Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa
File: 0f301beb-477a-41c9-9c3a-14517ff754d9.roa (raw, json)
Hash identifier: lgfNg6P4NLyLzRIVkqEMKwZtQF56x2LrHRUzpw13AXg=
Subject key identifier: B2:E2:14:CF:A6:8E:32:17:7F:91:A0:20:68:E7:D1:9A:E0:A3:33:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2657AA58B4FFC1E749F46259DDD5FDE43E14F8A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa
Signing time: Mon 22 Jun 2026 02:40:05 +0000
ROA not before: Mon 22 Jun 2026 02:40:05 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:57:aa:58:b4:ff:c1:e7:49:f4:62:59:dd:d5:fd:e4:3e:14:f8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:05 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=e2f50e65009128642c8cc7f30661daa5bf4d9ca1a24e8e11d5d89815249363f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:b8:fb:98:0e:fd:d6:1f:14:4d:0d:08:24:
e1:a6:9e:85:c2:65:fc:97:f2:f1:97:c3:d6:bf:fc:
c7:d8:3e:c6:f1:ca:10:1a:2c:0d:6c:60:a8:92:19:
5c:59:da:a9:6e:63:2e:da:47:a7:88:0d:3a:dc:ed:
30:73:58:db:a8:9d:56:0c:95:b9:c4:f4:fe:87:7f:
a4:49:62:55:71:95:c4:22:ae:81:68:8d:81:de:cc:
9a:99:cb:35:2e:f4:ff:fd:67:e7:b4:67:02:80:7a:
5d:08:31:24:3e:ae:6d:6f:ec:34:d7:ae:0b:69:3a:
ee:2c:5e:ae:f9:ce:98:cc:94:c9:98:4f:e7:90:40:
54:4b:2a:0c:de:7b:d3:6f:fe:08:fd:2e:77:da:09:
49:10:73:2b:7a:8d:8d:27:ff:66:c6:d9:40:80:26:
57:35:bb:92:9c:03:93:f0:29:00:8f:2a:0b:1e:9d:
78:b9:1d:e4:a8:40:b7:9a:98:61:12:90:b6:83:d2:
34:2c:10:e0:78:83:5a:05:40:3e:c5:d0:19:25:b0:
55:ef:72:af:a6:03:11:6c:69:2c:d5:2d:6d:b2:26:
2c:2b:c3:ad:3a:82:6f:4e:88:15:6a:86:56:5a:ff:
73:d3:3b:ab:9b:2f:86:46:ca:a1:73:11:24:25:3a:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:14:CF:A6:8E:32:17:7F:91:A0:20:68:E7:D1:9A:E0:A3:33:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:2040::/48
Signature Algorithm: sha256WithRSAEncryption
be:f2:c7:98:fd:2d:6f:25:be:84:be:37:d6:be:b1:b9:b5:5e:
8a:1d:de:aa:52:09:a5:11:f8:aa:2d:fb:d6:13:e3:f1:04:64:
94:07:6b:12:f1:b0:2b:38:1b:62:32:df:8c:04:4f:aa:29:71:
a7:79:1d:04:c4:60:7c:a5:3a:7f:ef:53:bc:c7:bf:ef:33:d7:
48:09:35:11:2d:49:ba:1d:e6:30:6d:a5:10:21:6c:17:07:aa:
18:3c:dc:e6:7b:86:7a:d9:45:70:fe:07:f8:c4:a9:61:5b:bd:
ab:ab:17:42:e1:98:18:d4:7b:5a:f4:96:80:2f:c2:f8:e4:af:
2f:54:3c:5a:b3:b3:f4:d8:bf:82:33:21:f6:32:1e:2c:58:b2:
87:a3:ef:d7:f6:1e:63:3b:b2:fb:80:cc:5d:52:7f:2d:7c:07:
e3:74:be:0d:38:e4:79:b9:20:49:f3:28:e8:4c:66:41:7c:ff:
40:ee:39:6e:59:fb:3f:e5:f5:3d:15:4f:40:81:45:47:c5:c8:
d3:99:d1:88:d8:b9:32:cf:49:6b:19:24:4a:13:bd:7f:b2:c1:
91:90:43:72:cf:72:58:4f:63:a1:6e:02:47:0f:37:a3:52:b8:
fe:55:21:26:9b:fd:9a:1d:d0:d3:d3:54:11:ab:34:31:c1:d9:
71:1d:e8:91
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUJleqWLT/wedJ9GJZ3dX95D4U+KQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA2MjIwMjQwMDVaFw0yNjA5MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGUyZjUwZTY1MDA5MTI4NjQyYzhjYzdmMzA2NjFkYWE1YmY0ZDljYTFhMjRl
OGUxMWQ1ZDg5ODE1MjQ5MzYzZjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL7NuPuYDv3WHxRNDQgk4aaehcJl/Jfy8ZfD1r/8x9g+xvHKEBosDWxgqJIZ
XFnaqW5jLtpHp4gNOtztMHNY26idVgyVucT0/od/pEliVXGVxCKugWiNgd7MmpnL
NS70//1n57RnAoB6XQgxJD6ubW/sNNeuC2k67ixervnOmMyUyZhP55BAVEsqDN57
02/+CP0ud9oJSRBzK3qNjSf/ZsbZQIAmVzW7kpwDk/ApAI8qCx6deLkd5KhAt5qY
YRKQtoPSNCwQ4HiDWgVAPsXQGSWwVe9yr6YDEWxpLNUtbbImLCvDrTqCb06IFWqG
Vlr/c9M7q5svhkbKoXMRJCU6eWMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSy4hTP
po4yF3+RoCBo59Ga4KMzqzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGYzMDFiZWItNDc3YS00MWM5LTljM2EtMTQ1MTdmZjc1NGQ5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gsg
QDANBgkqhkiG9w0BAQsFAAOCAQEAvvLHmP0tbyW+hL431r6xubVeih3eqlIJpRH4
qi371hPj8QRklAdrEvGwKzgbYjLfjARPqilxp3kdBMRgfKU6f+9TvMe/7zPXSAk1
ES1Juh3mMG2lECFsFweqGDzc5nuGetlFcP4H+MSpYVu9q6sXQuGYGNR7WvSWgC/C
+OSvL1Q8WrOz9Ni/gjMh9jIeLFiyh6Pv1/YeYzuy+4DMXVJ/LXwH43S+DTjkebkg
SfMo6ExmQXz/QO45bln7P+X1PRVPQIFFR8XI05nRiNi5Ms9JaxkkShO9f7LBkZBD
cs9yWE9joW4CRw83o1K4/lUhJpv9mh3Q09NUEas0McHZcR3okQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:33 2026 by rpki-client