Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/136beaae-aae3-4073-94ad-3aac8b2374fc.roa
File: 136beaae-aae3-4073-94ad-3aac8b2374fc.roa (raw, json)
Hash identifier: AqEqNgnFynI/CoA9qH/rTMNaP053ckevknirof/U/uY=
Subject key identifier: 49:29:7E:33:DB:E8:E5:1D:01:29:3F:40:1C:E5:F3:0A:3D:B1:8C:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D6BB0DD0AD61B40069B0E0A9FC52378B2C2D909
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/136beaae-aae3-4073-94ad-3aac8b2374fc.roa
Signing time: Sun 31 May 2026 01:11:05 +0000
ROA not before: Sun 31 May 2026 01:11:05 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6b:b0:dd:0a:d6:1b:40:06:9b:0e:0a:9f:c5:23:78:b2:c2:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:11:05 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=c274078a8d77ef3cce636bd6a97a70e571e5332f8e0e839ea33a73b2ff027aec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:3a:48:bf:9f:ea:84:49:02:2e:3f:00:c1:
09:63:ec:8f:3c:a2:05:df:fd:77:07:dd:77:59:c2:
79:7d:d9:79:b2:b1:26:ae:01:81:ba:75:7b:78:18:
0b:d4:02:e9:ed:8b:66:55:62:83:42:9e:bb:54:45:
76:c1:ad:ab:3e:f2:61:ed:ac:a3:ea:bf:de:57:b6:
20:9f:3f:2a:2a:81:d3:a0:c9:c1:ba:f8:54:b0:f3:
e1:15:11:c2:7e:b6:8c:2d:e5:27:aa:1e:9d:da:7c:
40:cb:23:69:c9:17:f5:21:f3:a4:c6:b1:ad:3e:a7:
6d:38:c4:87:74:83:62:ec:1b:6e:2f:34:11:0e:5b:
18:33:7f:58:d1:e2:e9:52:c6:00:af:67:a5:5c:59:
56:50:f7:4c:7c:cb:47:7a:a5:bc:b6:92:f9:17:6f:
c1:6b:b2:f6:8c:6e:46:ae:10:3d:6b:a3:5f:e9:ea:
3d:d6:3a:f1:87:97:f3:51:b4:4b:ed:d9:d4:09:8d:
4f:f7:c4:2c:13:12:8a:33:0b:db:b9:4d:f1:cd:e0:
ba:aa:dc:5a:08:51:ea:03:cc:95:53:ab:01:e7:28:
89:8d:73:d4:be:62:fa:f4:ae:2f:90:f8:0c:e7:48:
7f:13:5b:64:50:25:7a:bb:ea:a9:fa:ae:a5:50:b8:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:7E:33:DB:E8:E5:1D:01:29:3F:40:1C:E5:F3:0A:3D:B1:8C:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/136beaae-aae3-4073-94ad-3aac8b2374fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:c4:dd:ed:95:9c:63:f4:fa:ad:82:34:53:a2:de:26:59:49:
bf:2d:05:64:50:99:b5:6d:d7:82:d6:43:2d:77:3d:ff:86:2c:
d9:b9:a1:bd:b1:5f:f2:d9:2a:57:98:19:b1:9d:1e:42:22:f1:
41:4a:cc:d4:f7:a2:1b:fd:59:d0:ed:dc:12:13:8b:76:c2:ab:
73:46:ec:76:69:b8:24:1c:78:63:3f:6b:96:84:74:7f:4f:ef:
11:ee:e6:9a:cd:e3:15:78:c8:79:73:45:ab:f8:21:d9:92:94:
3c:ad:a7:e3:25:2d:fa:88:83:72:ff:69:73:86:67:3f:73:eb:
b1:47:20:62:8d:44:83:12:73:22:70:51:f6:90:d8:46:02:24:
91:f1:e1:e2:8b:43:aa:25:31:e4:1e:24:58:fb:02:ed:b9:25:
76:62:22:06:a0:44:28:bb:d5:db:7b:3d:e5:45:78:ac:31:0e:
4a:1f:44:85:68:e2:2d:88:3b:28:74:b0:b0:97:e0:ca:b0:c2:
2f:f8:c7:21:b4:da:8c:6a:02:a0:49:50:6d:d6:0c:ae:33:7f:
0f:87:7c:3e:b9:13:17:8f:de:8e:61:1e:64:df:2d:71:78:ba:
fe:15:f1:94:35:42:13:72:de:4e:99:e8:ea:be:c6:e1:ef:78:
2f:e4:41:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbWuw3QrWG0AGmw4Kn8UjeLLC2QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MzEwMTExMDVaFw0yNjA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGMyNzQwNzhhOGQ3N2VmM2NjZTYzNmJkNmE5N2E3MGU1NzFlNTMzMmY4ZTBl
ODM5ZWEzM2E3M2IyZmYwMjdhZWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANMoOki/n+qESQIuPwDBCWPsjzyiBd/9dwfdd1nCeX3ZebKxJq4Bgbp1e3gY
C9QC6e2LZlVig0Keu1RFdsGtqz7yYe2so+q/3le2IJ8/KiqB06DJwbr4VLDz4RUR
wn62jC3lJ6oendp8QMsjackX9SHzpMaxrT6nbTjEh3SDYuwbbi80EQ5bGDN/WNHi
6VLGAK9npVxZVlD3THzLR3qlvLaS+RdvwWuy9oxuRq4QPWujX+nqPdY68YeX81G0
S+3Z1AmNT/fELBMSijML27lN8c3guqrcWghR6gPMlVOrAecoiY1z1L5i+vSuL5D4
DOdIfxNbZFAlervqqfqupVC4Up8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRJKX4z
2+jlHQEpP0Ac5fMKPbGMbTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTM2YmVhYWUtYWFlMy00MDczLTk0YWQtM2FhYzhiMjM3NGZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H3g
MA0GCSqGSIb3DQEBCwUAA4IBAQDHxN3tlZxj9PqtgjRTot4mWUm/LQVkUJm1bdeC
1kMtdz3/hizZuaG9sV/y2SpXmBmxnR5CIvFBSszU96Ib/VnQ7dwSE4t2wqtzRux2
abgkHHhjP2uWhHR/T+8R7uaazeMVeMh5c0Wr+CHZkpQ8rafjJS36iINy/2lzhmc/
c+uxRyBijUSDEnMicFH2kNhGAiSR8eHii0OqJTHkHiRY+wLtuSV2YiIGoEQou9Xb
ez3lRXisMQ5KH0SFaOItiDsodLCwl+DKsMIv+MchtNqMagKgSVBt1gyuM38Ph3w+
uRMXj96OYR5k3y1xeLr+FfGUNUITct5Omejqvsbh73gv5EFB
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:41 2026 by rpki-client