Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
File: 5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa (raw, json)
Hash identifier: mDQY4VWqp1VVv8t3WZ1c3nh6zFjhqMl1fVbjeGRNQgg=
Subject key identifier: 62:F3:B4:83:05:F9:53:15:54:70:A1:87:7D:6F:EC:29:B2:49:ED:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28D2702011E28CF3E1E7566F79915EBE02EA8CC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
Signing time: Fri 22 May 2026 16:03:36 +0000
ROA not before: Fri 22 May 2026 16:03:36 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d2:70:20:11:e2:8c:f3:e1:e7:56:6f:79:91:5e:be:02:ea:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:03:36 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=66fd4b1dd5a7b8c9db880d3c67c05c8c3fdbbf592f2f4131f5829b21eaeddf89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:f9:5f:f8:72:01:bb:42:27:fd:00:bc:66:
1a:fa:9d:8d:08:19:10:77:64:3c:c1:b2:5b:36:d0:
1c:cf:36:5c:49:5c:b6:ad:c7:87:5d:13:d7:72:5c:
d4:b3:3f:41:99:44:f8:5a:5b:1b:78:44:86:93:65:
24:77:ce:18:be:ee:c9:5a:cf:fa:1e:90:78:c4:6e:
3b:f7:e6:00:b4:9b:bd:98:dc:34:5a:89:b1:d8:fd:
c9:ab:c4:d9:62:d8:55:f5:78:f8:d5:3e:16:82:2c:
5d:8c:5e:25:39:72:77:3f:fd:d1:96:0c:27:83:ac:
a2:56:55:3f:38:76:e5:3a:2a:ff:9e:b7:77:66:63:
c6:d9:8a:03:d4:83:cb:74:a6:7a:aa:f2:35:03:65:
58:f6:bb:ab:2e:22:1a:78:84:01:46:97:07:24:6a:
bc:08:09:3b:d9:fa:3c:7b:12:8a:1e:50:b8:c7:b2:
1a:7c:6a:a7:09:35:33:04:8f:eb:8d:a2:c8:67:03:
fe:ae:4c:a5:f0:b0:03:fe:7d:85:59:17:cc:45:00:
a3:f6:b6:fb:ec:eb:9d:b2:03:8e:93:36:a0:92:55:
eb:77:a0:15:14:80:83:2d:5d:1d:e7:eb:91:34:fb:
be:a8:3b:4b:f7:27:77:bd:91:ad:14:a1:fb:9d:0e:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:B4:83:05:F9:53:15:54:70:A1:87:7D:6F:EC:29:B2:49:ED:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
b8:e9:85:4f:a2:4f:1b:ee:4c:79:c7:0e:a1:f0:11:21:8c:cf:
d2:29:fa:bc:7a:1c:75:50:38:34:68:e7:64:cd:37:a8:6a:08:
30:82:b1:ad:cd:e2:0d:11:8e:b9:ff:8d:34:30:36:25:08:bb:
e2:5f:c2:cd:dc:5d:08:86:18:26:65:89:5d:a3:cf:1f:e6:84:
b6:1e:54:38:73:53:e9:f1:14:33:b2:58:24:4d:f5:50:01:9e:
79:33:5f:d3:cf:7d:f8:67:11:a3:c9:13:92:46:2f:0b:af:af:
9e:a6:34:44:f4:b8:8e:3a:a8:fe:5e:7c:a0:cd:62:00:2d:24:
2b:cf:73:dd:8a:5b:6f:2a:14:00:72:bc:b3:89:95:f2:94:0b:
c9:2a:75:f4:07:b5:fe:bb:70:79:39:2f:83:ad:98:fe:ca:74:
51:29:4a:72:57:79:53:16:f6:26:1f:b1:56:61:2a:42:a3:05:
1d:5f:d2:65:bb:9c:6c:d8:59:20:bc:89:71:d6:03:ba:5f:f6:
ac:e0:57:0d:02:72:3e:7e:19:db:76:5f:13:43:2c:68:cc:89:
4f:7d:3b:5b:14:14:e4:9a:67:a8:83:e1:44:48:99:c4:18:2d:
93:12:f3:c2:5e:2d:4b:cd:11:72:c4:10:f2:7e:c2:33:30:ce:
fa:0b:95:b8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKNJwIBHijPPh51ZveZFevgLqjMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MjIxNjAzMzZaFw0yNjA4MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDY2ZmQ0YjFkZDVhN2I4YzlkYjg4MGQzYzY3YzA1YzhjM2ZkYmJmNTkyZjJm
NDEzMWY1ODI5YjIxZWFlZGRmODkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2c+V/4cgG7Qif9ALxmGvqdjQgZEHdkPMGyWzbQHM82XElctq3Hh10T13Jc
1LM/QZlE+FpbG3hEhpNlJHfOGL7uyVrP+h6QeMRuO/fmALSbvZjcNFqJsdj9yavE
2WLYVfV4+NU+FoIsXYxeJTlydz/90ZYMJ4OsolZVPzh25Toq/563d2ZjxtmKA9SD
y3SmeqryNQNlWPa7qy4iGniEAUaXByRqvAgJO9n6PHsSih5QuMeyGnxqpwk1MwSP
642iyGcD/q5MpfCwA/59hVkXzEUAo/a2++zrnbIDjpM2oJJV63egFRSAgy1dHefr
kTT7vqg7S/cnd72RrRSh+50OtHMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRi87SD
BflTFVRwoYd9b+wpskntVTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQzMWU0NDItOWU1Yi00N2ZlLWJmYzAtODNlMTFlM2U4ZTY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gig
wDANBgkqhkiG9w0BAQsFAAOCAQEAuOmFT6JPG+5MeccOofARIYzP0in6vHocdVA4
NGjnZM03qGoIMIKxrc3iDRGOuf+NNDA2JQi74l/CzdxdCIYYJmWJXaPPH+aEth5U
OHNT6fEUM7JYJE31UAGeeTNf0899+GcRo8kTkkYvC6+vnqY0RPS4jjqo/l58oM1i
AC0kK89z3YpbbyoUAHK8s4mV8pQLySp19Ae1/rtweTkvg62Y/sp0USlKcld5Uxb2
Jh+xVmEqQqMFHV/SZbucbNhZILyJcdYDul/2rOBXDQJyPn4Z23ZfE0MsaMyJT307
WxQU5JpnqIPhREiZxBgtkxLzwl4tS80RcsQQ8n7CMzDO+guVuA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:27:49 2026 by rpki-client