Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa
File: 9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa (raw, json)
Hash identifier: 9G1YpANsAuKvZGLn1C98UtJDkvgBpnazlt/comp4ILE=
Subject key identifier: 44:35:9C:58:39:56:7F:CB:58:7A:82:3A:59:C2:51:AE:91:92:78:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79D2D0B1593C6CD94936E3F1EF5B5727A45CF062
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa
Signing time: Fri 03 Apr 2026 02:40:36 +0000
ROA not before: Fri 03 Apr 2026 02:40:36 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d2:d0:b1:59:3c:6c:d9:49:36:e3:f1:ef:5b:57:27:a4:5c:f0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 3 02:40:36 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=5f6abdb33e012fdbb63a39047b5ed832f95770b4253330dd2ffa5319ed32bded, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:bb:bb:9f:f6:bb:91:09:e7:ad:11:12:08:
11:b3:3c:c1:8a:82:2c:71:f7:7b:5f:b1:d6:2a:9b:
e0:68:9c:db:5c:06:d6:8b:c0:78:f0:24:cc:c0:fd:
6d:f9:cd:b7:75:69:c2:0d:10:ed:26:f8:9e:63:d9:
ff:72:72:7b:fc:b4:9e:ea:9e:47:d4:81:81:f4:d2:
76:ba:82:b2:60:53:4d:50:64:c8:9e:11:69:7d:15:
b3:e6:74:16:95:d1:02:46:0b:fd:93:a8:8a:d9:f6:
04:c0:1f:28:a7:6a:d5:45:5d:dd:f9:e4:fc:ed:c5:
66:61:fb:ef:6a:8b:0b:57:02:52:4b:db:8a:f9:86:
d2:31:94:07:f2:c5:0d:b6:d8:5e:9a:29:7e:a5:74:
d6:2a:e0:e7:c8:14:2d:da:d8:78:ca:83:7f:0f:01:
40:de:38:39:23:67:d2:16:db:4e:bf:90:17:9c:48:
d6:d1:da:80:b9:fe:b9:d4:d1:56:8b:c2:75:9b:44:
de:d5:d6:cc:cc:3f:67:da:01:cc:b8:17:13:51:d0:
d6:ec:a4:71:e1:75:5f:18:65:fd:f8:e1:cc:67:63:
95:e1:54:62:8f:b6:1a:63:45:c3:3a:a4:3b:eb:99:
a2:8e:09:ff:e9:a4:65:d3:eb:59:3d:01:aa:1b:4d:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:9C:58:39:56:7F:CB:58:7A:82:3A:59:C2:51:AE:91:92:78:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:6a:f5:63:c9:ee:17:6e:24:90:88:4f:0c:10:4b:8b:ce:b3:
b3:2e:7e:31:a7:cd:ad:e5:35:e7:39:95:f7:52:41:41:4a:80:
72:f1:12:2f:9f:cd:c3:0e:76:a1:cb:d7:a7:c9:28:10:da:cd:
bf:ae:15:a4:67:30:63:88:60:8b:1f:fe:da:45:73:02:0e:c8:
a3:a2:7f:8a:4c:ab:74:57:6b:f7:73:4c:5a:f8:2f:39:79:34:
f4:e6:62:1f:fc:6c:ac:f7:5a:21:f7:88:4f:1d:0b:f5:23:b8:
e8:18:f8:05:a7:ac:d3:b0:74:21:b6:0d:56:62:8a:4d:36:53:
09:a9:d5:15:dc:d7:ec:b9:08:dc:b6:dd:03:09:85:d0:90:7d:
41:13:03:67:f1:3e:2a:f2:5d:75:82:1c:ae:02:71:a3:34:91:
c0:f8:2c:7b:38:79:12:64:e5:9f:27:da:1a:b5:a7:39:55:69:
1d:d5:03:df:84:a6:69:4e:38:49:ab:dc:a5:41:89:42:4a:75:
03:39:d7:cf:21:87:09:20:45:00:5f:db:af:de:1e:ba:6c:8e:
0f:9d:36:f8:a0:02:cb:3b:96:21:dc:b3:ee:4a:90:1d:6a:96:
a5:43:fe:87:3a:cc:e1:06:a0:5e:14:3b:7f:ca:91:ab:fc:ce:
46:d3:0d:c3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUedLQsVk8bNlJNuPx71tXJ6Rc8GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA0MDMwMjQwMzZaFw0yNjA3MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDVmNmFiZGIzM2UwMTJmZGJiNjNhMzkwNDdiNWVkODMyZjk1NzcwYjQyNTMz
MzBkZDJmZmE1MzE5ZWQzMmJkZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKkcu7uf9ruRCeetERIIEbM8wYqCLHH3e1+x1iqb4Gic21wG1ovAePAkzMD9
bfnNt3Vpwg0Q7Sb4nmPZ/3Jye/y0nuqeR9SBgfTSdrqCsmBTTVBkyJ4RaX0Vs+Z0
FpXRAkYL/ZOoitn2BMAfKKdq1UVd3fnk/O3FZmH772qLC1cCUkvbivmG0jGUB/LF
DbbYXpopfqV01irg58gULdrYeMqDfw8BQN44OSNn0hbbTr+QF5xI1tHagLn+udTR
VovCdZtE3tXWzMw/Z9oBzLgXE1HQ1uykceF1Xxhl/fjhzGdjleFUYo+2GmNFwzqk
O+uZoo4J/+mkZdPrWT0BqhtNYx8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRENZxY
OVZ/y1h6gjpZwlGukZJ4tTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWQ1ZTBkOWYtYTk3OS00NTFkLTg3ZmItMGY5NzU2MjVkZGQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuQ
wDANBgkqhkiG9w0BAQsFAAOCAQEArWr1Y8nuF24kkIhPDBBLi86zsy5+MafNreU1
5zmV91JBQUqAcvESL5/Nww52ocvXp8koENrNv64VpGcwY4hgix/+2kVzAg7Io6J/
ikyrdFdr93NMWvgvOXk09OZiH/xsrPdaIfeITx0L9SO46Bj4Baes07B0IbYNVmKK
TTZTCanVFdzX7LkI3LbdAwmF0JB9QRMDZ/E+KvJddYIcrgJxozSRwPgsezh5EmTl
nyfaGrWnOVVpHdUD34SmaU44SavcpUGJQkp1AznXzyGHCSBFAF/br94eumyOD502
+KACyzuWIdyz7kqQHWqWpUP+hzrM4QagXhQ7f8qRq/zORtMNww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:47:42 2026 by rpki-client