Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173f4b09-86fe-4ece-a79a-2e361058daf8.roa
File: 173f4b09-86fe-4ece-a79a-2e361058daf8.roa (raw, json)
Hash identifier: ZqaRK2vp//U1kNGXxLtr0FGvCNwwVRfW3htVj29zQKE=
Subject key identifier: 0F:60:38:66:9E:B9:2B:0F:CB:A2:1C:7A:90:51:99:56:1E:31:58:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3141D15DC63D373F1C2DAC4F6FDA36F9F67E65CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173f4b09-86fe-4ece-a79a-2e361058daf8.roa
Signing time: Fri 22 May 2026 16:16:21 +0000
ROA not before: Fri 22 May 2026 16:16:21 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:41:d1:5d:c6:3d:37:3f:1c:2d:ac:4f:6f:da:36:f9:f6:7e:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:16:21 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=2e93b527394fa202bc271a27f17e66131ab1537b53234f360571b5b8dc519021, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:02:f8:a5:8a:b0:89:25:6a:d8:f7:2a:86:
53:00:b0:92:1f:bc:a6:fb:62:2a:e7:e3:2e:3e:3f:
a3:31:6c:1c:a1:d9:18:71:38:e0:4e:f8:d3:8d:a6:
bd:63:c5:36:7a:d6:17:3f:ba:82:2d:38:d5:06:f1:
d0:15:7b:b4:06:82:13:39:37:8c:60:41:e7:ec:fd:
d5:03:2e:ba:15:62:3b:8b:76:a7:27:36:6b:20:73:
63:44:13:e3:dc:97:a1:ab:a4:62:58:36:92:93:bc:
7f:85:31:00:af:e6:f2:f2:8c:40:0a:a9:de:0c:8b:
ba:65:b4:61:b4:7b:64:c0:7c:ac:fc:e8:71:15:91:
53:93:3f:0e:fc:8e:5a:2b:55:8d:c6:45:9d:c8:4c:
33:4a:a6:c8:ac:6e:29:61:89:4c:47:95:bb:10:a6:
9c:5a:8c:5d:30:48:2a:75:ae:72:71:b0:3d:88:bd:
44:ee:90:0d:40:05:cf:a9:ff:ab:f0:41:d8:3f:6a:
89:32:4c:d0:05:85:6f:58:9a:b8:29:0e:d1:3d:81:
3e:eb:b5:d7:80:82:5a:a9:74:30:80:1e:c6:4a:d4:
0a:37:6f:0d:db:5f:84:2a:cb:cc:3d:90:3d:4f:ae:
f6:52:e7:02:64:0a:61:20:ad:c2:cf:0e:cc:8e:44:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:38:66:9E:B9:2B:0F:CB:A2:1C:7A:90:51:99:56:1E:31:58:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173f4b09-86fe-4ece-a79a-2e361058daf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:ca:1c:80:d3:81:85:c1:6d:19:25:82:d1:71:8d:60:3e:aa:
11:3a:67:b0:a3:d5:00:68:2b:6d:57:0a:e2:1c:4a:1a:2e:96:
03:6a:97:f9:32:12:d2:42:cc:78:9e:a6:40:51:37:22:4b:02:
92:d9:9f:93:8e:39:fa:c4:1e:9b:33:20:c1:b8:43:a6:db:01:
b2:54:03:b7:07:f0:78:6c:a9:ef:d4:38:9c:94:59:b9:a8:14:
eb:c9:a4:58:ae:6a:17:a2:81:e9:3c:61:9a:5b:d8:4a:1d:30:
55:86:9f:e7:19:0e:ac:7a:43:15:2b:af:62:54:d1:be:a5:a4:
a1:3e:91:2b:16:72:83:08:32:04:64:e8:4b:fd:29:70:dc:02:
fb:d2:ea:a8:85:aa:45:cf:55:69:80:60:e6:66:ae:9a:30:5d:
3b:cd:e4:ac:8d:d2:a3:b8:43:c1:84:0c:b3:78:80:20:5d:8c:
fd:c9:4e:97:1c:e0:3c:d2:24:03:b1:d7:ce:73:66:96:32:c9:
01:9f:a7:19:d3:7f:a1:e3:b9:20:00:1a:31:db:e4:43:4e:59:
de:03:2b:a4:65:8a:10:a3:cf:07:e0:79:f4:10:35:86:58:a9:
6d:2b:53:b9:0c:55:99:51:c7:57:13:0f:e9:48:f7:af:08:5d:
07:a5:90:96
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMUHRXcY9Nz8cLaxPb9o2+fZ+Zc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MjIxNjE2MjFaFw0yNjA4MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDJlOTNiNTI3Mzk0ZmEyMDJiYzI3MWEyN2YxN2U2NjEzMWFiMTUzN2I1MzIz
NGYzNjA1NzFiNWI4ZGM1MTkwMjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJfWAvilirCJJWrY9yqGUwCwkh+8pvtiKufjLj4/ozFsHKHZGHE44E74042m
vWPFNnrWFz+6gi041Qbx0BV7tAaCEzk3jGBB5+z91QMuuhViO4t2pyc2ayBzY0QT
49yXoaukYlg2kpO8f4UxAK/m8vKMQAqp3gyLumW0YbR7ZMB8rPzocRWRU5M/DvyO
WitVjcZFnchMM0qmyKxuKWGJTEeVuxCmnFqMXTBIKnWucnGwPYi9RO6QDUAFz6n/
q/BB2D9qiTJM0AWFb1iauCkO0T2BPuu114CCWql0MIAexkrUCjdvDdtfhCrLzD2Q
PU+u9lLnAmQKYSCtws8OzI5EJ/sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQPYDhm
nrkrD8uiHHqQUZlWHjFYnDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTczZjRiMDktODZmZS00ZWNlLWE3OWEtMmUzNjEwNThkYWY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBNyhyA04GFwW0ZJYLRcY1gPqoROmewo9UAaCtt
VwriHEoaLpYDapf5MhLSQsx4nqZAUTciSwKS2Z+Tjjn6xB6bMyDBuEOm2wGyVAO3
B/B4bKnv1DiclFm5qBTryaRYrmoXooHpPGGaW9hKHTBVhp/nGQ6sekMVK69iVNG+
paShPpErFnKDCDIEZOhL/Slw3AL70uqohapFz1VpgGDmZq6aMF07zeSsjdKjuEPB
hAyzeIAgXYz9yU6XHOA80iQDsdfOc2aWMskBn6cZ03+h47kgABox2+RDTlneAyuk
ZYoQo88H4Hn0EDWGWKltK1O5DFWZUcdXEw/pSPevCF0HpZCW
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:26 2026 by rpki-client