Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File: 44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier: MQbh1c2eXZnjRlqhNr+rGi7ba+vZV81a+WAQexDRJEI=
Subject key identifier: 53:AF:20:A0:C2:AC:03:EB:EE:D4:6B:E0:33:D2:C8:BF:C1:8E:C2:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A5A9F7EDFA2E023ECC960A992130EC1F8DBC0FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time: Tue 19 May 2026 04:40:05 +0000
ROA not before: Tue 19 May 2026 04:40:05 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5a:9f:7e:df:a2:e0:23:ec:c9:60:a9:92:13:0e:c1:f8:db:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:05 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b6f934e8acefa9fc3efe03286a629107e49edf431e626e96a0a4ee29c46c7ffc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:f2:96:42:a9:1c:5b:5d:02:b1:a4:e8:3a:
d1:f2:40:e2:fd:2a:26:d0:d6:31:27:a2:6d:dc:90:
dd:9b:9d:59:a3:2c:18:24:ce:e5:03:fe:3f:c1:fb:
eb:54:3e:51:d4:53:af:57:32:10:91:6b:d5:61:a3:
5f:79:4d:15:b5:6a:cc:c1:b7:39:c6:66:3e:2e:0b:
02:c4:81:82:73:43:2d:33:04:67:59:40:45:e6:f2:
99:a6:c7:c0:90:8e:19:19:54:cb:b4:15:c2:67:d8:
1d:12:c1:09:68:ff:f4:97:29:02:0f:6e:b1:f0:83:
82:fc:e5:8d:69:3c:01:21:a3:d8:a7:89:78:f8:07:
2b:99:97:38:11:ef:fe:c7:e9:28:9a:6c:b0:a3:ee:
fa:6b:8d:81:1e:97:a7:b5:c2:05:f6:bd:3d:5e:36:
dd:d6:d6:10:29:88:09:32:b4:9e:0d:d7:60:79:59:
23:cb:f0:0d:51:47:72:ac:4a:a6:5f:45:5e:3b:b0:
e2:42:ce:9a:6a:18:b7:44:87:7d:d2:35:e9:9b:1c:
14:8e:cc:26:66:a1:9f:f6:cc:76:9a:00:87:65:21:
1a:15:86:5b:ae:6f:2b:d8:e3:e3:f2:07:f3:fc:53:
61:10:21:d4:49:06:95:fc:09:e8:1a:4b:16:ca:f0:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:20:A0:C2:AC:03:EB:EE:D4:6B:E0:33:D2:C8:BF:C1:8E:C2:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5040::/48
Signature Algorithm: sha256WithRSAEncryption
3f:fa:66:4c:3e:0f:1d:f9:6f:90:e3:2a:0a:af:34:b3:46:de:
9c:11:23:81:88:ad:c3:c9:5e:0b:05:25:d3:2c:28:35:25:31:
5c:69:19:89:e9:8d:87:72:ef:84:49:ee:a1:32:c9:75:a4:2f:
28:2d:9c:2f:6f:b2:c7:c7:24:be:7d:86:ac:d8:8f:40:26:ae:
24:52:a1:46:f8:87:66:a2:56:08:9a:b4:fd:07:da:eb:e5:da:
c9:be:d4:50:07:3e:c9:04:e8:1f:00:2b:cf:96:38:6c:41:14:
44:c8:78:23:4c:61:9e:6f:3c:87:74:bb:eb:c4:5f:f9:42:35:
c4:ee:3b:f7:b2:5c:06:10:20:a6:93:8a:c5:63:f1:e9:80:fc:
83:79:0e:15:bd:06:38:ad:14:a5:5b:19:db:d4:3f:9a:2d:35:
19:f0:30:18:82:27:1d:f6:4f:de:2d:4d:7f:0a:5f:12:a9:e4:
0d:80:a0:8d:b1:9e:cc:49:56:23:b3:04:2c:63:8f:b1:19:ad:
87:21:1b:5d:e5:74:2f:9c:de:53:6d:63:4e:27:c4:fa:75:66:
f9:5f:2f:8e:89:ad:4a:89:6e:1e:fa:3b:a6:6c:4d:2d:53:54:
66:a6:4b:fd:0a:41:3f:cd:71:9c:54:c7:35:eb:7d:2c:0b:bf:
43:a2:da:85
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOlqfft+i4CPsyWCpkhMOwfjbwP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDQwMDVaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGI2ZjkzNGU4YWNlZmE5ZmMzZWZlMDMyODZhNjI5MTA3ZTQ5ZWRmNDMxZTYy
NmU5NmEwYTRlZTI5YzQ2YzdmZmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMT/8pZCqRxbXQKxpOg60fJA4v0qJtDWMSeibdyQ3ZudWaMsGCTO5QP+P8H7
61Q+UdRTr1cyEJFr1WGjX3lNFbVqzMG3OcZmPi4LAsSBgnNDLTMEZ1lARebymabH
wJCOGRlUy7QVwmfYHRLBCWj/9JcpAg9usfCDgvzljWk8ASGj2KeJePgHK5mXOBHv
/sfpKJpssKPu+muNgR6Xp7XCBfa9PV423dbWECmICTK0ng3XYHlZI8vwDVFHcqxK
pl9FXjuw4kLOmmoYt0SHfdI16ZscFI7MJmahn/bMdpoAh2UhGhWGW65vK9jj4/IH
8/xTYRAh1EkGlfwJ6BpLFsrwA/UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRTryCg
wqwD6+7Ua+Az0si/wY7CmDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDRiYjJmNzYtN2MxZS00MTFhLTg1ZjYtYjljZDFjNzdkNjBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAP/pmTD4PHflvkOMqCq80s0benBEjgYitw8le
CwUl0ywoNSUxXGkZiemNh3LvhEnuoTLJdaQvKC2cL2+yx8ckvn2GrNiPQCauJFKh
RviHZqJWCJq0/Qfa6+Xayb7UUAc+yQToHwArz5Y4bEEURMh4I0xhnm88h3S768Rf
+UI1xO4797JcBhAgppOKxWPx6YD8g3kOFb0GOK0UpVsZ29Q/mi01GfAwGIInHfZP
3i1NfwpfEqnkDYCgjbGezElWI7MELGOPsRmthyEbXeV0L5zeU21jTifE+nVm+V8v
jomtSoluHvo7pmxNLVNUZqZL/QpBP81xnFTHNet9LAu/Q6LahQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:05 2026 by rpki-client