Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b23b9203-8bab-4da3-9e46-df05dc55ce21.roa
File: b23b9203-8bab-4da3-9e46-df05dc55ce21.roa (raw, json)
Hash identifier: Ne1GplLhP9xDU9QFp7Z5JWtRaJB7mOFVf+RTWKIpUmI=
Subject key identifier: 1B:C4:8D:EA:00:3C:BE:EB:1E:3C:94:49:BE:75:E7:49:FF:F8:89:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CFDCB954B4342FC9C2EE2BAA18A3AED40E05A68
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b23b9203-8bab-4da3-9e46-df05dc55ce21.roa
Signing time: Fri 22 May 2026 16:01:55 +0000
ROA not before: Fri 22 May 2026 16:01:55 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fd:cb:95:4b:43:42:fc:9c:2e:e2:ba:a1:8a:3a:ed:40:e0:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 16:01:55 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=9626c2d07a3d17487cd308ddc0d39b60c71b8deafe30b78b2e8561d71c547ed6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:f0:3e:e1:ea:9c:6d:18:f1:0e:16:30:88:
91:61:99:e8:d0:4e:00:85:fd:74:e4:58:b0:87:9d:
cd:78:a1:14:44:14:ca:24:53:c8:58:7b:34:ba:3b:
1c:57:30:2e:48:80:67:c6:f5:a5:be:85:86:9c:30:
e3:e7:6a:4e:ce:44:1e:d3:46:14:9e:11:86:8c:8a:
1d:ee:88:8f:17:e3:3b:ee:e8:b0:04:3a:e4:1e:f9:
ed:c8:13:dd:e2:eb:2b:66:29:ea:07:5e:23:41:cb:
d1:6c:88:a9:b3:a5:9e:b8:09:58:8e:b9:57:71:79:
69:7d:a5:66:95:9e:bd:95:b6:06:83:33:32:0c:11:
5c:92:c4:e9:6d:f1:24:d6:0a:c1:5d:30:e9:46:cb:
5d:ae:bc:cc:46:63:cd:4c:38:12:d0:59:f6:80:e3:
ef:e6:ee:cc:3c:1b:dd:d4:2c:b9:b7:df:cc:b4:7d:
76:3a:af:3c:25:2b:a8:30:23:a6:f2:1d:25:bc:fa:
74:1e:a7:ed:7f:7c:8a:4f:af:73:58:f3:1e:a8:8d:
f9:72:d6:8a:af:0b:19:28:93:f0:10:46:99:e3:4e:
6c:5d:22:a7:2b:a3:21:58:cb:c6:30:b8:d0:d7:9a:
dd:1e:ed:74:df:08:99:a4:62:66:3b:3f:70:3d:b4:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:8D:EA:00:3C:BE:EB:1E:3C:94:49:BE:75:E7:49:FF:F8:89:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b23b9203-8bab-4da3-9e46-df05dc55ce21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:4000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:ed:b8:a7:ef:d7:b5:c9:77:f8:c5:0a:99:e5:24:6b:6f:ec:
db:33:2a:c2:8c:5f:49:b3:c8:87:26:8e:08:2c:4a:bf:0f:13:
e7:dc:2a:ca:74:32:67:c0:9d:87:db:0e:a7:c2:20:47:af:20:
c5:69:87:5c:d2:92:b3:9e:7e:79:21:5b:4d:04:fb:2a:c4:e7:
2b:de:a9:7c:db:34:35:a6:6b:90:47:19:8a:19:f5:7e:56:d1:
9e:c8:3c:49:a7:e7:7a:dd:2b:82:26:ac:e5:61:7b:f6:f4:98:
66:9e:60:a8:5d:56:c3:f1:af:4e:ab:ec:6e:ea:c1:21:fd:5b:
3f:f1:2f:0c:ce:92:c2:2b:5b:0a:c6:53:93:2f:75:75:ef:d3:
a1:8c:a4:82:e9:06:53:2e:0b:ad:2d:43:43:67:5a:a9:68:8b:
e1:03:ba:66:41:c5:5a:47:b0:df:54:24:b9:06:3c:2e:f0:15:
a0:79:cb:f3:c2:4a:3f:03:74:dc:1a:6b:43:b2:88:24:50:50:
82:ad:49:01:f3:c5:e5:e9:b7:74:79:06:94:5c:77:0b:a4:8d:
6a:51:6c:cf:6f:b2:fd:9c:9d:d2:dd:36:4d:d2:f4:5f:7c:91:
c4:e2:5e:71:72:d1:47:b2:7d:22:ad:06:73:83:09:bd:04:13:
9d:31:1f:60
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbP3LlUtDQvycLuK6oYo67UDgWmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MjIxNjAxNTVaFw0yNjA4MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDk2MjZjMmQwN2EzZDE3NDg3Y2QzMDhkZGMwZDM5YjYwYzcxYjhkZWFmZTMw
Yjc4YjJlODU2MWQ3MWM1NDdlZDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI6x8D7h6pxtGPEOFjCIkWGZ6NBOAIX9dORYsIedzXihFEQUyiRTyFh7NLo7
HFcwLkiAZ8b1pb6Fhpww4+dqTs5EHtNGFJ4RhoyKHe6IjxfjO+7osAQ65B757cgT
3eLrK2Yp6gdeI0HL0WyIqbOlnrgJWI65V3F5aX2lZpWevZW2BoMzMgwRXJLE6W3x
JNYKwV0w6UbLXa68zEZjzUw4EtBZ9oDj7+buzDwb3dQsubffzLR9djqvPCUrqDAj
pvIdJbz6dB6n7X98ik+vc1jzHqiN+XLWiq8LGSiT8BBGmeNObF0ipyujIVjLxjC4
0Nea3R7tdN8ImaRiZjs/cD20kbkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQbxI3q
ADy+6x48lEm+dedJ//iJZjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjIzYjkyMDMtOGJhYi00ZGEzLTllNDYtZGYwNWRjNTVjZTIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GJA
MA0GCSqGSIb3DQEBCwUAA4IBAQDI7bin79e1yXf4xQqZ5SRrb+zbMyrCjF9Js8iH
Jo4ILEq/DxPn3CrKdDJnwJ2H2w6nwiBHryDFaYdc0pKznn55IVtNBPsqxOcr3ql8
2zQ1pmuQRxmKGfV+VtGeyDxJp+d63SuCJqzlYXv29JhmnmCoXVbD8a9Oq+xu6sEh
/Vs/8S8MzpLCK1sKxlOTL3V179OhjKSC6QZTLgutLUNDZ1qpaIvhA7pmQcVaR7Df
VCS5Bjwu8BWgecvzwko/A3TcGmtDsogkUFCCrUkB88Xl6bd0eQaUXHcLpI1qUWzP
b7L9nJ3S3TZN0vRffJHE4l5xctFHsn0irQZzgwm9BBOdMR9g
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:18 2026 by rpki-client