Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10862bca-cf4b-4780-8288-bd658c6a5f77.roa
File: 10862bca-cf4b-4780-8288-bd658c6a5f77.roa (raw, json)
Hash identifier: 8ADs9ec3lgjU19CIheMrlSKdWWij/juT3yE00G+HraY=
Subject key identifier: FA:39:D5:F2:58:A0:F6:2F:E9:EB:25:C4:F6:D0:20:20:A0:85:02:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D9D104479F16648B79B87F1F51B100E3A58FF1C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10862bca-cf4b-4780-8288-bd658c6a5f77.roa
Signing time: Fri 03 Apr 2026 02:30:15 +0000
ROA not before: Fri 03 Apr 2026 02:30:15 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9d:10:44:79:f1:66:48:b7:9b:87:f1:f5:1b:10:0e:3a:58:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:30:15 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=8dcd5d433e9f690dc018c5568e86211b99d968f7b27ce817bb4fe58361dc2bed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:f0:cb:20:88:0b:0a:7e:b1:58:31:18:cd:
3b:f9:60:a6:d9:8b:11:03:00:a9:bd:e7:3e:b2:4c:
d6:c9:da:e4:03:b6:9e:e7:20:3b:9e:0b:5c:2d:50:
46:8e:e8:bf:b0:47:bb:dd:96:7c:fc:55:fd:49:a8:
e0:3d:1e:26:6c:19:a6:ea:35:38:5c:d3:ac:62:1e:
15:47:ed:17:5a:46:02:f5:ac:ae:8d:ec:a7:55:07:
c0:45:e8:2b:7e:c4:83:de:ea:17:33:a6:e0:d3:12:
5b:be:7c:48:cf:f5:3f:d5:1d:10:cb:eb:41:13:aa:
f2:2b:ea:b5:2a:f8:21:a0:dd:f5:63:70:c5:4c:70:
d4:e5:bf:77:87:05:62:27:31:f4:c7:6d:6a:bc:18:
ff:57:bf:a2:d2:35:74:46:7c:d6:e4:5c:7d:3f:75:
03:78:f7:be:35:47:56:61:21:ec:e4:bf:e4:e0:62:
6d:97:f2:e0:be:c7:be:3e:71:1f:45:ac:43:e9:35:
a2:5f:59:e8:6c:ae:96:94:55:82:59:68:a2:ac:7c:
aa:e7:44:5c:c8:2f:71:d0:c9:a7:70:29:e8:0b:c1:
3a:63:04:54:27:ed:3a:1d:0b:39:09:fa:b9:c0:2e:
f2:ab:ed:41:0b:ad:98:24:c3:95:7e:9e:52:d3:93:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:D5:F2:58:A0:F6:2F:E9:EB:25:C4:F6:D0:20:20:A0:85:02:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10862bca-cf4b-4780-8288-bd658c6a5f77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c040::/48
Signature Algorithm: sha256WithRSAEncryption
9f:78:a3:93:91:f1:ff:ce:35:fd:aa:a1:60:9f:6b:12:21:9e:
bd:d9:61:c7:42:10:4a:80:99:41:d9:52:22:21:c0:b0:4e:fc:
82:20:b1:3f:be:49:7e:03:ae:25:2d:f5:50:85:4c:c3:bd:58:
17:36:40:6b:86:86:b2:ee:66:f1:ba:f8:86:6b:19:70:fa:ac:
b2:1b:f9:e2:dc:12:8c:58:7c:50:bf:b7:bb:9f:8f:f5:3c:cb:
e8:a3:00:4c:5c:6c:ef:a5:0b:76:b7:15:c0:1c:f6:ce:e1:6d:
5c:92:3f:e7:c1:dc:fd:a0:a1:dc:69:0c:2a:dc:1e:a9:e6:dc:
24:9e:b2:87:42:6b:c3:36:c8:8b:e2:35:86:c3:0d:1f:3c:58:
30:f4:eb:fa:94:26:4e:2b:d1:01:d4:02:5a:5a:70:b5:70:c0:
35:1b:7c:33:5f:50:fa:b4:19:13:7c:21:1f:2f:6b:3a:34:77:
d2:d1:e3:42:03:85:7d:b3:54:2d:4e:19:99:c3:c2:ab:37:66:
fa:3e:22:9a:2e:fc:44:9c:b5:5a:ce:10:4d:28:c4:5e:42:e6:
6a:6e:d5:c4:1e:6b:dd:32:f2:78:5d:4c:81:58:66:8f:4f:87:
7e:39:f7:66:62:aa:6d:5f:e8:d5:57:9b:1b:34:8a:60:9e:ff:
61:41:fd:aa
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUXZ0QRHnxZki3m4fx9RsQDjpY/xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA0MDMwMjMwMTVaFw0yNjA3MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDhkY2Q1ZDQzM2U5ZjY5MGRjMDE4YzU1NjhlODYyMTFiOTlkOTY4ZjdiMjdj
ZTgxN2JiNGZlNTgzNjFkYzJiZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRU8MsgiAsKfrFYMRjNO/lgptmLEQMAqb3nPrJM1sna5AO2nucgO54LXC1Q
Ro7ov7BHu92WfPxV/Umo4D0eJmwZpuo1OFzTrGIeFUftF1pGAvWsro3sp1UHwEXo
K37Eg97qFzOm4NMSW758SM/1P9UdEMvrQROq8ivqtSr4IaDd9WNwxUxw1OW/d4cF
Yicx9MdtarwY/1e/otI1dEZ81uRcfT91A3j3vjVHVmEh7OS/5OBibZfy4L7Hvj5x
H0WsQ+k1ol9Z6GyulpRVgllooqx8qudEXMgvcdDJp3Ap6AvBOmMEVCftOh0LOQn6
ucAu8qvtQQutmCTDlX6eUtOTOeECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT6OdXy
WKD2L+nrJcT20CAgoIUC/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTA4NjJiY2EtY2Y0Yi00NzgwLTgyODgtYmQ2NThjNmE1Zjc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GvA
QDANBgkqhkiG9w0BAQsFAAOCAQEAn3ijk5Hx/841/aqhYJ9rEiGevdlhx0IQSoCZ
QdlSIiHAsE78giCxP75JfgOuJS31UIVMw71YFzZAa4aGsu5m8br4hmsZcPqsshv5
4twSjFh8UL+3u5+P9TzL6KMATFxs76ULdrcVwBz2zuFtXJI/58Hc/aCh3GkMKtwe
qebcJJ6yh0JrwzbIi+I1hsMNHzxYMPTr+pQmTivRAdQCWlpwtXDANRt8M19Q+rQZ
E3whHy9rOjR30tHjQgOFfbNULU4ZmcPCqzdm+j4imi78RJy1Ws4QTSjEXkLmam7V
xB5r3TLyeF1MgVhmj0+Hfjn3ZmKqbV/o1VebGzSKYJ7/YUH9qg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:44:18 2026 by rpki-client