Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File: d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier: DulY43xcwjM8fPkg3R8xUgHvqhDt8zNQGj4SPLxSxZ8=
Subject key identifier: 2B:FA:7B:E3:F4:4B:DB:2D:F0:51:CB:5D:CD:63:74:97:B9:17:12:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E4BB544FC9D041AD4D1FCCD07D6FEB460B3B960
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time: Tue 19 May 2026 05:31:23 +0000
ROA not before: Tue 19 May 2026 05:31:23 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4b:b5:44:fc:9d:04:1a:d4:d1:fc:cd:07:d6:fe:b4:60:b3:b9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:31:23 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=84901e4be18499fa88340033017f9222b9602d412940a75cea3166606b15dc1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:bf:65:81:d7:52:a4:df:58:96:fd:cd:a8:
25:ec:f6:1d:7c:fa:b4:be:0a:93:15:80:26:43:9e:
55:db:73:b6:08:bd:4e:4c:f6:56:3d:c8:4b:5e:bd:
ed:57:a0:ea:f7:f0:67:83:ac:c4:8d:36:92:0a:5f:
44:ed:77:b0:2f:90:16:93:be:5b:a8:71:55:cf:ec:
b5:01:77:3c:f3:3d:ac:05:72:89:73:1e:70:4c:4d:
e3:8e:38:27:05:da:65:2c:aa:4b:93:3d:9a:87:18:
94:f7:68:ea:18:23:d3:96:9d:57:b6:d5:ca:5f:6f:
55:53:cc:af:fc:90:e3:02:be:f7:05:1b:66:b6:34:
66:5d:52:2b:e7:6e:66:20:c9:14:06:57:cb:2d:eb:
79:60:27:6a:23:8c:29:12:89:d6:70:e7:67:ef:49:
d1:06:a5:1e:2b:6d:5d:54:ba:cc:85:aa:6c:9e:5d:
66:3a:cb:6a:de:de:f1:0e:6c:83:f7:d8:22:b0:54:
48:b6:fd:dd:ac:a1:ca:1e:7d:5c:e3:9c:41:eb:86:
1a:6b:89:c5:b2:1e:52:78:9d:fc:87:d3:05:4b:00:
34:87:40:b3:1d:89:8b:7e:f1:ad:54:02:4a:b2:4c:
32:be:40:d0:97:b3:4f:dd:ff:b1:71:c0:1e:4e:3a:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:7B:E3:F4:4B:DB:2D:F0:51:CB:5D:CD:63:74:97:B9:17:12:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c080::/48
Signature Algorithm: sha256WithRSAEncryption
2c:e3:d5:64:e8:26:16:c2:85:db:f9:43:71:0d:38:44:78:90:
95:ee:92:45:be:34:ac:ba:fe:29:eb:32:33:c6:52:a5:aa:8b:
b0:80:92:b8:43:a7:9e:7e:d0:49:8d:c3:78:30:60:9f:04:ff:
5b:9e:9f:54:a8:72:ba:a7:d2:d2:6f:61:86:4b:35:75:0f:a2:
ce:d9:0f:3b:f3:43:ac:da:21:a8:e2:63:ac:db:2c:d1:63:40:
d5:0d:3f:f4:75:c8:91:45:89:ef:be:81:54:b4:eb:eb:33:50:
ab:99:19:90:a7:8e:32:49:ce:12:d5:87:cc:e5:2b:a8:76:b9:
94:c0:f3:f2:09:ce:c3:9c:fb:c7:27:ba:89:a7:c0:91:ef:54:
cb:fc:b5:fd:71:75:fd:15:3c:93:88:f7:83:e1:10:9a:ab:5e:
fb:90:89:0c:31:dc:c0:60:ba:7e:82:d1:8c:72:6b:9d:36:3e:
d3:01:87:b1:51:a5:bf:5d:53:29:c6:d4:f7:c6:7b:2d:4b:f1:
44:17:77:a5:3b:90:50:82:23:b3:58:f9:c0:06:43:c9:93:ba:
45:a5:c1:9b:09:72:68:79:75:80:aa:70:b7:48:da:6a:43:16:
c4:02:d9:ac:35:4a:bc:e6:64:43:f6:5d:85:cd:02:a2:a9:23:
30:55:1c:e6
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbku1RPydBBrU0fzNB9b+tGCzuWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTMxMjNaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDg0OTAxZTRiZTE4NDk5ZmE4ODM0MDAzMzAxN2Y5MjIyYjk2MDJkNDEyOTQw
YTc1Y2VhMzE2NjYwNmIxNWRjMWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKOZv2WB11Kk31iW/c2oJez2HXz6tL4KkxWAJkOeVdtztgi9Tkz2Vj3IS169
7Veg6vfwZ4OsxI02kgpfRO13sC+QFpO+W6hxVc/stQF3PPM9rAVyiXMecExN4444
JwXaZSyqS5M9mocYlPdo6hgj05adV7bVyl9vVVPMr/yQ4wK+9wUbZrY0Zl1SK+du
ZiDJFAZXyy3reWAnaiOMKRKJ1nDnZ+9J0QalHittXVS6zIWqbJ5dZjrLat7e8Q5s
g/fYIrBUSLb93ayhyh59XOOcQeuGGmuJxbIeUnid/IfTBUsANIdAsx2Ji37xrVQC
SrJMMr5A0JezT93/sXHAHk46pK0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQr+nvj
9EvbLfBRy13NY3SXuRcShTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDdiZDg1YmYtMmFmMi00NmEwLTkxZDYtZjk0NWU3MDYzMjMxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H/A
gDANBgkqhkiG9w0BAQsFAAOCAQEALOPVZOgmFsKF2/lDcQ04RHiQle6SRb40rLr+
KesyM8ZSpaqLsICSuEOnnn7QSY3DeDBgnwT/W56fVKhyuqfS0m9hhks1dQ+iztkP
O/NDrNohqOJjrNss0WNA1Q0/9HXIkUWJ776BVLTr6zNQq5kZkKeOMknOEtWHzOUr
qHa5lMDz8gnOw5z7xye6iafAke9Uy/y1/XF1/RU8k4j3g+EQmqte+5CJDDHcwGC6
foLRjHJrnTY+0wGHsVGlv11TKcbU98Z7LUvxRBd3pTuQUIIjs1j5wAZDyZO6RaXB
mwlyaHl1gKpwt0jaakMWxALZrDVKvOZkQ/Zdhc0CoqkjMFUc5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:24:35 2026 by rpki-client