4:55:ed:1e:2f:be:5d:e0:1f:c7:28:97:
29:c2:3c:91:f8:ba:97:ae:09:7c:fe:dd:7f:cc:61:b0:95:54:
10:f5:69:6c:f4:4b:0b:9f:bc:2a:d6:a9:95:a3:1f:d1:85:6a:
e8:6a:8c:ca
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSdr7KfPhI0w0Fjxe9rQiAGPAHzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MjIxNjAzMzBaFw0yNjA4MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDY5YTYzYTZhMThmNmYzMGZlZTUwNjQwMDY1NDAwM2QwMWU4MmFmZjZjZGIy
NjRmMWJhNDEyM2U2MDYxYzY4NzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJnJ+Xz3IOn453i6ATs2+qJhgmZ6JQarSHfdQ8S5dFHghS0XCRCwv6Nq5hch
FpeMDaIkr6E2SJlGWB5vJcJlwDj2w9IlKLYfEJzzIMTl9dwWmWWgTNNN86hgKdVR
NBFCj0ghh5pPkxRhr9x32J03GdvO4DFpYKWRaRXfB6cervs43nwQUZF/KycW1YYE
swP7Rr3a4p1/BiUlz5wdP2v6epwRH05oF8TCtmjIQZoYM/avg2DnXexJPAG/GiX1
eGl8nw0Xu1v+7fiCMjEzQwpJhHznxPTZ2RsJmVF2MsW1lRv7Oew5CXN5tYX77iJa
66UqFYNFqwa4WsvYLrk/aOGZhHcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRmykvL
GVmthgTKGYZpwl5UcXZKRjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDEzMDljZjQtNjNmMi00ZjE4LTk2ODktOGRiNDg4OGJiZTYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GhQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAUYv24nyycxwGOjNVS1bvqR11nlVJsyQ4lNX9
nsZSsUC0TXuqbp+gnN3yN5oE9604vyTxwGilpxeJnrwA8h7Mkqht6ZPpVmdP1pDM
u/ltiypl3yNac3rWLdhwO2eq6HWF/jik0cU2ek6CrPMN3FoKaODwEJswVuouNTP6
wVqqzO1yEghG6Ho73Dec5YbjSuxRTynlwNv+xvgIrNK825XrWt2QeXNFNEG0EelW
3WrAKHThuNhq96bC7Z7WTYUbEWHUGiluaXyezuTwsrxa1FXtHi++XeAfxyiXKcI8
kfi6l64JfP7df8xhsJVUEPVpbPRLC5+8KtaplaMf0YVq6GqMyg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:45 2026 by rpki-client