Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
File: b3515426-a058-439f-a8fc-e68eaafc8806.roa (raw, json)
Hash identifier: +6UetA0QhbX2DU/vgY+gnxah9PSL6p+LO0LcYxOKo6o=
Subject key identifier: 2B:77:BE:39:20:D3:BE:3E:07:62:81:54:8C:7D:CC:08:C7:8A:0E:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 66DAC9FE54A039AE34B9678868D6A24EF3237335
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
Signing time: Tue 19 May 2026 05:20:08 +0000
ROA not before: Tue 19 May 2026 05:20:08 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:da:c9:fe:54:a0:39:ae:34:b9:67:88:68:d6:a2:4e:f3:23:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:20:08 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=f2b6b446a474b6741fd2eb71a2af38b60bfce9c48bc6a5b7e1d450ebabcd181f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:03:e7:21:17:e3:29:fa:f7:64:5a:d0:64:
54:eb:65:69:63:c6:c0:2a:f3:20:4f:71:13:bf:05:
c3:82:f4:2f:18:e5:68:77:4e:15:14:3e:16:a0:b5:
82:7c:05:6a:7b:1a:fe:4d:9d:a5:54:8c:a5:6e:6f:
cb:61:31:92:62:74:6e:ce:42:e9:73:b3:ad:65:79:
41:56:db:f1:1c:68:8f:28:a9:6d:4a:51:b5:e9:49:
9c:29:33:b3:55:46:6d:e8:a2:aa:fe:c0:1f:b5:df:
5f:7c:17:98:7b:3a:cc:67:0c:e3:07:e2:d9:d9:98:
38:b6:92:2e:1d:e0:f9:91:cf:ae:22:83:23:ee:7f:
3f:b4:7f:93:3a:09:cb:f0:92:06:4f:20:d3:9e:27:
b3:38:9c:04:33:b2:88:92:ee:43:7f:07:b0:db:16:
c6:e1:80:ad:4d:6e:5b:99:68:a9:e9:32:7d:ff:bc:
fa:ca:98:e5:96:67:e2:9c:47:d8:f9:c9:85:5c:8f:
f8:4f:23:96:4a:ec:be:2c:30:2e:87:4b:43:79:e1:
d4:88:c0:7e:fa:f9:42:7b:0e:7c:26:45:d1:95:77:
cf:1e:f2:c1:a6:f8:66:f7:cc:86:85:9b:10:ea:2e:
93:44:7f:da:61:0e:76:d9:c8:59:7a:f0:35:cf:f5:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:BE:39:20:D3:BE:3E:07:62:81:54:8C:7D:CC:08:C7:8A:0E:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
0c:1f:2c:ed:15:aa:84:ff:e3:72:6c:c6:d9:a8:8c:19:0e:8c:
84:46:71:32:8d:bb:80:4f:70:52:ae:33:bd:bc:8b:9b:82:e9:
25:40:dc:49:94:d0:20:a2:4f:5c:af:f9:dc:54:55:02:b7:79:
e9:e5:da:93:f5:84:f4:77:0f:6a:42:a0:9f:1d:10:65:d8:13:
7f:48:ba:be:08:51:1c:31:26:58:4a:3c:98:e5:a4:d8:3f:c9:
bc:0d:c6:fd:1f:a8:80:3a:2c:2f:2b:66:d2:c8:dc:48:31:30:
8f:3e:2f:04:23:95:78:13:38:c9:c5:e5:bd:3e:e5:f5:56:1a:
de:71:78:25:2f:cf:db:eb:8c:23:3f:bc:58:0f:c6:ce:61:70:
27:3c:bd:6c:1c:19:59:70:14:55:e1:64:4a:13:1b:5c:18:bc:
05:52:d3:39:54:df:2b:7d:7a:37:99:c4:ea:7e:c9:03:2a:b6:
83:0b:7c:99:c8:2f:4d:92:e4:6d:5e:28:bb:fa:57:85:a6:b5:
74:a0:0f:12:36:3d:76:f0:6f:ab:c0:76:cc:64:1d:de:2c:0a:
3a:35:0e:df:6a:bc:ad:54:ac:73:26:55:93:e3:06:f7:56:a2:
64:24:8f:c1:78:41:34:cd:f9:16:36:f6:a4:4e:3b:54:2f:13:
00:7c:f5:1a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZtrJ/lSgOa40uWeIaNaiTvMjczUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTIwMDhaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGYyYjZiNDQ2YTQ3NGI2NzQxZmQyZWI3MWEyYWYzOGI2MGJmY2U5YzQ4YmM2
YTViN2UxZDQ1MGViYWJjZDE4MWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEpA+chF+Mp+vdkWtBkVOtlaWPGwCrzIE9xE78Fw4L0LxjlaHdOFRQ+FqC1
gnwFansa/k2dpVSMpW5vy2ExkmJ0bs5C6XOzrWV5QVbb8RxojyipbUpRtelJnCkz
s1VGbeiiqv7AH7XfX3wXmHs6zGcM4wfi2dmYOLaSLh3g+ZHPriKDI+5/P7R/kzoJ
y/CSBk8g054nszicBDOyiJLuQ38HsNsWxuGArU1uW5loqekyff+8+sqY5ZZn4pxH
2PnJhVyP+E8jlkrsviwwLodLQ3nh1IjAfvr5QnsOfCZF0ZV3zx7ywab4ZvfMhoWb
EOouk0R/2mEOdtnIWXrwNc/1LL0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQrd745
INO+PgdigVSMfcwIx4oOITAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjM1MTU0MjYtYTA1OC00MzlmLWE4ZmMtZTY4ZWFhZmM4ODA2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+A
MA0GCSqGSIb3DQEBCwUAA4IBAQAMHyztFaqE/+NybMbZqIwZDoyERnEyjbuAT3BS
rjO9vIubguklQNxJlNAgok9cr/ncVFUCt3np5dqT9YT0dw9qQqCfHRBl2BN/SLq+
CFEcMSZYSjyY5aTYP8m8Dcb9H6iAOiwvK2bSyNxIMTCPPi8EI5V4EzjJxeW9PuX1
VhrecXglL8/b64wjP7xYD8bOYXAnPL1sHBlZcBRV4WRKExtcGLwFUtM5VN8rfXo3
mcTqfskDKraDC3yZyC9NkuRtXii7+leFprV0oA8SNj128G+rwHbMZB3eLAo6NQ7f
arytVKxzJlWT4wb3VqJkJI/BeEE0zfkWNvakTjtULxMAfPUa
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:24 2026 by rpki-client