Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
File: e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa (raw, json)
Hash identifier: lJf8Sdp/DUMD/jNtUFgKDx6ozRE9aNUop5A4RxiqF6I=
Subject key identifier: E2:28:00:70:0C:62:6A:3A:79:6D:6A:4D:3B:0A:5A:C1:59:20:F4:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7300A7B26E675CAC719D992C7E6D1FFB57F4E313
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
Signing time: Tue 19 May 2026 05:40:10 +0000
ROA not before: Tue 19 May 2026 05:40:10 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:00:a7:b2:6e:67:5c:ac:71:9d:99:2c:7e:6d:1f:fb:57:f4:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:40:10 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=d9eed9b003bb78d2b8494ccda5ea01a1fcd13f2591a3b3794fe7b7b314efe1ed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:c2:40:43:55:70:f5:cf:5a:4f:d9:bb:f7:
73:96:fe:4e:b2:5d:2a:6c:2c:41:f0:3a:96:3d:73:
7d:4c:48:86:5e:6a:ee:2e:05:4d:1f:b3:41:98:10:
3f:c8:b5:2e:7d:4b:9b:64:36:4a:a4:6d:27:66:e1:
b2:15:6e:c1:d9:0e:d2:73:05:f0:8e:94:e4:a4:1d:
18:14:68:5a:f5:3c:57:9d:51:a1:13:a0:f3:53:13:
0b:8d:0c:66:fd:9b:73:3b:ca:37:a0:c9:8d:59:64:
6f:48:01:71:5d:44:cb:a3:ba:f8:2c:4c:73:26:76:
a6:12:0d:11:ee:17:fd:92:f2:47:dd:c9:df:0c:88:
3e:6c:1f:76:8b:a9:c9:36:66:9e:9a:04:f7:cc:98:
73:d9:8f:9d:8e:63:a3:24:d7:4f:7b:a3:20:78:f3:
75:ff:ab:c1:ee:fa:21:6b:af:6d:2e:5b:d4:66:45:
4a:6f:27:4f:58:5b:82:44:e4:6c:2b:fd:62:43:0c:
5e:de:b5:98:03:1a:4f:c0:c7:b5:70:0a:55:a3:76:
1d:05:4b:ee:64:e0:38:27:a0:1d:1c:cd:fc:1c:d5:
fc:4a:aa:82:94:32:02:30:e7:28:b4:66:c6:ba:32:
11:89:eb:97:76:a1:7e:89:5e:eb:45:cc:f3:00:2f:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:00:70:0C:62:6A:3A:79:6D:6A:4D:3B:0A:5A:C1:59:20:F4:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c040::/48
Signature Algorithm: sha256WithRSAEncryption
77:17:2b:1f:f8:8e:78:71:45:00:26:eb:ee:67:bf:f1:b5:29:
cd:c2:ac:90:12:24:21:46:d9:34:b3:9c:45:65:58:e8:aa:15:
18:29:ba:59:69:ee:aa:b5:26:c5:d4:e2:15:bc:00:77:be:08:
98:3e:a0:06:7e:09:18:62:2e:bf:96:cc:f7:6a:59:49:86:2a:
1f:b9:f3:f3:b0:3f:51:4e:2f:4e:e8:8a:4c:39:a7:f3:1b:53:
66:7e:96:20:a7:1b:48:a2:9d:0b:01:3a:8d:ed:48:bf:a7:c5:
8f:2c:ef:e2:16:7e:91:ed:6a:0b:a9:78:80:a7:5d:8c:1a:51:
bb:3e:fc:b7:2d:33:c0:80:71:70:14:6c:f9:f6:45:8a:25:da:
5e:75:77:bc:4d:4d:3d:fb:f1:77:55:2c:98:69:56:46:29:2d:
1a:be:cf:8e:16:2c:a6:bc:ed:60:a2:fb:40:7e:57:38:48:33:
02:86:ca:c9:bc:15:4c:3c:dd:b6:7d:2a:66:3b:a2:32:4c:15:
db:02:d9:e0:df:43:a5:23:ac:08:e7:c6:f7:16:3c:d1:22:62:
aa:1d:72:6e:0a:8f:b7:97:c9:38:43:d0:b9:52:8c:ab:43:b4:
81:25:5d:17:b4:da:54:bc:92:e4:12:73:99:f2:01:a6:cf:14:
40:69:a7:79
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcwCnsm5nXKxxnZksfm0f+1f04xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTQwMTBaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ5ZWVkOWIwMDNiYjc4ZDJiODQ5NGNjZGE1ZWEwMWExZmNkMTNmMjU5MWEz
YjM3OTRmZTdiN2IzMTRlZmUxZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANSBwkBDVXD1z1pP2bv3c5b+TrJdKmwsQfA6lj1zfUxIhl5q7i4FTR+zQZgQ
P8i1Ln1Lm2Q2SqRtJ2bhshVuwdkO0nMF8I6U5KQdGBRoWvU8V51RoROg81MTC40M
Zv2bczvKN6DJjVlkb0gBcV1Ey6O6+CxMcyZ2phINEe4X/ZLyR93J3wyIPmwfdoup
yTZmnpoE98yYc9mPnY5joyTXT3ujIHjzdf+rwe76IWuvbS5b1GZFSm8nT1hbgkTk
bCv9YkMMXt61mAMaT8DHtXAKVaN2HQVL7mTgOCegHRzN/BzV/EqqgpQyAjDnKLRm
xroyEYnrl3ahfole60XM8wAvdD0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTiKABw
DGJqOnltak07ClrBWSD04zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTkzMWNhYTktY2E0ZS00MjhhLWFhM2MtM2FmMzZlZmFmYzhjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA
QDANBgkqhkiG9w0BAQsFAAOCAQEAdxcrH/iOeHFFACbr7me/8bUpzcKskBIkIUbZ
NLOcRWVY6KoVGCm6WWnuqrUmxdTiFbwAd74ImD6gBn4JGGIuv5bM92pZSYYqH7nz
87A/UU4vTuiKTDmn8xtTZn6WIKcbSKKdCwE6je1Iv6fFjyzv4hZ+ke1qC6l4gKdd
jBpRuz78ty0zwIBxcBRs+fZFiiXaXnV3vE1NPfvxd1UsmGlWRiktGr7PjhYsprzt
YKL7QH5XOEgzAobKybwVTDzdtn0qZjuiMkwV2wLZ4N9DpSOsCOfG9xY80SJiqh1y
bgqPt5fJOEPQuVKMq0O0gSVdF7TaVLyS5BJzmfIBps8UQGmneQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:22 2026 by rpki-client