Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json)
Hash identifier: o9C8rxRq9uMGINcfq806NIbx48v3byiE+54edcC2HoM=
Subject key identifier: 06:6E:F8:7E:55:13:C8:CA:91:C9:6D:42:F8:DB:A6:0D:05:F3:6E:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 152FF696BC5E768FCE18C4A4E293EF4E65035036
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
Signing time: Tue 19 May 2026 04:40:46 +0000
ROA not before: Tue 19 May 2026 04:40:46 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2f:f6:96:bc:5e:76:8f:ce:18:c4:a4:e2:93:ef:4e:65:03:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 04:40:46 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=89f000466d2604e211904221df1d43941d2fb573a7cabbcbb6807e0cc319c1ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:36:8c:41:0f:8a:35:20:5b:43:f5:4e:ae:
b4:2c:7e:05:a5:dc:8d:69:e2:fd:97:b5:9c:88:29:
57:f5:88:93:fc:37:59:6c:c4:24:2c:15:16:a6:01:
b2:25:0c:c0:85:b4:30:e7:aa:7f:36:29:1c:68:29:
b9:b1:31:b5:79:b9:15:75:6e:df:74:bc:e1:17:64:
8f:26:b0:ad:ff:01:48:66:5c:63:29:04:a8:b5:fa:
cb:20:22:ae:83:ab:aa:1c:e3:7f:4e:de:d8:96:98:
da:ff:2c:09:25:9b:af:d5:8f:6e:8c:fc:98:ab:1e:
57:35:f9:e3:d1:ac:fe:cd:c5:60:b0:54:d5:f4:b5:
4f:e7:b3:be:b7:f8:33:16:cc:dc:2c:35:1f:b9:83:
ea:e8:88:e3:2e:d3:b2:b8:c8:16:ef:96:9a:5f:dd:
05:63:0a:ef:fb:49:f7:04:d7:23:ed:9f:98:63:c7:
fd:e9:95:1a:98:e0:f8:02:07:c7:ad:7a:54:6c:e0:
72:62:3d:fe:0a:a7:a8:b1:6f:fd:b8:25:19:e6:c9:
63:1c:b5:44:b7:8e:72:98:29:04:37:c0:bf:04:1a:
bb:c1:bf:33:2d:7f:62:74:c7:29:26:3d:58:b1:29:
d2:b3:5d:58:76:77:89:72:58:cb:7a:4a:5e:03:bc:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:F8:7E:55:13:C8:CA:91:C9:6D:42:F8:DB:A6:0D:05:F3:6E:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
88:11:cc:22:7b:ef:ce:5d:b0:d2:73:aa:4c:0a:8e:45:8d:44:
80:7e:0e:b4:ad:08:c2:b8:4b:6e:dc:a7:f0:b6:06:04:02:78:
96:c9:95:9e:9f:ff:a8:00:1c:16:b2:2e:27:16:22:b0:3f:cb:
51:ab:0f:aa:f3:b3:ff:f4:56:45:ef:23:42:0a:05:9c:09:b2:
d8:1a:e2:2b:6d:5b:ec:9e:30:43:78:a7:9e:28:f1:e5:3f:76:
c5:dc:99:68:ee:f8:ff:50:a7:fe:2f:aa:a7:e2:af:d0:a3:00:
d7:83:6f:d4:ed:07:cc:4c:13:11:f1:4f:e6:62:b8:4b:dd:b2:
06:20:6e:20:35:03:ce:5e:62:11:79:1a:21:7c:8c:e9:bc:8c:
d9:19:9d:7d:26:48:7a:38:12:73:e8:1e:43:ba:ed:b9:c2:55:
63:e4:ed:c8:bd:a5:5b:53:18:d7:11:bf:5b:14:ff:74:62:ec:
80:c8:99:3d:6d:eb:37:b1:13:a1:a8:ba:d2:be:01:47:08:27:
da:0a:2e:8f:8d:5d:dc:0c:d2:3d:42:47:a3:ca:7c:d1:9b:da:
3b:33:78:f3:3f:f0:a6:5b:b8:67:a4:03:33:69:a3:a2:9e:9f:
16:f3:a9:d9:3d:8b:4e:e4:38:12:6a:9e:f2:2f:97:e4:33:48:
33:b0:71:a8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFS/2lrxedo/OGMSk4pPvTmUDUDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNDQwNDZaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDg5ZjAwMDQ2NmQyNjA0ZTIxMTkwNDIyMWRmMWQ0Mzk0MWQyZmI1NzNhN2Nh
YmJjYmI2ODA3ZTBjYzMxOWMxY2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANOmNoxBD4o1IFtD9U6utCx+BaXcjWni/Ze1nIgpV/WIk/w3WWzEJCwVFqYB
siUMwIW0MOeqfzYpHGgpubExtXm5FXVu33S84Rdkjyawrf8BSGZcYykEqLX6yyAi
roOrqhzjf07e2JaY2v8sCSWbr9WPboz8mKseVzX549Gs/s3FYLBU1fS1T+ezvrf4
MxbM3Cw1H7mD6uiI4y7TsrjIFu+Wml/dBWMK7/tJ9wTXI+2fmGPH/emVGpjg+AIH
x616VGzgcmI9/gqnqLFv/bglGebJYxy1RLeOcpgpBDfAvwQau8G/My1/YnTHKSY9
WLEp0rNdWHZ3iXJYy3pKXgO8WIUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQGbvh+
VRPIypHJbUL426YNBfNuHzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmZkYzNkYTEtMmVjNy00MTFlLTk1NTAtYjdjOTU2ZmI0NmRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G9A
MA0GCSqGSIb3DQEBCwUAA4IBAQCIEcwie+/OXbDSc6pMCo5FjUSAfg60rQjCuEtu
3KfwtgYEAniWyZWen/+oABwWsi4nFiKwP8tRqw+q87P/9FZF7yNCCgWcCbLYGuIr
bVvsnjBDeKeeKPHlP3bF3Jlo7vj/UKf+L6qn4q/QowDXg2/U7QfMTBMR8U/mYrhL
3bIGIG4gNQPOXmIReRohfIzpvIzZGZ19Jkh6OBJz6B5Duu25wlVj5O3IvaVbUxjX
Eb9bFP90YuyAyJk9bes3sROhqLrSvgFHCCfaCi6PjV3cDNI9QkejynzRm9o7M3jz
P/CmW7hnpAMzaaOinp8W86nZPYtO5DgSap7yL5fkM0gzsHGo
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:50 2026 by rpki-client