Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
File: 5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa (raw, json)
Hash identifier: Ki5SYEtlFV9ASUm8mveJ2+4v7qx7MQFxoB2F93jyjB0=
Subject key identifier: 2A:43:97:76:6C:06:44:28:4E:0F:8F:79:0E:F7:23:10:F4:55:C4:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C373AA3A95D56F290CFCE862798BB0462D341F1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
Signing time: Tue 19 May 2026 04:40:07 +0000
ROA not before: Tue 19 May 2026 04:40:07 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:37:3a:a3:a9:5d:56:f2:90:cf:ce:86:27:98:bb:04:62:d3:41:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:07 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=6e337e1d70277b384a3fc005cff4d2d556b65e709440d4efaffccaa217b3f600, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:5a:dc:4a:8a:6f:46:ef:40:61:51:4d:66:
73:f9:8d:f5:f5:3a:51:6f:fb:95:15:2f:3c:0f:f2:
3a:e8:bb:88:65:33:e8:38:11:03:58:19:6b:72:dc:
0c:b8:97:3c:2b:c3:df:61:a2:82:3a:3c:5b:95:8d:
df:5b:71:8b:75:91:44:e2:b2:8e:c0:97:09:70:a6:
9c:c9:d9:5f:bf:01:be:d5:2d:79:11:d8:da:09:8b:
c1:12:e9:ce:2e:24:bf:1a:2b:2f:43:fd:d6:ce:c8:
54:15:4e:28:92:00:9e:3d:14:8c:6e:5a:e1:d1:ff:
58:15:e5:ce:1a:83:e0:fa:72:c8:ea:9a:54:5f:f8:
6d:02:b4:92:fd:ef:27:08:72:2d:00:d6:44:c8:e9:
5e:4a:e1:91:28:2c:e4:f0:e9:4e:5d:c5:fa:bb:f8:
3e:ae:9a:90:ac:d7:ab:20:8a:81:7c:74:51:cc:63:
fb:d7:2a:b5:ec:a6:0a:11:9e:e3:5f:cd:b3:7d:b2:
61:39:c8:73:40:13:4e:ac:02:50:45:34:e3:b8:a0:
29:40:2b:00:98:52:a4:73:0c:32:b4:bf:6e:ee:43:
64:9f:f0:ee:b6:45:3a:44:9f:b2:83:0d:58:de:59:
35:fc:ff:aa:10:7c:62:f7:6f:4a:af:8c:e3:56:da:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:97:76:6C:06:44:28:4E:0F:8F:79:0E:F7:23:10:F4:55:C4:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:c00::/38
Signature Algorithm: sha256WithRSAEncryption
3d:97:1a:00:37:b0:df:19:33:23:ba:72:be:e9:65:15:be:07:
a6:2c:d0:ef:60:d2:74:44:fd:a8:f7:d3:34:bc:0a:aa:f0:79:
e9:c4:e6:98:4d:09:20:ac:70:5a:b5:e7:96:6e:dc:ba:40:f9:
4e:49:a0:6f:62:a7:71:f1:0c:11:41:66:9f:ab:35:1a:ec:67:
e2:b8:d0:b9:e1:4f:bd:f3:6f:b1:bc:d6:e4:cd:d1:fa:03:50:
db:08:4c:f6:0d:0b:2e:24:e4:25:1a:15:46:f2:60:75:38:af:
80:3e:66:70:24:fe:a9:53:5a:ef:0e:37:97:42:bf:1c:02:12:
1e:1a:b2:09:e2:0b:60:33:b5:10:be:aa:0f:51:63:32:e8:ca:
50:c0:d5:68:71:fc:ea:de:87:06:82:cc:0d:99:41:8d:d3:ef:
6c:ca:89:b3:a9:9c:37:2a:91:32:6b:7e:1c:9f:eb:11:0d:93:
8c:dc:a8:67:94:b0:04:81:97:e1:1e:cb:df:77:84:21:8a:94:
08:60:33:4a:1c:e6:d0:f2:be:e3:88:82:15:3a:82:29:72:92:
91:1d:49:9f:ca:54:7b:f2:f9:d2:fb:f4:3e:2b:be:51:c6:cc:
7a:9c:9e:8e:e6:6f:1e:c4:41:8b:4f:9d:0e:0f:b7:a0:7d:8c:
c0:a2:fc:ef
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHDc6o6ldVvKQz86GJ5i7BGLTQfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDQwMDdaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlMzM3ZTFkNzAyNzdiMzg0YTNmYzAwNWNmZjRkMmQ1NTZiNjVlNzA5NDQw
ZDRlZmFmZmNjYWEyMTdiM2Y2MDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMKsWtxKim9G70BhUU1mc/mN9fU6UW/7lRUvPA/yOui7iGUz6DgRA1gZa3Lc
DLiXPCvD32Gigjo8W5WN31txi3WRROKyjsCXCXCmnMnZX78BvtUteRHY2gmLwRLp
zi4kvxorL0P91s7IVBVOKJIAnj0UjG5a4dH/WBXlzhqD4PpyyOqaVF/4bQK0kv3v
JwhyLQDWRMjpXkrhkSgs5PDpTl3F+rv4Pq6akKzXqyCKgXx0Ucxj+9cqteymChGe
41/Ns32yYTnIc0ATTqwCUEU047igKUArAJhSpHMMMrS/bu5DZJ/w7rZFOkSfsoMN
WN5ZNfz/qhB8YvdvSq+M41ba/icCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQqQ5d2
bAZEKE4Pj3kO9yMQ9FXEpjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTg1NGUwNmEtYzgyNS00MGZlLWJmNTEtNWI3N2QzYmE0ZDAyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYM
MA0GCSqGSIb3DQEBCwUAA4IBAQA9lxoAN7DfGTMjunK+6WUVvgemLNDvYNJ0RP2o
99M0vAqq8HnpxOaYTQkgrHBateeWbty6QPlOSaBvYqdx8QwRQWafqzUa7GfiuNC5
4U+982+xvNbkzdH6A1DbCEz2DQsuJOQlGhVG8mB1OK+APmZwJP6pU1rvDjeXQr8c
AhIeGrIJ4gtgM7UQvqoPUWMy6MpQwNVocfzq3ocGgswNmUGN0+9syomzqZw3KpEy
a34cn+sRDZOM3KhnlLAEgZfhHsvfd4QhipQIYDNKHObQ8r7jiIIVOoIpcpKRHUmf
ylR78vnS+/Q+K75Rxsx6nJ6O5m8exEGLT50OD7egfYzAovzv
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:21 2026 by rpki-client