Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
File: b4811639-eec3-4653-a07b-9777ebef5f33.roa (raw, json)
Hash identifier: CZIquK2WGw/YoMwycN/UU+9VahkDyatdkYIo8SK9jO0=
Subject key identifier: A3:44:42:99:94:63:74:5F:40:06:63:D4:F2:07:DC:F6:67:84:86:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A94EC2F1167BFB61E1C9D027861EC00E723A89F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
Signing time: Mon 27 Jul 2026 03:20:06 +0000
ROA not before: Mon 27 Jul 2026 03:20:06 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:94:ec:2f:11:67:bf:b6:1e:1c:9d:02:78:61:ec:00:e7:23:a8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:06 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=fe8c217fd1fe849e955f87fdebe5438d83834feabff8d26f5791ce5173b28dcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:df:52:75:41:e0:b2:f5:22:5d:d4:1d:4d:
54:b2:f3:c7:25:b2:7d:8d:fc:26:15:9a:50:b4:d0:
f2:b6:96:40:80:25:7d:6c:b4:77:b6:51:b1:a7:2f:
09:54:1e:4a:e3:dc:01:ca:58:cf:48:18:12:ff:7b:
0d:7d:b9:31:77:e1:19:d0:2b:3b:d6:ad:bf:3e:d4:
42:1b:eb:98:09:b4:72:ae:11:19:30:0e:fc:2f:0e:
0e:c6:d0:44:80:30:fd:b0:7f:cb:b8:21:58:e1:6f:
1b:6e:92:5e:ce:6f:48:69:b4:9c:23:56:75:54:8b:
ec:92:ea:26:04:3d:a6:96:39:ee:5b:29:f5:11:22:
a7:1c:28:f5:27:a1:7b:42:fc:04:b9:84:e6:a2:c9:
3a:c2:d1:3b:db:8f:42:97:21:6f:11:8e:80:71:f8:
c2:bf:8a:80:94:62:2b:c4:59:00:7e:eb:cb:b1:aa:
2a:76:71:5e:e3:0b:50:91:27:6c:0a:b1:ab:7f:9e:
e3:dd:d7:48:98:09:9f:46:25:2c:ba:ab:64:97:85:
3a:4c:62:44:61:89:da:2c:be:62:49:a5:a4:be:0e:
bc:0b:00:e3:a0:0f:c9:e9:a8:43:63:07:c8:a3:2b:
20:fc:28:85:9e:e0:6a:80:bd:cd:ac:00:4f:4a:da:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:42:99:94:63:74:5F:40:06:63:D4:F2:07:DC:F6:67:84:86:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:dd:7b:4b:4f:ab:46:dd:b5:4e:16:04:75:6b:16:6f:f7:52:
ca:ae:24:e6:f8:af:ee:9d:97:ae:f9:af:f0:81:d4:03:2e:ef:
fd:e2:a5:d1:1c:9d:d0:6b:27:a4:5b:ca:14:47:6c:f7:00:19:
49:10:00:55:2f:0f:cc:66:e0:54:89:2c:07:fe:21:bc:b9:be:
f4:be:f7:0d:58:a2:19:00:86:5c:23:10:57:46:a3:bc:ee:2a:
68:33:20:be:b3:67:96:40:28:3e:60:4b:bb:80:a9:08:eb:f7:
4f:7a:78:27:75:80:8c:e2:01:0b:80:a4:f2:84:ac:7b:35:c6:
08:7c:d2:64:a1:b4:cd:20:a8:9e:45:9b:7e:2b:c7:99:c2:b0:
67:c6:7c:f2:4a:aa:76:6f:d4:b1:c0:d2:6a:da:d5:03:f3:d7:
9c:2b:d8:bb:b8:8f:9a:4e:fe:a0:b4:73:13:73:96:0d:38:93:
1d:fd:86:67:e5:74:b2:60:62:69:d3:ef:32:e5:d5:45:88:fa:
53:e1:5d:f5:4f:d2:c3:1b:38:14:55:67:70:70:19:e1:cd:86:
4c:71:c0:3b:e8:18:f6:59:29:57:c7:6e:cf:f1:f2:a3:43:72:
a1:34:65:2c:96:01:9b:01:65:27:8b:9a:02:1c:b2:9a:14:6d:
d2:e4:41:3b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWpTsLxFnv7YeHJ0CeGHsAOcjqJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwMDZaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGZlOGMyMTdmZDFmZTg0OWU5NTVmODdmZGViZTU0MzhkODM4MzRmZWFiZmY4
ZDI2ZjU3OTFjZTUxNzNiMjhkY2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+231J1QeCy9SJd1B1NVLLzxyWyfY38JhWaULTQ8raWQIAlfWy0d7ZRsacv
CVQeSuPcAcpYz0gYEv97DX25MXfhGdArO9atvz7UQhvrmAm0cq4RGTAO/C8ODsbQ
RIAw/bB/y7ghWOFvG26SXs5vSGm0nCNWdVSL7JLqJgQ9ppY57lsp9REipxwo9Seh
e0L8BLmE5qLJOsLRO9uPQpchbxGOgHH4wr+KgJRiK8RZAH7ry7GqKnZxXuMLUJEn
bAqxq3+e493XSJgJn0YlLLqrZJeFOkxiRGGJ2iy+YkmlpL4OvAsA46APyemoQ2MH
yKMrIPwohZ7gaoC9zawAT0ra8rkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSjREKZ
lGN0X0AGY9TyB9z2Z4SGCjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjQ4MTE2MzktZWVjMy00NjUzLWEwN2ItOTc3N2ViZWY1ZjMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FkQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBK3XtLT6tG3bVOFgR1axZv91LKriTm+K/unZeu
+a/wgdQDLu/94qXRHJ3QayekW8oUR2z3ABlJEABVLw/MZuBUiSwH/iG8ub70vvcN
WKIZAIZcIxBXRqO87ipoMyC+s2eWQCg+YEu7gKkI6/dPengndYCM4gELgKTyhKx7
NcYIfNJkobTNIKieRZt+K8eZwrBnxnzySqp2b9SxwNJq2tUD89ecK9i7uI+aTv6g
tHMTc5YNOJMd/YZn5XSyYGJp0+8y5dVFiPpT4V31T9LDGzgUVWdwcBnhzYZMccA7
6Bj2WSlXx27P8fKjQ3KhNGUslgGbAWUni5oCHLKaFG3S5EE7
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:06 2026 by rpki-client