Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
File: 19a2984e-942a-4280-ac0b-904c9860af2f.roa (raw, json)
Hash identifier: hvFC7QBn3xX2uINvJnklGh5Y0OZe1xIVBM8v4hJUpDU=
Subject key identifier: 95:B6:63:AC:77:29:55:54:63:5D:9F:05:4A:29:3E:AF:0A:B7:09:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15842419CADF136EE2534C902CFC8010E593F4AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
Signing time: Tue 19 May 2026 05:00:10 +0000
ROA not before: Tue 19 May 2026 05:00:10 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:24:19:ca:df:13:6e:e2:53:4c:90:2c:fc:80:10:e5:93:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:00:10 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=a730e1809615dc239f4dc4415a114c9dea569ad2896f23dd1c7073d22658786b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:a5:13:c6:b9:ee:cd:d9:92:08:99:54:01:
59:83:72:c2:41:b4:ad:8a:60:be:ef:55:a4:84:0a:
62:75:19:c2:9d:46:6c:1f:6c:86:a9:13:42:4f:25:
13:1f:de:e7:7c:bf:f9:00:a0:42:c1:12:08:02:c0:
56:20:40:49:44:b9:08:e8:9c:19:37:dc:72:b6:93:
6e:5c:13:b4:c1:b4:85:e0:3a:7c:c6:7a:8c:fd:2f:
31:c2:a4:41:fe:c1:53:df:36:0c:df:12:9a:5f:1d:
8c:24:3a:d2:60:0f:71:fd:25:de:c3:6b:4a:e5:a7:
5c:06:67:53:58:2b:91:1e:ab:4d:13:1d:31:17:66:
d6:21:24:33:15:02:7f:01:e1:ed:ea:72:33:44:f1:
57:fa:fd:c1:1d:2b:67:a2:b2:e2:14:14:67:27:0d:
eb:22:44:78:cf:d4:31:fb:cb:bf:6e:f8:80:66:3a:
14:bf:a8:9b:71:03:4e:b0:62:df:66:3f:9e:fe:b1:
19:d8:7b:0c:42:9e:1b:bc:a5:d9:7b:7a:07:88:c2:
63:af:2b:06:82:e8:1c:a8:8f:b8:d5:da:e6:03:5f:
ae:05:1f:58:5b:79:4c:29:e8:38:4f:e1:ea:7a:0f:
19:d8:0a:3c:4c:52:25:e4:82:5a:1a:f6:b3:33:ec:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:63:AC:77:29:55:54:63:5D:9F:05:4A:29:3E:AF:0A:B7:09:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8020::/48
Signature Algorithm: sha256WithRSAEncryption
a9:0e:66:48:9f:86:28:9e:cf:f3:25:48:c6:ea:26:a6:85:90:
40:fc:29:cf:ce:c3:c6:a8:b4:b6:da:ec:08:12:c8:08:27:88:
4e:5a:08:8e:75:d7:7f:29:72:1c:6c:b2:cb:44:e9:b8:a7:4c:
34:bb:90:cc:5e:f6:6d:a9:90:11:25:2c:ea:df:87:08:50:b4:
9d:3a:ff:06:4e:86:e9:79:0a:da:26:8a:e7:d0:1b:50:09:ec:
a3:52:b4:7e:a6:9f:7a:1a:46:6d:7b:80:c1:62:03:3b:0a:14:
70:2e:30:e1:f8:4b:d5:e7:d9:43:83:4e:1d:ef:7c:35:74:14:
7b:b9:71:16:eb:c8:f9:4c:87:96:3a:14:68:e0:b6:11:5f:df:
b5:72:06:7d:9f:bd:8e:0c:5d:50:48:7c:5b:2a:68:ba:43:27:
d0:4f:b9:8e:f0:df:fb:f9:e9:e6:99:8b:7a:87:04:02:61:a3:
35:15:0d:5d:5f:12:c0:3f:f9:c0:27:a7:81:93:a5:fe:05:9d:
6d:a4:e0:01:ce:80:a9:7e:fd:05:07:4c:ac:73:6f:88:8a:d2:
28:3d:18:5b:06:12:ee:03:2f:56:9f:01:0f:d5:c3:8f:19:e6:
ce:ca:37:d2:df:3f:be:38:ac:67:50:64:54:16:52:d1:84:35:
92:76:da:2c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFYQkGcrfE27iU0yQLPyAEOWT9K0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTAwMTBaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGE3MzBlMTgwOTYxNWRjMjM5ZjRkYzQ0MTVhMTE0YzlkZWE1NjlhZDI4OTZm
MjNkZDFjNzA3M2QyMjY1ODc4NmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMslpRPGue7N2ZIImVQBWYNywkG0rYpgvu9VpIQKYnUZwp1GbB9shqkTQk8l
Ex/e53y/+QCgQsESCALAViBASUS5COicGTfccraTblwTtMG0heA6fMZ6jP0vMcKk
Qf7BU982DN8Sml8djCQ60mAPcf0l3sNrSuWnXAZnU1grkR6rTRMdMRdm1iEkMxUC
fwHh7epyM0TxV/r9wR0rZ6Ky4hQUZycN6yJEeM/UMfvLv274gGY6FL+om3EDTrBi
32Y/nv6xGdh7DEKeG7yl2Xt6B4jCY68rBoLoHKiPuNXa5gNfrgUfWFt5TCnoOE/h
6noPGdgKPExSJeSCWhr2szPshp8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSVtmOs
dylVVGNdnwVKKT6vCrcJnzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTlhMjk4NGUtOTQyYS00MjgwLWFjMGItOTA0Yzk4NjBhZjJmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA
IDANBgkqhkiG9w0BAQsFAAOCAQEAqQ5mSJ+GKJ7P8yVIxuompoWQQPwpz87Dxqi0
ttrsCBLICCeITloIjnXXfylyHGyyy0TpuKdMNLuQzF72bamQESUs6t+HCFC0nTr/
Bk6G6XkK2iaK59AbUAnso1K0fqafehpGbXuAwWIDOwoUcC4w4fhL1efZQ4NOHe98
NXQUe7lxFuvI+UyHljoUaOC2EV/ftXIGfZ+9jgxdUEh8WypoukMn0E+5jvDf+/np
5pmLeocEAmGjNRUNXV8SwD/5wCengZOl/gWdbaTgAc6AqX79BQdMrHNviIrSKD0Y
WwYS7gMvVp8BD9XDjxnmzso30t8/vjisZ1BkVBZS0YQ1knbaLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:53 2026 by rpki-client