Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File: 4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier: EfGnhBTdqYizZ/+vFrzEqaywwB23Lqx834pjMoR54mg=
Subject key identifier: 7E:BA:59:86:34:82:8B:5B:F8:72:9D:2E:94:FF:12:AA:70:21:C4:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FF1EEEB18D6149F007EB8155877FB83757624F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time: Tue 19 May 2026 04:50:37 +0000
ROA not before: Tue 19 May 2026 04:50:37 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f1:ee:eb:18:d6:14:9f:00:7e:b8:15:58:77:fb:83:75:76:24:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:50:37 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=bd508c46660ba950137e303c0e0b26479aa3bc862c9d2e2abde53292a385b6f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:48:09:38:96:c0:2c:16:ab:a9:e7:00:02:
18:d0:ca:54:c8:94:77:c2:35:d8:01:e2:d4:cc:a3:
b6:ed:3e:d7:c0:a3:ae:17:c3:23:cc:89:cd:1d:b9:
e7:76:1f:74:8a:dd:52:d6:cf:8f:96:18:0b:a9:4c:
21:0b:b4:9c:05:f1:6b:ea:5d:7f:6c:ca:0b:55:91:
55:fd:f3:21:9f:da:63:ca:1c:cc:19:89:d8:9f:77:
3b:e3:7a:8c:a2:52:b3:47:86:93:9d:75:4e:84:3a:
43:ce:c1:d3:35:8e:1f:f9:d7:24:df:e1:a8:94:ba:
1f:69:ea:1f:23:6b:56:e7:8d:ac:eb:10:05:82:14:
08:18:3f:24:37:38:79:8d:2c:3f:ac:90:48:9a:df:
07:a1:a4:23:5c:69:ab:c4:2d:8f:8e:a0:be:23:84:
5d:7b:39:a5:33:81:d6:12:42:c7:2f:a9:c9:ef:1b:
a1:e6:1a:8f:c5:b1:0a:de:6a:13:71:5c:d3:5e:7b:
66:c4:19:18:65:a5:4e:c2:f8:f4:3f:05:67:0a:a5:
58:7d:72:5b:39:ad:64:fb:40:76:b1:0c:7d:0a:a6:
93:a3:67:bd:7b:a4:0e:a6:86:6a:dd:7e:22:7f:60:
c7:90:4f:e3:a5:db:3c:44:75:26:c7:17:2e:6e:c5:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:59:86:34:82:8B:5B:F8:72:9D:2E:94:FF:12:AA:70:21:C4:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a080::/48
Signature Algorithm: sha256WithRSAEncryption
21:4e:fd:10:1a:97:90:3c:f8:cc:99:5b:93:48:b4:9a:f8:e5:
90:7d:81:ac:28:b3:6e:40:25:0a:22:8f:bf:a2:ae:e7:86:e5:
02:1f:6c:34:18:9f:23:97:f8:8a:4c:91:69:7e:fa:2c:46:c9:
e2:f4:d2:92:2b:89:87:6f:85:24:67:55:ad:4c:5d:e3:02:7c:
cc:3a:6a:8d:20:60:68:fd:11:54:91:d5:42:fc:c2:b9:d0:ec:
b4:17:eb:17:18:bb:78:cf:a4:39:a1:c4:5c:16:0d:91:45:fe:
3b:89:55:3b:9c:34:b3:7a:a4:7a:d3:86:23:f6:c3:99:fc:b1:
49:c4:6d:c7:af:cf:30:5f:db:9a:5b:9e:a4:11:e1:ea:2e:b4:
f5:d7:41:ea:0d:95:3f:70:0d:3f:2d:1e:cd:b1:fe:25:c3:6a:
fb:e3:41:4b:b4:83:6c:c4:d3:ec:10:92:83:af:e1:a8:be:db:
d7:50:8c:f8:01:f3:5d:98:cc:a8:49:88:95:27:a7:c9:8c:29:
1d:c3:3b:42:7d:7a:52:3b:0a:ee:d1:7c:fe:95:ed:9e:34:46:
73:2e:02:0a:2a:40:1f:27:1b:b9:04:85:24:24:19:9b:92:bf:
22:51:98:ae:af:e6:98:81:d9:db:40:ef:1f:fe:4b:d6:53:0d:
83:fe:e1:51
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUX/Hu6xjWFJ8AfrgVWHf7g3V2JPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDUwMzdaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGJkNTA4YzQ2NjYwYmE5NTAxMzdlMzAzYzBlMGIyNjQ3OWFhM2JjODYyYzlk
MmUyYWJkZTUzMjkyYTM4NWI2ZjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7YSAk4lsAsFqup5wACGNDKVMiUd8I12AHi1Myjtu0+18CjrhfDI8yJzR25
53YfdIrdUtbPj5YYC6lMIQu0nAXxa+pdf2zKC1WRVf3zIZ/aY8oczBmJ2J93O+N6
jKJSs0eGk511ToQ6Q87B0zWOH/nXJN/hqJS6H2nqHyNrVueNrOsQBYIUCBg/JDc4
eY0sP6yQSJrfB6GkI1xpq8Qtj46gviOEXXs5pTOB1hJCxy+pye8boeYaj8WxCt5q
E3Fc0157ZsQZGGWlTsL49D8FZwqlWH1yWzmtZPtAdrEMfQqmk6NnvXukDqaGat1+
In9gx5BP46XbPER1JscXLm7FX2UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR+ulmG
NIKLW/hynS6U/xKqcCHEmTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDA3OGNmZjYtOWIzNC00ZjE2LTkwM2YtYzc4MTdkODZiZjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+g
gDANBgkqhkiG9w0BAQsFAAOCAQEAIU79EBqXkDz4zJlbk0i0mvjlkH2BrCizbkAl
CiKPv6Ku54blAh9sNBifI5f4ikyRaX76LEbJ4vTSkiuJh2+FJGdVrUxd4wJ8zDpq
jSBgaP0RVJHVQvzCudDstBfrFxi7eM+kOaHEXBYNkUX+O4lVO5w0s3qketOGI/bD
mfyxScRtx6/PMF/bmluepBHh6i609ddB6g2VP3ANPy0ezbH+JcNq++NBS7SDbMTT
7BCSg6/hqL7b11CM+AHzXZjMqEmIlSenyYwpHcM7Qn16UjsK7tF8/pXtnjRGcy4C
CipAHycbuQSFJCQZm5K/IlGYrq/mmIHZ20DvH/5L1lMNg/7hUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:35 2026 by rpki-client