Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
File: 8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa (raw, json)
Hash identifier: D1eli03cm6XKemHd3VhT17hlFR/LZptwho3771gR244=
Subject key identifier: 74:4F:F7:C2:0A:D1:6A:7D:B6:4B:5E:41:DD:85:AA:FC:6B:58:A7:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D982A9254C9DA0D440634F3E63670431062B001
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
Signing time: Tue 19 May 2026 05:20:09 +0000
ROA not before: Tue 19 May 2026 05:20:09 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:98:2a:92:54:c9:da:0d:44:06:34:f3:e6:36:70:43:10:62:b0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:20:09 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b91e500e724f1bfc4b5bce5e369c8a8e58e464932540e2a0a06cc09aa5c15cda, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:50:45:89:81:6d:3d:94:d1:2c:45:98:a4:
8a:a2:a7:b5:92:a3:e3:51:9b:41:80:e0:48:33:9a:
d5:b9:b2:13:89:0b:4f:59:6e:ec:af:99:e9:1a:bc:
c8:3b:75:b9:9f:35:8e:78:b8:80:fb:bd:b9:cf:91:
3a:0f:32:69:e1:60:78:f5:ee:47:52:98:f8:88:c2:
87:16:75:45:42:6a:e6:59:8d:9c:4c:24:1c:ef:e9:
e0:66:09:b8:03:a2:32:4b:5d:15:79:0b:f0:14:43:
da:76:4c:c4:4c:a6:5f:85:54:94:6e:ff:7a:7e:3b:
55:e9:84:2c:44:1f:95:e6:14:03:c1:16:21:29:3e:
72:4d:d9:99:26:55:76:98:92:9e:f4:5f:a2:e4:5e:
01:63:2e:83:3c:cf:b7:6e:20:10:3d:e1:a0:eb:5c:
9f:5a:96:0a:7d:09:f1:f5:b5:c4:98:ab:f0:e1:95:
b6:2d:41:4e:d3:45:ca:74:3c:e9:3e:fc:37:f4:00:
30:51:88:d1:da:b0:09:ba:9b:a9:6b:5f:6e:ef:41:
92:0c:92:df:79:14:47:49:2e:27:64:23:45:6f:41:
f1:54:0e:a1:6f:f7:51:94:6f:c7:e0:6a:a7:e3:a2:
73:7a:e9:6f:76:62:43:24:2b:ab:a5:90:1f:be:69:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4F:F7:C2:0A:D1:6A:7D:B6:4B:5E:41:DD:85:AA:FC:6B:58:A7:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:7d:39:2b:ee:4e:69:f1:91:f7:ae:e5:ea:dd:0a:6f:6e:b6:
f8:7b:58:6d:fd:43:f8:b9:e7:b8:0b:ac:ff:7d:0a:b4:52:01:
93:4d:2e:1a:56:a4:2c:af:41:e7:cc:2e:ae:b3:52:ad:e0:c8:
9b:6a:49:1b:7d:e5:e6:e2:ad:f4:ac:49:ec:9f:28:b0:0a:c2:
ea:e0:f6:54:e3:72:cf:52:a4:c9:96:41:07:0b:40:1b:d0:3e:
d6:e5:c0:f4:dd:ad:ab:d7:40:85:87:cd:7e:b8:b2:23:6d:3c:
dd:a1:10:52:69:46:0c:e6:92:92:e8:29:1c:5a:e4:ab:a7:9b:
dd:de:80:68:4e:0a:57:8a:93:fa:89:7a:fd:c4:9e:91:fe:fb:
63:ec:15:68:e1:58:61:ba:82:44:d4:f0:83:a9:ea:a2:bd:a8:
72:46:b1:b5:92:56:53:dd:a5:0d:21:88:be:f8:c3:75:0a:dc:
a2:f8:42:93:d5:32:27:43:7a:63:99:57:db:2c:1c:6f:d7:00:
3d:55:db:00:8e:18:81:67:4a:bf:4a:02:f3:ec:2a:1b:5f:2a:
94:2b:53:d3:15:2f:0d:14:dc:01:8c:c3:85:f3:bc:f7:87:33:
6e:78:a4:8f:06:b4:6d:ff:76:25:c1:38:0f:10:47:81:94:b4:
8c:24:1b:e6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTZgqklTJ2g1EBjTz5jZwQxBisAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTIwMDlaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5MWU1MDBlNzI0ZjFiZmM0YjViY2U1ZTM2OWM4YThlNThlNDY0OTMyNTQw
ZTJhMGEwNmNjMDlhYTVjMTVjZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJMWUEWJgW09lNEsRZikiqKntZKj41GbQYDgSDOa1bmyE4kLT1lu7K+Z6Rq8
yDt1uZ81jni4gPu9uc+ROg8yaeFgePXuR1KY+IjChxZ1RUJq5lmNnEwkHO/p4GYJ
uAOiMktdFXkL8BRD2nZMxEymX4VUlG7/en47VemELEQfleYUA8EWISk+ck3ZmSZV
dpiSnvRfouReAWMugzzPt24gED3hoOtcn1qWCn0J8fW1xJir8OGVti1BTtNFynQ8
6T78N/QAMFGI0dqwCbqbqWtfbu9BkgyS33kUR0kuJ2QjRW9B8VQOoW/3UZRvx+Bq
p+Oic3rpb3ZiQyQrq6WQH75p2EUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR0T/fC
CtFqfbZLXkHdhar8a1in7DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGE1N2U5ODItYzZiOC00YWE3LWIzMGEtMzhiZWQ2NGRmYzMxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+A
MA0GCSqGSIb3DQEBCwUAA4IBAQC7fTkr7k5p8ZH3ruXq3Qpvbrb4e1ht/UP4uee4
C6z/fQq0UgGTTS4aVqQsr0HnzC6us1Kt4MibakkbfeXm4q30rEnsnyiwCsLq4PZU
43LPUqTJlkEHC0Ab0D7W5cD03a2r10CFh81+uLIjbTzdoRBSaUYM5pKS6CkcWuSr
p5vd3oBoTgpXipP6iXr9xJ6R/vtj7BVo4VhhuoJE1PCDqeqivahyRrG1klZT3aUN
IYi++MN1Ctyi+EKT1TInQ3pjmVfbLBxv1wA9VdsAjhiBZ0q/SgLz7CobXyqUK1PT
FS8NFNwBjMOF87z3hzNueKSPBrRt/3YlwTgPEEeBlLSMJBvm
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:31 2026 by rpki-client