Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2245f74f-570c-4150-860f-512ca546f4cf.roa
File: 2245f74f-570c-4150-860f-512ca546f4cf.roa (raw, json)
Hash identifier: YvcDguqeTjoLUOeVynRhgc7UzpSeLUDGY0CxFQ+DnIY=
Subject key identifier: F5:78:49:62:0F:14:CA:08:B7:9E:6B:56:09:F2:04:96:15:60:15:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BF45E85FAA1C4F4FE23728B7531792DEBDFFCE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2245f74f-570c-4150-860f-512ca546f4cf.roa
Signing time: Sun 31 May 2026 01:00:52 +0000
ROA not before: Sun 31 May 2026 01:00:52 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f4:5e:85:fa:a1:c4:f4:fe:23:72:8b:75:31:79:2d:eb:df:fc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:00:52 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=e1663adc9b07bc40c8bf8173a3db3fa6485756f271bea3fc0ec2c5c6556bc2de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:32:16:fc:d3:e8:b3:54:46:0d:13:d5:7a:
74:09:67:12:ba:09:7d:b5:07:65:60:c9:3c:30:f8:
8c:9f:ff:65:d0:04:b3:1f:b9:72:2f:80:3d:9c:51:
a0:4f:bb:f6:2b:b5:ae:e7:44:9d:3a:ba:e0:71:42:
10:2c:01:d8:ea:be:f3:83:83:8d:7c:d0:ac:6b:ec:
22:de:d1:be:2f:12:ed:27:73:16:4b:d8:64:98:45:
4c:01:e4:b7:8d:d6:c2:ea:d3:e5:f8:b8:83:43:3c:
3f:98:97:ca:ba:cf:ee:bf:f1:29:bb:9d:35:fd:15:
b6:74:4d:84:65:67:46:f5:a1:7d:73:36:61:fd:2c:
ac:19:93:8c:e8:53:88:3f:ec:9c:bb:ef:d1:c9:c3:
35:99:32:b0:dc:d4:e0:2c:80:d1:ff:ba:4b:f2:f2:
34:76:7d:c8:1c:10:ff:ad:bb:85:70:1b:10:6d:4b:
87:ab:8a:dc:8c:0b:c5:aa:c1:7a:e7:a8:52:14:2a:
d7:2f:d0:a6:8a:36:11:2c:9d:28:c3:cb:d1:35:ca:
ad:90:32:97:2f:73:46:3c:d2:eb:7d:77:4f:1e:35:
af:34:9f:42:31:16:cd:f7:65:75:e9:71:66:b0:95:
79:95:8b:78:45:d5:83:bd:d6:a9:14:9c:54:3e:34:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:78:49:62:0F:14:CA:08:B7:9E:6B:56:09:F2:04:96:15:60:15:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2245f74f-570c-4150-860f-512ca546f4cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:a080::/48
Signature Algorithm: sha256WithRSAEncryption
1f:79:4a:91:3d:60:98:82:5f:49:5e:89:c7:c6:23:8b:eb:f2:
ef:2b:93:89:35:16:2d:63:72:bc:5a:e6:17:93:75:ea:7c:8d:
95:07:c3:cf:a2:d4:e2:ff:b9:21:71:04:c1:3d:aa:f7:4e:81:
da:cb:7d:5a:ea:5a:a4:d2:74:c4:3c:e7:a3:4e:b0:67:04:6e:
77:ee:dd:b1:90:39:0f:b0:28:38:e5:5b:b9:7c:69:c0:8b:7a:
d1:d7:96:e4:13:f2:1b:5a:35:ff:32:50:b9:a8:46:67:2b:62:
dd:e0:0b:c2:c2:88:ee:15:15:32:e9:65:7e:46:f0:2c:24:8f:
1d:c1:1d:8e:24:1b:31:9d:d0:76:5f:1f:00:7e:55:45:e3:20:
05:c3:b7:d7:21:46:fb:86:24:cc:9d:46:bc:3a:8e:64:b4:e7:
55:c4:42:5b:95:82:6f:96:0b:a1:ba:a8:44:15:76:02:35:c6:
10:ca:3c:10:41:c6:a4:33:3d:a9:54:f6:14:ab:ac:18:30:8a:
e4:ea:0d:15:92:69:65:06:03:5b:1a:b9:ac:98:b6:29:9f:7b:
1a:2b:36:c1:35:59:a1:6f:d7:a7:69:0b:bd:74:ae:57:6d:4d:
99:4f:40:25:57:fe:9c:65:14:85:e8:db:4d:67:f6:4d:ff:29:
fd:84:74:9f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUe/RehfqhxPT+I3KLdTF5Levf/OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MzEwMTAwNTJaFw0yNjA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGUxNjYzYWRjOWIwN2JjNDBjOGJmODE3M2EzZGIzZmE2NDg1NzU2ZjI3MWJl
YTNmYzBlYzJjNWM2NTU2YmMyZGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANN3Mhb80+izVEYNE9V6dAlnEroJfbUHZWDJPDD4jJ//ZdAEsx+5ci+APZxR
oE+79iu1rudEnTq64HFCECwB2Oq+84ODjXzQrGvsIt7Rvi8S7SdzFkvYZJhFTAHk
t43WwurT5fi4g0M8P5iXyrrP7r/xKbudNf0VtnRNhGVnRvWhfXM2Yf0srBmTjOhT
iD/snLvv0cnDNZkysNzU4CyA0f+6S/LyNHZ9yBwQ/627hXAbEG1Lh6uK3IwLxarB
eueoUhQq1y/Qpoo2ESydKMPL0TXKrZAyly9zRjzS6313Tx41rzSfQjEWzfdldelx
ZrCVeZWLeEXVg73WqRScVD40Vz0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT1eEli
DxTKCLeea1YJ8gSWFWAVuDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjI0NWY3NGYtNTcwYy00MTUwLTg2MGYtNTEyY2E1NDZmNGNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fqg
gDANBgkqhkiG9w0BAQsFAAOCAQEAH3lKkT1gmIJfSV6Jx8Yji+vy7yuTiTUWLWNy
vFrmF5N16nyNlQfDz6LU4v+5IXEEwT2q906B2st9WupapNJ0xDzno06wZwRud+7d
sZA5D7AoOOVbuXxpwIt60deW5BPyG1o1/zJQuahGZyti3eALwsKI7hUVMullfkbw
LCSPHcEdjiQbMZ3Qdl8fAH5VReMgBcO31yFG+4YkzJ1GvDqOZLTnVcRCW5WCb5YL
obqoRBV2AjXGEMo8EEHGpDM9qVT2FKusGDCK5OoNFZJpZQYDWxq5rJi2KZ97Gis2
wTVZoW/Xp2kLvXSuV21NmU9AJVf+nGUUhejbTWf2Tf8p/YR0nw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:53 2026 by rpki-client