Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82df8d10-cbc3-4e10-bb57-64c489c9d380.roa
File: 82df8d10-cbc3-4e10-bb57-64c489c9d380.roa (raw, json)
Hash identifier: a9ffrPf5FX2TGtQpGmWPwQBMQ5bTyy37t/ZQLCzy6xo=
Subject key identifier: A9:4A:D8:4B:F8:61:A8:83:C4:3D:0E:C9:4B:E8:A8:DE:0E:EF:04:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 508CF43316E1B28D6F8B6ACA6575E44CD40BAE8F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82df8d10-cbc3-4e10-bb57-64c489c9d380.roa
Signing time: Fri 15 May 2026 02:00:09 +0000
ROA not before: Fri 15 May 2026 02:00:09 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8c:f4:33:16:e1:b2:8d:6f:8b:6a:ca:65:75:e4:4c:d4:0b:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 15 02:00:09 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=6becfceb0bc79dff9172a063e79d92ed6e9a14185f6864b2a27f22c6839aa8a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:bf:15:29:03:99:3c:e0:c6:38:15:8f:3d:
4e:fb:56:d6:07:35:17:22:41:3f:dd:07:70:4f:aa:
5a:0e:60:7d:d3:85:0b:4d:8c:75:e8:93:a2:06:e0:
7a:c7:9b:61:cb:e3:67:45:00:d6:a0:66:d2:68:3a:
40:41:e6:cf:ef:11:e5:22:0b:d4:19:1e:0d:3e:c4:
ab:c6:6e:57:3d:30:39:75:25:36:eb:0c:7b:7a:47:
62:ce:02:b6:a6:e5:8f:12:5b:f1:1e:0b:07:78:d2:
03:5e:85:32:89:9b:f3:95:76:35:cf:c4:e6:73:fb:
d4:cf:c0:cf:82:d1:03:b8:5f:4d:0b:1e:dd:42:66:
4e:9f:5e:80:35:2d:ee:8f:1e:85:c7:a9:b4:a2:ab:
e9:01:75:a7:fc:f8:1b:39:31:15:0b:d2:39:c9:be:
c4:f8:86:64:76:a9:c4:49:55:2d:4d:9b:09:7e:1f:
2d:56:e7:8a:e1:1c:85:9b:64:37:19:00:74:33:0f:
2b:27:29:1e:68:84:02:8a:22:fe:7b:6f:ec:60:ef:
22:46:f3:33:ef:73:71:e3:d0:21:10:a2:54:50:f2:
69:e4:dd:d1:ca:c1:38:e3:48:d3:2f:90:a4:7d:8e:
d2:a0:9c:56:ee:d8:f0:f7:9c:98:69:6c:6f:15:17:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:D8:4B:F8:61:A8:83:C4:3D:0E:C9:4B:E8:A8:DE:0E:EF:04:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82df8d10-cbc3-4e10-bb57-64c489c9d380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:d000::/48
Signature Algorithm: sha256WithRSAEncryption
8b:4c:0f:cd:19:19:0f:11:55:7a:e8:a4:dd:e1:d6:ad:4e:1e:
f7:54:a3:00:c6:95:5a:e6:7b:1e:7c:6b:ba:e8:50:b1:c8:40:
a7:2f:75:af:ad:79:68:c0:b6:ce:57:1a:a6:85:e8:ab:03:92:
1f:da:4f:f7:98:c7:2d:fd:98:be:c5:a4:9d:ad:12:79:03:65:
6d:20:e2:61:29:88:82:bd:83:85:21:2f:c2:cb:72:38:39:84:
0d:15:9b:c7:43:89:7f:ca:7b:8e:ce:3d:fa:84:1f:d5:1c:65:
77:57:ea:34:fc:9c:77:18:f5:15:53:31:af:72:9b:80:24:c1:
f6:15:2b:af:e1:04:5b:db:ba:69:53:0c:74:6a:f9:e9:f7:82:
83:7c:de:d1:ef:90:1d:b7:a0:c4:f7:c9:86:96:07:12:21:3a:
2c:fd:1f:ea:c9:0c:40:0d:75:a3:9e:73:8e:23:56:74:45:60:
cb:e5:b7:90:9e:71:0c:03:f5:15:dd:63:df:9f:cd:29:63:84:
d5:7d:ae:57:a5:76:f7:33:5c:ca:da:68:1b:83:f3:d5:a8:3b:
ba:ba:c6:9e:5e:fd:ab:a3:92:af:3c:68:3b:a8:27:5a:e6:80:
2e:a0:6f:d9:0a:ec:ec:90:77:fd:82:2c:ce:0a:dc:9d:ba:da:
df:9d:82:42
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUIz0Mxbhso1vi2rKZXXkTNQLro8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTUwMjAwMDlaFw0yNjA4MTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiZWNmY2ViMGJjNzlkZmY5MTcyYTA2M2U3OWQ5MmVkNmU5YTE0MTg1ZjY4
NjRiMmEyN2YyMmM2ODM5YWE4YTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMs2vxUpA5k84MY4FY89TvtW1gc1FyJBP90HcE+qWg5gfdOFC02MdeiTogbg
esebYcvjZ0UA1qBm0mg6QEHmz+8R5SIL1BkeDT7Eq8ZuVz0wOXUlNusMe3pHYs4C
tqbljxJb8R4LB3jSA16FMomb85V2Nc/E5nP71M/Az4LRA7hfTQse3UJmTp9egDUt
7o8ehceptKKr6QF1p/z4GzkxFQvSOcm+xPiGZHapxElVLU2bCX4fLVbniuEchZtk
NxkAdDMPKycpHmiEAooi/ntv7GDvIkbzM+9zcePQIRCiVFDyaeTd0crBOONI0y+Q
pH2O0qCcVu7Y8PecmGlsbxUX1IUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSpSthL
+GGog8Q9DslL6KjeDu8EtjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODJkZjhkMTAtY2JjMy00ZTEwLWJiNTctNjRjNDg5YzlkMzgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GzQ
ADANBgkqhkiG9w0BAQsFAAOCAQEAi0wPzRkZDxFVeuik3eHWrU4e91SjAMaVWuZ7
HnxruuhQschApy91r615aMC2zlcapoXoqwOSH9pP95jHLf2YvsWkna0SeQNlbSDi
YSmIgr2DhSEvwstyODmEDRWbx0OJf8p7js49+oQf1Rxld1fqNPycdxj1FVMxr3Kb
gCTB9hUrr+EEW9u6aVMMdGr56feCg3ze0e+QHbegxPfJhpYHEiE6LP0f6skMQA11
o55zjiNWdEVgy+W3kJ5xDAP1Fd1j35/NKWOE1X2uV6V29zNcytpoG4Pz1ag7urrG
nl79q6OSrzxoO6gnWuaALqBv2Qrs7JB3/YIszgrcnbra352CQg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:42 2026 by rpki-client