Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
File: 788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa (raw, json)
Hash identifier: LV0NeUt9DRQM+HSbV5FVCNP4EIL8QfG928mj+mDhuO4=
Subject key identifier: 21:62:20:94:7E:27:92:47:88:E8:3B:C9:3B:4C:69:D8:C8:A6:85:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DC0A7ABC2BFB6A5BAD1892BD8293E7FFA51EBF7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
Signing time: Sat 28 Feb 2026 06:21:06 +0000
ROA not before: Sat 28 Feb 2026 06:21:06 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c0:a7:ab:c2:bf:b6:a5:ba:d1:89:2b:d8:29:3e:7f:fa:51:eb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:21:06 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=6497081976076cd0c89aeb62932a3908c2caf479e4cc0c4373357e808e5672a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:2b:e9:0e:0c:dd:82:aa:6f:11:f3:22:80:
51:97:10:78:83:8d:7a:5b:92:f4:4a:9f:52:11:74:
13:5a:65:c8:5e:03:c9:78:a6:ed:5b:b5:85:90:e2:
ae:bc:f0:13:e8:72:96:c0:02:82:2a:d8:c1:99:f4:
d5:ad:79:18:e5:04:36:9d:77:c7:a2:2d:9d:e8:16:
55:b0:c4:8a:99:40:05:d3:7c:91:99:68:11:cb:bd:
65:52:29:db:78:3f:bc:b1:e3:4d:12:fa:9c:58:d5:
01:cb:dd:75:7a:48:52:9c:3b:eb:a5:8a:eb:e1:61:
d0:55:71:9c:40:d9:f0:b1:37:e7:49:88:20:70:83:
fd:4f:70:96:5b:7c:68:55:39:03:5c:32:c4:e8:6c:
94:77:0f:73:43:1d:a3:7d:42:bc:b6:5f:2a:2c:22:
40:4f:c8:9b:7c:bb:3f:80:eb:ae:ce:9b:b9:4c:88:
5c:cd:44:79:7e:29:67:33:dd:15:b1:57:95:71:6e:
e7:a0:2c:ec:79:23:a7:b4:a1:ce:f8:27:13:eb:f4:
4d:98:e5:c7:c7:83:8c:ce:84:29:3a:7b:d3:13:26:
f9:a7:25:e6:9d:6c:99:3d:1e:1e:d7:38:0c:53:cd:
93:40:26:44:df:f9:5c:42:9b:9e:77:fd:7e:a3:ab:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:20:94:7E:27:92:47:88:E8:3B:C9:3B:4C:69:D8:C8:A6:85:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:9000::/40
Signature Algorithm: sha256WithRSAEncryption
31:86:a5:1e:e5:68:0f:5b:c4:c3:90:f3:5f:06:70:d8:fa:d1:
e3:d3:2c:60:6b:18:55:0e:63:fe:27:21:16:3d:c5:0a:ed:62:
11:7c:ed:4d:ec:d7:7f:b9:9c:8b:62:40:a3:98:e2:97:f1:58:
8e:15:00:de:79:1f:14:a0:48:c8:cb:a3:1d:ae:08:a0:ec:06:
35:5c:5d:3c:e7:1d:b4:de:e2:05:a6:00:f1:2f:0d:1f:8f:b5:
0a:77:3d:79:7a:c4:ba:41:62:9e:fa:86:0f:5a:4a:5b:c5:2f:
1d:79:a5:ee:06:4b:7b:51:f9:f0:4a:f8:1b:e2:45:4d:c8:67:
68:3c:af:b1:17:ea:73:2a:ef:ca:fc:8f:d2:de:8a:11:0c:51:
43:b4:48:f5:fd:1e:d3:f5:1a:7d:61:60:cb:fc:8e:35:a4:5d:
19:e5:25:28:05:61:6f:26:59:6e:18:76:4d:d0:30:4b:59:df:
90:27:68:25:fe:0f:cc:ce:ea:f8:ef:46:8e:7d:f1:ac:2e:33:
89:fd:da:7b:1f:6b:53:6a:86:0f:91:e2:79:19:65:4c:6a:4b:
06:e2:18:8b:01:03:b0:fe:19:fe:33:53:11:32:f8:4e:5b:12:
6a:53:f8:34:74:7a:5a:b3:c2:88:15:13:77:12:24:1c:b9:bd:
4a:22:c5:7a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXcCnq8K/tqW60Ykr2Ck+f/pR6/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjIxMDZaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDY0OTcwODE5NzYwNzZjZDBjODlhZWI2MjkzMmEzOTA4YzJjYWY0NzllNGNj
MGM0MzczMzU3ZTgwOGU1NjcyYTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL19K+kODN2Cqm8R8yKAUZcQeIONeluS9EqfUhF0E1plyF4DyXim7Vu1hZDi
rrzwE+hylsACgirYwZn01a15GOUENp13x6ItnegWVbDEiplABdN8kZloEcu9ZVIp
23g/vLHjTRL6nFjVAcvddXpIUpw766WK6+Fh0FVxnEDZ8LE350mIIHCD/U9wllt8
aFU5A1wyxOhslHcPc0Mdo31CvLZfKiwiQE/Im3y7P4Drrs6buUyIXM1EeX4pZzPd
FbFXlXFu56As7Hkjp7ShzvgnE+v0TZjlx8eDjM6EKTp70xMm+acl5p1smT0eHtc4
DFPNk0AmRN/5XEKbnnf9fqOr2O8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhYiCU
fieSR4joO8k7TGnYyKaFNTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Nzg4ZDlkMjMtYmEzZi00MmM0LWIxYTMtODBmMjQxNGVmYjQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DiQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAxhqUe5WgPW8TDkPNfBnDY+tHj0yxgaxhVDmP+
JyEWPcUK7WIRfO1N7Nd/uZyLYkCjmOKX8ViOFQDeeR8UoEjIy6Mdrgig7AY1XF08
5x203uIFpgDxLw0fj7UKdz15esS6QWKe+oYPWkpbxS8deaXuBkt7UfnwSvgb4kVN
yGdoPK+xF+pzKu/K/I/S3ooRDFFDtEj1/R7T9Rp9YWDL/I41pF0Z5SUoBWFvJllu
GHZN0DBLWd+QJ2gl/g/Mzur470aOffGsLjOJ/dp7H2tTaoYPkeJ5GWVMaksG4hiL
AQOw/hn+M1MRMvhOWxJqU/g0dHpas8KIFRN3EiQcub1KIsV6
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:21 2026 by rpki-client