Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1be717d0-fb8a-4663-a872-d5e7af31a480.roa
File: 1be717d0-fb8a-4663-a872-d5e7af31a480.roa (raw, json)
Hash identifier: 9LnC0RBEkAMzWI6RmD62HkCuD2LUyFEpyNOtyenOq3w=
Subject key identifier: FE:6E:79:AC:11:70:EC:C7:E8:1A:FE:8D:27:77:13:BB:3E:A0:08:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48403F7200E056BC0BAD4B467C811571AC3D9270
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1be717d0-fb8a-4663-a872-d5e7af31a480.roa
Signing time: Sun 31 May 2026 01:00:04 +0000
ROA not before: Sun 31 May 2026 01:00:04 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:40:3f:72:00:e0:56:bc:0b:ad:4b:46:7c:81:15:71:ac:3d:92:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:04 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=cab5f05cfb95f6ff34f8f4b60aab9900dbb0e0d910fcc52483bbd3c43704974d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:9c:aa:c8:03:7f:7d:f3:b3:4c:3e:40:2a:
32:fb:77:13:f1:57:4a:ec:6f:37:67:f3:51:4d:4a:
a8:20:40:eb:57:7c:0b:ec:b0:d2:eb:43:91:d6:18:
83:72:57:58:a6:3e:c8:79:24:48:d7:af:76:dc:3e:
a2:60:39:56:8c:59:fc:0d:c4:a7:ca:7d:0a:d4:ac:
f7:3a:98:98:21:33:e1:d8:44:26:7c:19:b2:58:52:
f5:88:1a:22:d4:f2:25:44:d2:18:fe:0d:d8:b9:e2:
0c:85:cb:7c:de:e5:1c:e4:57:56:5b:02:44:9e:90:
2b:67:27:a5:a2:da:c5:f7:f7:1f:f3:b1:54:a3:be:
c0:ec:0a:c4:5a:44:26:53:c8:78:93:65:9a:97:b9:
22:00:06:bf:ba:59:f1:75:39:a0:ec:e5:b5:1a:cf:
14:4f:db:8a:50:4c:03:09:71:91:5c:30:f4:1b:1d:
48:9a:ae:bf:b0:b5:de:22:20:4d:9b:5d:ba:84:7c:
2b:2e:74:0e:da:ca:a0:b5:04:63:06:81:97:8c:f9:
a7:b5:88:1c:6f:78:83:6d:47:f8:f2:30:c9:51:0b:
9d:36:a6:98:26:18:b5:c6:83:ac:7d:0e:94:b1:83:
cd:c9:fb:ef:26:db:05:b8:3c:cc:f0:56:c9:05:4b:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:79:AC:11:70:EC:C7:E8:1A:FE:8D:27:77:13:BB:3E:A0:08:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1be717d0-fb8a-4663-a872-d5e7af31a480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:62:52:73:59:26:d4:a9:bc:b1:ae:45:35:b0:aa:db:f9:ae:
63:56:f0:31:a7:33:fe:6b:08:a6:70:d8:49:91:da:99:5b:a3:
ff:b5:f0:89:d4:2b:4f:98:06:f3:91:94:19:c4:bf:69:17:cc:
fa:27:9f:f6:cf:0a:e2:fd:6d:6c:dc:d8:2c:38:c5:ad:e5:af:
71:a5:0a:02:97:0b:a7:3d:26:bd:60:74:1d:4f:ac:a0:54:9d:
43:d4:15:8c:91:b1:ae:56:10:b2:1e:6f:ac:51:d8:60:d2:8e:
36:21:51:52:5f:ad:29:53:af:c0:c2:f4:c7:07:95:8d:8a:b0:
cb:cc:e0:6d:d2:7a:91:a7:1a:0d:53:94:e4:be:5e:68:18:5f:
00:a0:1c:ef:1e:1f:03:b3:ed:91:c1:dc:46:3f:55:1e:92:70:
25:91:b3:3f:fa:51:cb:b3:e7:ad:c5:e0:c0:f0:7f:32:30:27:
82:96:25:ed:44:94:9e:57:34:4a:93:08:d2:23:de:df:16:f6:
68:c1:b4:54:be:66:b4:5f:4a:8b:36:5b:83:7a:74:69:3f:8b:
60:44:bd:f9:82:61:eb:16:05:2b:b8:ae:23:06:78:99:32:7d:
15:f1:31:6b:1e:29:24:b6:07:7e:37:d0:d1:48:fe:e2:22:b5:
b0:39:33:21
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSEA/cgDgVrwLrUtGfIEVcaw9knAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MzEwMTAwMDRaFw0yNjA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGNhYjVmMDVjZmI5NWY2ZmYzNGY4ZjRiNjBhYWI5OTAwZGJiMGUwZDkxMGZj
YzUyNDgzYmJkM2M0MzcwNDk3NGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYynKrIA39987NMPkAqMvt3E/FXSuxvN2fzUU1KqCBA61d8C+yw0utDkdYY
g3JXWKY+yHkkSNevdtw+omA5VoxZ/A3Ep8p9CtSs9zqYmCEz4dhEJnwZslhS9Yga
ItTyJUTSGP4N2LniDIXLfN7lHORXVlsCRJ6QK2cnpaLaxff3H/OxVKO+wOwKxFpE
JlPIeJNlmpe5IgAGv7pZ8XU5oOzltRrPFE/bilBMAwlxkVww9BsdSJquv7C13iIg
TZtduoR8Ky50DtrKoLUEYwaBl4z5p7WIHG94g21H+PIwyVELnTammCYYtcaDrH0O
lLGDzcn77ybbBbg8zPBWyQVLHI0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT+bnms
EXDsx+ga/o0ndxO7PqAICTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWJlNzE3ZDAtZmI4YS00NjYzLWE4NzItZDVlN2FmMzFhNDgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H2A
MA0GCSqGSIb3DQEBCwUAA4IBAQB6YlJzWSbUqbyxrkU1sKrb+a5jVvAxpzP+awim
cNhJkdqZW6P/tfCJ1CtPmAbzkZQZxL9pF8z6J5/2zwri/W1s3NgsOMWt5a9xpQoC
lwunPSa9YHQdT6ygVJ1D1BWMkbGuVhCyHm+sUdhg0o42IVFSX60pU6/AwvTHB5WN
irDLzOBt0nqRpxoNU5Tkvl5oGF8AoBzvHh8Ds+2RwdxGP1UeknAlkbM/+lHLs+et
xeDA8H8yMCeCliXtRJSeVzRKkwjSI97fFvZowbRUvma0X0qLNluDenRpP4tgRL35
gmHrFgUruK4jBniZMn0V8TFrHikktgd+N9DRSP7iIrWwOTMh
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:01:24 2026 by rpki-client