Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
File: 1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa (raw, json)
Hash identifier: XQLRPO+h8xROlk37ft842gWQ0VUNEUJmRNMuYDE8Bbo=
Subject key identifier: F4:1D:5B:9E:D9:27:E1:2D:B2:A9:73:99:21:39:32:32:31:E2:D1:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C7940FEA617DD1B3B0C50C45D989D6574FED9DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
Signing time: Tue 19 May 2026 04:50:24 +0000
ROA not before: Tue 19 May 2026 04:50:24 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:79:40:fe:a6:17:dd:1b:3b:0c:50:c4:5d:98:9d:65:74:fe:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:50:24 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=770a9b87cd655a16044c8f22815819442173eae33f0386aa466b1aa6128ec83b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:f2:33:92:76:b6:70:0c:49:c0:07:df:17:
e5:f2:24:f1:45:2b:c9:11:eb:94:0f:91:c1:2a:ec:
8d:08:ac:47:89:53:47:93:41:9b:f1:eb:73:ad:a4:
f9:fb:6c:fb:12:e1:9c:7d:9b:ad:d1:1c:6c:2b:d5:
b4:e8:5d:08:06:68:36:25:d0:6c:b8:9b:9f:01:b6:
a5:51:18:54:c9:d1:10:af:44:28:7d:97:7d:b6:2b:
73:01:27:e4:4f:75:d0:10:2c:16:1e:75:88:36:ff:
2e:8d:0b:6f:67:37:d6:a2:e1:c7:24:a5:73:96:72:
3b:da:57:24:97:a8:40:7c:71:93:88:28:3b:50:e6:
03:e5:ba:dc:b7:61:60:9d:39:e1:6b:3c:e1:ab:25:
4e:7c:7b:2d:23:4b:d0:d2:ee:d5:0c:ed:aa:32:e9:
13:45:8b:ea:13:d0:65:48:f5:6e:c7:61:fd:e2:18:
53:62:25:b5:63:9d:2a:d0:5b:0c:60:1e:08:30:8e:
f0:94:26:8b:6d:fc:78:91:b9:78:99:9c:f7:a6:32:
a7:27:e0:d8:16:fc:f6:9e:bc:44:99:d3:53:04:63:
d8:b6:36:91:2e:2e:56:4a:f8:48:ac:48:5a:f8:91:
77:a6:d4:6f:84:a8:8e:b9:c4:0b:b3:ef:d4:c0:74:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:5B:9E:D9:27:E1:2D:B2:A9:73:99:21:39:32:32:31:E2:D1:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e000::/40
Signature Algorithm: sha256WithRSAEncryption
aa:ad:bf:3e:13:ab:6d:1e:cc:ea:05:36:de:21:20:01:2c:a8:
35:76:a5:6d:04:af:11:ab:1d:16:b5:4c:6b:3d:17:d7:54:1c:
92:98:c4:41:d5:ea:c8:b0:0b:0e:89:4e:64:9d:44:e4:7e:2c:
e1:de:af:69:40:a4:f8:27:ff:f8:90:e0:36:38:00:68:08:bb:
a6:0a:85:db:7e:a1:c4:ba:df:ea:64:f9:59:79:6a:1d:5a:68:
42:6a:1b:40:b4:68:df:18:3b:2e:f0:54:c5:38:66:61:99:15:
a8:00:70:95:fc:14:a6:a7:91:2a:ab:1f:47:b8:47:4e:99:52:
7c:1d:c2:cc:2d:d3:eb:07:a2:1d:3e:51:95:51:f2:04:67:6f:
47:4c:8c:7b:2c:c6:ca:5e:6a:1c:03:91:85:4f:ee:e6:fe:9a:
46:5a:6e:ce:c4:58:b9:f7:5b:26:91:a1:84:64:2f:14:48:81:
4a:35:f0:d6:23:f0:e6:d9:aa:4b:f8:a1:b0:cc:c9:6c:c0:01:
fd:6e:f0:c3:ab:a2:84:4a:06:1b:80:4b:87:4a:e3:58:6b:c8:
fe:75:61:78:dc:38:56:75:47:2c:f8:b7:01:2c:7f:df:18:b4:
2c:db:ae:f8:a1:98:32:8c:57:e0:23:1b:87:00:16:db:12:5d:
6d:2e:39:49
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXHlA/qYX3Rs7DFDEXZidZXT+2dwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDUwMjRaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDc3MGE5Yjg3Y2Q2NTVhMTYwNDRjOGYyMjgxNTgxOTQ0MjE3M2VhZTMzZjAz
ODZhYTQ2NmIxYWE2MTI4ZWM4M2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjI8jOSdrZwDEnAB98X5fIk8UUryRHrlA+RwSrsjQisR4lTR5NBm/Hrc62k
+fts+xLhnH2brdEcbCvVtOhdCAZoNiXQbLibnwG2pVEYVMnREK9EKH2XfbYrcwEn
5E910BAsFh51iDb/Lo0Lb2c31qLhxySlc5ZyO9pXJJeoQHxxk4goO1DmA+W63Ldh
YJ054Ws84aslTnx7LSNL0NLu1QztqjLpE0WL6hPQZUj1bsdh/eIYU2IltWOdKtBb
DGAeCDCO8JQmi238eJG5eJmc96Yypyfg2Bb89p68RJnTUwRj2LY2kS4uVkr4SKxI
WviRd6bUb4SojrnEC7Pv1MB0qi8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT0HVue
2SfhLbKpc5khOTIyMeLRujAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWE4NzU3YTMtNWIwZS00NDczLTlhM2ItODc2Y2MxMzRlMmJkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ADg
MA0GCSqGSIb3DQEBCwUAA4IBAQCqrb8+E6ttHszqBTbeISABLKg1dqVtBK8Rqx0W
tUxrPRfXVBySmMRB1erIsAsOiU5knUTkfizh3q9pQKT4J//4kOA2OABoCLumCoXb
fqHEut/qZPlZeWodWmhCahtAtGjfGDsu8FTFOGZhmRWoAHCV/BSmp5Eqqx9HuEdO
mVJ8HcLMLdPrB6IdPlGVUfIEZ29HTIx7LMbKXmocA5GFT+7m/ppGWm7OxFi591sm
kaGEZC8USIFKNfDWI/Dm2apL+KGwzMlswAH9bvDDq6KESgYbgEuHSuNYa8j+dWF4
3DhWdUcs+LcBLH/fGLQs2674oZgyjFfgIxuHABbbEl1tLjlJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:46 2026 by rpki-client