Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
File: 4ee4d823-9869-449e-9541-10a647125e4a.roa (raw, json)
Hash identifier: j11x4fsBh8bqELVcg+4WSqlZ9UT8560IpAhCBWwdWLc=
Subject key identifier: 7D:CA:97:A2:86:CE:F5:22:7F:ED:71:FA:E0:4A:60:74:80:14:AF:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 459EE5F74D25BAE2DFD93F0696C6740F229B9898
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
Signing time: Tue 19 May 2026 05:30:42 +0000
ROA not before: Tue 19 May 2026 05:30:42 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9e:e5:f7:4d:25:ba:e2:df:d9:3f:06:96:c6:74:0f:22:9b:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:30:42 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=ee0cc6de1f57af7f4fd9e85b8733be0e323ecc3c46677e2c8e27ed36bc6c866d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:57:bc:17:0f:53:28:b4:9c:25:e2:6e:19:
a4:61:aa:52:ba:22:f2:02:64:7d:52:cd:da:f6:5d:
cb:4a:24:16:3f:1b:90:72:86:85:20:11:82:ac:ee:
1e:9a:0c:af:46:ac:b2:df:7a:5a:4a:ea:6b:d6:b3:
26:67:c9:69:a8:14:f1:32:9d:f8:47:2f:f6:99:5f:
55:ed:c0:d6:38:5c:ad:53:94:50:26:e9:67:fa:04:
a8:88:81:a4:2f:35:de:c3:fe:6c:99:c9:3d:0c:8e:
7e:2b:22:c9:c1:71:42:de:00:f8:db:7c:44:ee:73:
81:e7:b4:d4:1b:e5:c4:d5:b6:73:2e:b7:33:81:95:
0d:5f:2e:5a:fa:58:df:b4:18:86:71:cb:87:72:83:
13:ab:9e:32:e4:b0:59:8d:46:0b:c6:16:27:ab:93:
18:8f:6a:a4:3a:51:03:88:d8:19:47:75:84:11:a9:
93:fb:bc:a9:24:9e:88:3d:61:3d:39:ac:54:88:7d:
f3:8c:e4:e0:95:60:6b:13:c2:77:b1:69:90:84:24:
8a:51:f2:20:6c:2a:c5:c0:32:65:6d:66:3c:45:e6:
6d:1c:73:99:9b:60:df:2e:8c:19:bd:d1:ad:39:b4:
ed:ab:98:49:95:24:76:5b:6d:cf:94:02:b2:e5:03:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:97:A2:86:CE:F5:22:7F:ED:71:FA:E0:4A:60:74:80:14:AF:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
46:f9:93:8e:cb:5e:14:81:81:05:bf:1a:a0:9a:1f:5b:c8:c7:
c1:b3:88:8a:bc:1a:6a:b2:5b:53:65:b9:84:a4:bc:12:93:2b:
c7:3a:28:34:f2:c2:5d:cc:dd:7c:2d:4b:7c:52:0f:07:db:f7:
d1:9f:42:4a:6c:ac:9c:77:5f:69:fa:93:18:e0:c6:d1:37:f4:
6b:68:b6:61:9a:5f:34:ac:d1:e7:a5:e2:d9:04:6e:41:34:c5:
0e:e3:39:d9:0c:08:87:bf:14:fe:4d:d6:9c:a1:fb:e7:07:d4:
72:e9:8e:e2:21:59:3f:dc:26:96:34:c2:09:a5:e0:02:92:4a:
19:48:27:70:a4:79:63:99:c1:85:ce:a4:4c:6f:3e:26:71:cb:
21:8d:23:a4:db:f6:8c:84:57:bc:5a:f5:dc:9e:c3:1a:56:17:
24:f2:26:12:27:d7:9d:26:95:9e:3c:26:3b:ad:cf:e7:06:71:
45:c4:34:38:2f:4d:f9:5a:2b:72:5c:6a:c4:ba:0b:ab:bd:3d:
2a:71:a2:29:88:70:06:1c:e2:00:03:56:de:5c:10:f8:40:73:
8b:39:f6:3b:eb:7e:07:46:25:2f:a8:d1:c1:14:5f:51:18:1d:
d5:17:3e:e8:48:ea:ce:07:a0:72:00:b6:60:57:71:55:01:af:
bb:61:f4:1c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURZ7l900luuLf2T8GlsZ0DyKbmJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTMwNDJaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGVlMGNjNmRlMWY1N2FmN2Y0ZmQ5ZTg1Yjg3MzNiZTBlMzIzZWNjM2M0NjY3
N2UyYzhlMjdlZDM2YmM2Yzg2NmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALrUV7wXD1MotJwl4m4ZpGGqUroi8gJkfVLN2vZdy0okFj8bkHKGhSARgqzu
HpoMr0asst96Wkrqa9azJmfJaagU8TKd+Ecv9plfVe3A1jhcrVOUUCbpZ/oEqIiB
pC813sP+bJnJPQyOfisiycFxQt4A+Nt8RO5zgee01BvlxNW2cy63M4GVDV8uWvpY
37QYhnHLh3KDE6ueMuSwWY1GC8YWJ6uTGI9qpDpRA4jYGUd1hBGpk/u8qSSeiD1h
PTmsVIh984zk4JVgaxPCd7FpkIQkilHyIGwqxcAyZW1mPEXmbRxzmZtg3y6MGb3R
rTm07auYSZUkdlttz5QCsuUDpz0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR9ypei
hs71In/tcfrgSmB0gBSvPTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGVlNGQ4MjMtOTg2OS00NDllLTk1NDEtMTBhNjQ3MTI1ZTRhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H/A
MA0GCSqGSIb3DQEBCwUAA4IBAQBG+ZOOy14UgYEFvxqgmh9byMfBs4iKvBpqsltT
ZbmEpLwSkyvHOig08sJdzN18LUt8Ug8H2/fRn0JKbKycd19p+pMY4MbRN/RraLZh
ml80rNHnpeLZBG5BNMUO4znZDAiHvxT+TdacofvnB9Ry6Y7iIVk/3CaWNMIJpeAC
kkoZSCdwpHljmcGFzqRMbz4mccshjSOk2/aMhFe8WvXcnsMaVhck8iYSJ9edJpWe
PCY7rc/nBnFFxDQ4L035WityXGrEugurvT0qcaIpiHAGHOIAA1beXBD4QHOLOfY7
634HRiUvqNHBFF9RGB3VFz7oSOrOB6ByALZgV3FVAa+7YfQc
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:53 2026 by rpki-client