Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
File: 14c60b75-8947-47da-9c6d-7045cbbbea55.roa (raw, json)
Hash identifier: jme79jen2UMsAr/ST2Wfydovp/uI4W8NnNp0DlJ9D/w=
Subject key identifier: E1:13:7E:9C:DE:24:01:BE:49:88:4A:50:D2:1F:50:75:AB:BB:77:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F5C5D9B5E048C00A43BA1256D8A9E675163E5F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
Signing time: Tue 19 May 2026 04:50:38 +0000
ROA not before: Tue 19 May 2026 04:50:38 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5c:5d:9b:5e:04:8c:00:a4:3b:a1:25:6d:8a:9e:67:51:63:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:50:38 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=9400d2fbe2d96bf15218dce5bde8327836c31454cf89ceb92327d0ca7b19a586, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:10:76:fb:64:d4:3b:8f:e8:29:dd:c6:bc:
73:0d:0d:01:8c:17:b7:02:88:03:42:ac:16:61:99:
2b:32:53:ab:29:b3:71:c7:9b:f6:e2:ca:b6:28:57:
6a:9e:60:b3:c8:62:bb:3c:87:ee:8c:75:64:68:c5:
46:eb:8a:36:64:3e:8d:14:dc:f1:8e:32:4f:cd:ff:
ba:46:30:08:11:5d:20:58:7b:1c:19:55:f0:3c:43:
21:63:0e:8b:f0:e9:3d:d9:bd:02:73:da:94:74:3c:
5f:fd:e1:79:66:78:e4:9c:a9:62:55:7f:29:c1:d4:
02:6f:af:30:d6:e3:e6:6e:08:26:2c:4b:a7:3a:5e:
48:7e:b2:32:7f:60:70:3d:a2:6c:94:75:81:b8:59:
11:41:b0:cf:7b:13:21:8c:a5:97:76:89:22:2d:0a:
f6:9f:8a:54:4d:f8:b9:b0:e4:3b:02:60:6e:d1:c0:
a1:d4:91:72:56:d0:88:c3:82:f5:76:db:b3:66:26:
71:91:ef:34:80:b6:d4:d8:60:d9:9c:44:bf:80:38:
75:5b:c2:9e:a7:bd:2e:18:26:b1:5c:95:74:39:77:
70:81:cb:09:f2:68:a2:90:93:91:8b:a7:56:ed:66:
76:5d:89:ce:d5:6c:33:2b:52:8a:23:67:22:95:c2:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:7E:9C:DE:24:01:BE:49:88:4A:50:D2:1F:50:75:AB:BB:77:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:a6:61:62:01:67:91:05:36:38:71:61:73:4b:b7:4f:d8:a0:
00:53:24:7f:16:0c:07:aa:7b:d6:77:79:5a:46:ac:eb:90:ea:
34:92:96:8a:0f:d2:23:b0:84:d6:12:e6:7b:c9:2c:32:f9:22:
b9:c4:36:ea:63:31:37:60:13:3f:7c:bb:7a:6b:06:ed:a4:ad:
2b:a6:7a:e7:30:03:15:b0:6e:27:67:98:33:81:48:d5:40:f9:
c3:30:03:42:e8:37:9c:40:1d:ca:48:bb:93:7d:98:e9:49:ca:
9c:54:c2:fb:c1:28:95:de:04:b4:e9:9f:51:a0:b8:42:cb:a8:
83:1d:0f:4c:8e:05:6f:98:75:8d:8d:cb:2e:a8:04:28:44:b9:
2e:f9:10:bd:ea:ef:3d:d4:50:54:bc:9d:e1:d3:1f:f7:07:48:
6a:c6:4a:11:b7:19:a0:a5:6a:b8:ba:fd:c0:d1:c6:b0:3e:d0:
9e:7a:af:f9:3c:bc:4b:d4:f9:e9:12:41:b0:22:19:79:36:87:
47:20:f9:18:e3:3f:0a:bb:22:82:2c:c3:dd:d6:9f:1a:69:fa:
d7:5e:9c:ca:c0:2a:95:ad:4c:54:18:30:ca:10:84:7f:e7:f2:
84:fc:93:14:46:c4:d7:c2:d9:ca:d6:44:cc:ee:b2:f0:c3:57:
1a:31:47:4c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUL1xdm14EjACkO6ElbYqeZ1Fj5fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDUwMzhaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDk0MDBkMmZiZTJkOTZiZjE1MjE4ZGNlNWJkZTgzMjc4MzZjMzE0NTRjZjg5
Y2ViOTIzMjdkMGNhN2IxOWE1ODYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzaEHb7ZNQ7j+gp3ca8cw0NAYwXtwKIA0KsFmGZKzJTqymzcceb9uLKtihX
ap5gs8hiuzyH7ox1ZGjFRuuKNmQ+jRTc8Y4yT83/ukYwCBFdIFh7HBlV8DxDIWMO
i/DpPdm9AnPalHQ8X/3heWZ45JypYlV/KcHUAm+vMNbj5m4IJixLpzpeSH6yMn9g
cD2ibJR1gbhZEUGwz3sTIYyll3aJIi0K9p+KVE34ubDkOwJgbtHAodSRclbQiMOC
9Xbbs2YmcZHvNIC21Nhg2ZxEv4A4dVvCnqe9LhgmsVyVdDl3cIHLCfJoopCTkYun
Vu1mdl2JztVsMytSiiNnIpXCMlUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBThE36c
3iQBvkmISlDSH1B1q7t3LDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTRjNjBiNzUtODk0Ny00N2RhLTljNmQtNzA0NWNiYmJlYTU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G8Q
MA0GCSqGSIb3DQEBCwUAA4IBAQC7pmFiAWeRBTY4cWFzS7dP2KAAUyR/FgwHqnvW
d3laRqzrkOo0kpaKD9IjsITWEuZ7ySwy+SK5xDbqYzE3YBM/fLt6awbtpK0rpnrn
MAMVsG4nZ5gzgUjVQPnDMANC6DecQB3KSLuTfZjpScqcVML7wSiV3gS06Z9RoLhC
y6iDHQ9MjgVvmHWNjcsuqAQoRLku+RC96u891FBUvJ3h0x/3B0hqxkoRtxmgpWq4
uv3A0cawPtCeeq/5PLxL1PnpEkGwIhl5NodHIPkY4z8KuyKCLMPd1p8aafrXXpzK
wCqVrUxUGDDKEIR/5/KE/JMURsTXwtnK1kTM7rLww1caMUdM
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:42:56 2026 by rpki-client