Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
File: 376b2c73-f092-42ef-b7b3-ff5650209feb.roa (raw, json)
Hash identifier: X6Lop5CUN7uRE1+CeUGsq9i5RIuCr8yUgPtkPzILKEk=
Subject key identifier: 1B:2C:10:BC:BF:54:E5:85:F8:AF:BA:0D:22:E3:7D:30:51:97:58:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32433AACB35EEC64A5D2742ACEF42CD68A75BB62
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
Signing time: Sun 31 May 2026 01:10:28 +0000
ROA not before: Sun 31 May 2026 01:10:28 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:43:3a:ac:b3:5e:ec:64:a5:d2:74:2a:ce:f4:2c:d6:8a:75:bb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 01:10:28 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=52647e92d1985c4bcdc5d4fe47db59f4070a59a505cd20978f8d5598aefcb439, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:ee:11:06:eb:f1:0e:b3:89:54:e2:64:7b:
44:57:82:42:27:e1:b0:d5:a3:0a:a3:16:b9:97:fa:
ff:91:01:a1:9a:fd:c9:60:5a:36:4c:1a:50:89:18:
15:94:64:91:b2:c8:a7:48:2d:9b:60:b5:1f:da:53:
5e:2b:29:20:18:5c:43:0d:e3:cd:45:19:82:d2:61:
77:5b:3b:ce:14:c4:45:a7:d8:a3:71:8c:13:59:a0:
e5:83:2d:a6:f5:9c:dd:a2:73:e4:69:51:f6:26:c1:
49:7c:42:b1:12:56:4f:3a:9c:c7:5b:50:e5:3e:a3:
41:8c:af:f5:4d:b8:a2:d8:42:e2:b7:7f:cd:26:1f:
e0:2d:54:06:1b:86:06:13:78:68:39:f9:ba:ae:c9:
6f:a3:a1:84:f8:b7:01:41:ee:a1:1c:af:e5:5d:f4:
2f:4f:ad:86:92:79:88:20:fb:35:2c:a0:f0:19:88:
d0:1b:81:c2:c5:7a:01:a7:99:33:5f:d8:d6:5f:da:
ef:22:27:c0:38:de:c7:d9:2a:35:24:e5:7d:a8:35:
d3:3b:3a:42:cc:3f:cd:e2:09:7f:4b:69:2c:04:59:
95:1a:d3:55:a4:54:f6:22:dc:38:a8:3b:32:e7:68:
0d:fe:b3:34:46:fd:55:e1:2c:dd:1f:95:9a:1c:4e:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:10:BC:BF:54:E5:85:F8:AF:BA:0D:22:E3:7D:30:51:97:58:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4080::/48
Signature Algorithm: sha256WithRSAEncryption
a7:45:af:bb:20:70:99:eb:39:52:46:17:fa:86:38:9f:8e:b0:
05:55:4f:35:75:0d:e6:48:af:09:ec:14:62:c6:f2:98:ba:ca:
d6:f2:38:fe:cd:8f:8c:24:33:3f:e4:9a:32:a2:fd:a2:7a:a1:
9d:2b:35:cc:a5:8f:65:e2:91:e4:e2:c8:02:ae:70:7d:3a:28:
cf:57:f7:14:23:20:1b:2b:96:f9:3a:33:48:a4:a7:ca:fa:1a:
9c:7e:79:71:89:ee:be:51:b7:0c:cc:89:88:1a:66:05:cc:05:
df:66:94:64:50:34:1f:21:4f:d4:1f:8d:81:10:41:6f:8e:ee:
68:3b:d2:fc:74:1c:24:88:5d:34:c0:43:cc:1c:51:cc:00:1d:
c9:0c:27:84:6c:93:c3:14:79:04:bc:c0:79:c9:66:67:bb:9c:
3b:89:a9:db:39:54:2b:1f:06:83:57:62:3f:23:21:af:6a:16:
7a:d7:44:46:e1:1f:2f:b2:ae:c0:40:bc:0c:90:c9:e8:56:e3:
9d:09:73:d6:95:49:64:cc:e3:2e:5e:fd:95:f5:c9:41:88:fa:
9e:f5:13:b1:22:19:a0:87:21:6b:d7:2c:44:55:ee:3d:b2:c4:
b2:d9:e7:cf:03:f5:e2:43:e2:37:55:0f:f4:6c:38:f2:c8:dc:
2e:31:ac:27
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMkM6rLNe7GSl0nQqzvQs1op1u2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MzEwMTEwMjhaFw0yNjA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDUyNjQ3ZTkyZDE5ODVjNGJjZGM1ZDRmZTQ3ZGI1OWY0MDcwYTU5YTUwNWNk
MjA5NzhmOGQ1NTk4YWVmY2I0MzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfK7hEG6/EOs4lU4mR7RFeCQifhsNWjCqMWuZf6/5EBoZr9yWBaNkwaUIkY
FZRkkbLIp0gtm2C1H9pTXispIBhcQw3jzUUZgtJhd1s7zhTERafYo3GME1mg5YMt
pvWc3aJz5GlR9ibBSXxCsRJWTzqcx1tQ5T6jQYyv9U24othC4rd/zSYf4C1UBhuG
BhN4aDn5uq7Jb6OhhPi3AUHuoRyv5V30L0+thpJ5iCD7NSyg8BmI0BuBwsV6AaeZ
M1/Y1l/a7yInwDjex9kqNSTlfag10zs6Qsw/zeIJf0tpLARZlRrTVaRU9iLcOKg7
MudoDf6zNEb9VeEs3R+VmhxOyrcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQbLBC8
v1Tlhfivug0i430wUZdYETAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mzc2YjJjNzMtZjA5Mi00MmVmLWI3YjMtZmY1NjUwMjA5ZmViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H1A
gDANBgkqhkiG9w0BAQsFAAOCAQEAp0WvuyBwmes5UkYX+oY4n46wBVVPNXUN5kiv
CewUYsbymLrK1vI4/s2PjCQzP+SaMqL9onqhnSs1zKWPZeKR5OLIAq5wfTooz1f3
FCMgGyuW+TozSKSnyvoanH55cYnuvlG3DMyJiBpmBcwF32aUZFA0HyFP1B+NgRBB
b47uaDvS/HQcJIhdNMBDzBxRzAAdyQwnhGyTwxR5BLzAeclmZ7ucO4mp2zlUKx8G
g1diPyMhr2oWetdERuEfL7KuwEC8DJDJ6FbjnQlz1pVJZMzjLl79lfXJQYj6nvUT
sSIZoIcha9csRFXuPbLEstnnzwP14kPiN1UP9Gw48sjcLjGsJw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:46:15 2026 by rpki-client