Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca11d15-d37b-4319-9b90-152e667f85ef.roa
File: 0ca11d15-d37b-4319-9b90-152e667f85ef.roa (raw, json)
Hash identifier: TW0qzH2Qa8rN28+Nfqc+FNoXWxqx6n8X5mgaSxGnAXQ=
Subject key identifier: 94:BA:DA:8F:29:41:8B:18:EB:E2:5B:14:38:4E:87:71:AE:B1:51:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C75BC23FABC4F72F43CA3BAFC3E1210BEC30583
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca11d15-d37b-4319-9b90-152e667f85ef.roa
Signing time: Thu 16 Jul 2026 00:30:17 +0000
ROA not before: Thu 16 Jul 2026 00:30:17 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:75:bc:23:fa:bc:4f:72:f4:3c:a3:ba:fc:3e:12:10:be:c3:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:30:17 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=399c8c93dc0be083930826962dadf2a462a07841ca86eca472fbb59a8412708e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:7b:7c:45:77:a3:75:85:f0:0d:ee:63:ed:
62:aa:11:1a:91:ae:09:87:e1:8d:86:9b:c0:e2:78:
20:4d:18:32:62:49:2c:ca:0b:07:8f:ee:a2:88:ad:
3e:bc:e0:d1:db:8d:8f:39:0b:4a:6a:08:2b:b0:c2:
af:e8:a2:52:9b:ff:b5:1d:72:ba:39:9a:68:c8:ca:
c5:83:c9:cc:c0:5d:7d:6e:76:8b:32:50:33:17:bf:
ad:0a:b2:cf:f6:30:d2:02:2b:b2:49:31:8e:7f:ed:
57:82:37:a0:6c:63:88:11:f2:b9:0c:56:41:c0:3d:
1b:b5:a0:de:c5:a5:44:d5:ae:73:3b:4f:e2:d1:a7:
24:04:a8:04:89:31:c4:85:5e:66:cb:a3:aa:19:fa:
98:47:b5:f2:3d:b5:b9:87:3d:62:1e:3a:7b:ff:55:
c3:f9:39:6e:49:73:6d:ad:a9:d8:48:44:f5:6c:46:
4d:64:d5:61:c7:f5:ee:00:5a:89:14:81:6a:f5:3a:
41:2a:c7:95:83:d1:4b:cf:a0:49:3a:b8:eb:5b:18:
1f:7b:04:11:23:56:9e:1f:fb:92:f6:3d:2b:20:9d:
cb:e1:a3:0c:58:46:81:a1:74:d7:75:91:cc:76:45:
da:8f:e1:d5:b6:d6:25:69:93:f7:95:85:89:0f:8f:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:DA:8F:29:41:8B:18:EB:E2:5B:14:38:4E:87:71:AE:B1:51:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca11d15-d37b-4319-9b90-152e667f85ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:6000::/40
Signature Algorithm: sha256WithRSAEncryption
a4:24:0a:f4:10:ad:ca:31:be:cb:f0:9a:fe:4d:35:a9:5d:01:
d0:c2:fd:f2:7d:58:07:d4:9e:1b:26:b7:0f:52:87:56:fd:a7:
ea:91:59:fb:5c:93:38:42:e1:fa:f0:2f:45:ca:46:27:de:c2:
41:f5:08:ad:7a:2f:47:f1:e6:8b:a3:2c:9b:8a:0f:5a:27:ce:
ad:2d:eb:23:bb:a4:39:e3:0a:b5:00:9b:05:22:19:73:a2:30:
ca:97:0b:d8:7c:35:6f:64:bc:39:d6:3c:d0:69:0b:6a:c9:42:
83:38:db:24:62:9a:43:46:22:c2:63:a8:dd:92:6e:b9:5b:93:
29:d7:00:55:35:83:67:d7:d1:81:dd:2b:d0:ff:b3:0e:09:7a:
1c:b0:2d:d9:53:ab:ba:1a:35:7b:c5:35:72:bf:94:d7:47:60:
0a:12:72:69:da:2a:db:e2:3d:4b:a4:91:21:87:90:2a:6e:89:
77:54:03:85:e4:e1:e2:1b:49:c1:24:86:f8:aa:ff:9b:21:fc:
52:59:9f:68:fa:ea:a7:40:98:ce:98:70:45:c1:2e:e2:59:5a:
1a:20:9d:e1:14:c4:44:50:c2:77:a6:ee:bb:ae:c0:40:10:ea:
44:6f:96:fe:be:3c:1f:5e:d3:c4:1a:cb:70:d1:58:bb:f4:f9:
ac:5c:a3:ab
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXHW8I/q8T3L0PKO6/D4SEL7DBYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MTYwMDMwMTdaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDM5OWM4YzkzZGMwYmUwODM5MzA4MjY5NjJkYWRmMmE0NjJhMDc4NDFjYTg2
ZWNhNDcyZmJiNTlhODQxMjcwOGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+2e3xFd6N1hfAN7mPtYqoRGpGuCYfhjYabwOJ4IE0YMmJJLMoLB4/uooit
Przg0duNjzkLSmoIK7DCr+iiUpv/tR1yujmaaMjKxYPJzMBdfW52izJQMxe/rQqy
z/Yw0gIrskkxjn/tV4I3oGxjiBHyuQxWQcA9G7Wg3sWlRNWucztP4tGnJASoBIkx
xIVeZsujqhn6mEe18j21uYc9Yh46e/9Vw/k5bklzba2p2EhE9WxGTWTVYcf17gBa
iRSBavU6QSrHlYPRS8+gSTq461sYH3sEESNWnh/7kvY9KyCdy+GjDFhGgaF013WR
zHZF2o/h1bbWJWmT95WFiQ+P4ssCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSUutqP
KUGLGOviWxQ4TodxrrFRNDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGNhMTFkMTUtZDM3Yi00MzE5LTliOTAtMTUyZTY2N2Y4NWVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G1g
MA0GCSqGSIb3DQEBCwUAA4IBAQCkJAr0EK3KMb7L8Jr+TTWpXQHQwv3yfVgH1J4b
JrcPUodW/afqkVn7XJM4QuH68C9FykYn3sJB9Qitei9H8eaLoyybig9aJ86tLesj
u6Q54wq1AJsFIhlzojDKlwvYfDVvZLw51jzQaQtqyUKDONskYppDRiLCY6jdkm65
W5Mp1wBVNYNn19GB3SvQ/7MOCXocsC3ZU6u6GjV7xTVyv5TXR2AKEnJp2irb4j1L
pJEhh5Aqbol3VAOF5OHiG0nBJIb4qv+bIfxSWZ9o+uqnQJjOmHBFwS7iWVoaIJ3h
FMREUMJ3pu67rsBAEOpEb5b+vjwfXtPEGstw0Vi79PmsXKOr
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:47 2026 by rpki-client