Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1946a796-f152-4691-8227-f2145dd513b5.roa
File: 1946a796-f152-4691-8227-f2145dd513b5.roa (raw, json)
Hash identifier: XhOGenCAYs15+vGFIDqnNPpod0OhzMWKkN5u/AFK18o=
Subject key identifier: A9:C7:F5:1C:8E:8D:B7:2C:40:11:61:22:45:BE:49:2D:65:3B:FF:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F736BD15D726709E96466E877A92C05E1A230D8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1946a796-f152-4691-8227-f2145dd513b5.roa
Signing time: Sun 05 Jul 2026 00:00:05 +0000
ROA not before: Sun 05 Jul 2026 00:00:05 +0000
ROA not after: Sat 03 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:1800::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:73:6b:d1:5d:72:67:09:e9:64:66:e8:77:a9:2c:05:e1:a2:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 5 00:00:05 2026 GMT
Not After : Oct 3 23:59:59 2026 GMT
Subject: serialNumber=34df45eda31502358189b11d2222170125e0cb6880e4080fab4812dd209dae99, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:00:51:39:f8:c9:7d:1c:23:3d:e0:5c:ca:
eb:2c:b7:05:df:82:4f:0b:86:c4:95:f5:e7:4b:61:
3e:64:f3:f4:db:2f:1f:95:96:38:3a:61:c1:95:e6:
3a:a0:19:3d:6c:ce:a7:f8:e5:85:14:dc:9b:75:60:
2c:a0:8a:84:9c:1b:c5:f4:fd:ee:ee:4c:fc:7f:da:
6e:47:57:cd:78:1e:79:e8:06:de:3a:22:a1:df:78:
a9:7e:43:36:14:12:25:02:55:d0:84:5c:78:79:8e:
fc:b0:21:44:c8:d7:09:bf:92:89:3f:63:38:12:44:
e5:99:bc:22:83:dc:36:c7:14:4e:51:ff:cf:23:75:
98:72:d3:6b:01:e1:bd:ab:0c:7e:8d:62:3d:f4:3d:
51:18:b5:57:74:02:49:d4:ce:a3:0a:af:ac:f7:82:
20:58:89:5e:62:28:4a:29:7a:5e:94:37:82:74:92:
32:60:7b:5d:fa:4b:1c:5c:5e:a3:66:94:a9:d0:7e:
a2:ba:64:7f:1d:58:49:67:07:b9:cb:be:07:28:8f:
24:54:52:44:a2:30:24:18:99:bf:11:a8:53:82:66:
f2:92:d5:a8:2f:d9:2c:fa:ea:a8:82:bf:2e:90:c4:
4b:43:95:4a:d7:24:e3:ab:23:2f:07:2e:0d:69:b7:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:F5:1C:8E:8D:B7:2C:40:11:61:22:45:BE:49:2D:65:3B:FF:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1946a796-f152-4691-8227-f2145dd513b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:1800::/37
Signature Algorithm: sha256WithRSAEncryption
64:b7:68:31:1e:b4:98:a1:ec:95:c2:c0:87:be:ed:38:42:bb:
b2:14:28:5d:91:f1:4e:11:31:24:e7:89:b6:6f:2c:53:24:7f:
e5:17:29:a8:a0:e4:28:64:32:9d:9e:4e:74:88:40:f0:61:d1:
30:fc:ff:3a:d0:b1:fa:d4:11:aa:d1:18:4e:8f:1d:24:02:39:
c6:f4:36:23:d8:b8:12:bd:b6:c6:2a:74:10:2e:47:bd:9d:15:
47:ff:11:af:77:02:f4:4c:3b:c6:a7:d4:1b:c2:ce:03:68:38:
f2:91:aa:63:54:b0:48:c7:21:b8:06:6e:b6:09:00:27:48:c0:
eb:11:03:8b:80:73:12:b3:35:9d:32:52:bd:fd:63:fb:d0:d8:
b2:7c:87:1f:45:a5:6f:f8:c8:b6:bb:9a:38:94:8b:28:13:04:
3a:9d:0e:36:59:51:6a:08:ba:58:0b:fe:f9:f1:a6:d2:f6:0b:
a3:08:69:ed:5a:1d:a2:55:ca:01:5a:d3:35:5c:05:72:5d:86:
be:63:10:fe:fb:29:78:18:9b:2f:d5:d6:62:3e:ef:fe:31:46:
cb:91:98:df:99:ab:0b:7f:ec:f8:a0:6b:1b:9d:d7:40:79:4b:
38:f8:6c:72:a2:33:51:42:a5:d1:88:c3:7e:eb:ad:a3:41:cf:
94:a0:80:2c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUX3Nr0V1yZwnpZGbod6ksBeGiMNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MDUwMDAwMDVaFw0yNjEwMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDM0ZGY0NWVkYTMxNTAyMzU4MTg5YjExZDIyMjIxNzAxMjVlMGNiNjg4MGU0
MDgwZmFiNDgxMmRkMjA5ZGFlOTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMK1AFE5+Ml9HCM94FzK6yy3Bd+CTwuGxJX150thPmTz9NsvH5WWODphwZXm
OqAZPWzOp/jlhRTcm3VgLKCKhJwbxfT97u5M/H/abkdXzXgeeegG3joiod94qX5D
NhQSJQJV0IRceHmO/LAhRMjXCb+SiT9jOBJE5Zm8IoPcNscUTlH/zyN1mHLTawHh
vasMfo1iPfQ9URi1V3QCSdTOowqvrPeCIFiJXmIoSil6XpQ3gnSSMmB7XfpLHFxe
o2aUqdB+orpkfx1YSWcHucu+ByiPJFRSRKIwJBiZvxGoU4Jm8pLVqC/ZLPrqqIK/
LpDES0OVStck46sjLwcuDWm3gYUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSpx/Uc
jo23LEARYSJFvkktZTv/9TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTk0NmE3OTYtZjE1Mi00NjkxLTgyMjctZjIxNDVkZDUxM2I1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0BwY
MA0GCSqGSIb3DQEBCwUAA4IBAQBkt2gxHrSYoeyVwsCHvu04QruyFChdkfFOETEk
54m2byxTJH/lFymooOQoZDKdnk50iEDwYdEw/P860LH61BGq0RhOjx0kAjnG9DYj
2LgSvbbGKnQQLke9nRVH/xGvdwL0TDvGp9Qbws4DaDjykapjVLBIxyG4Bm62CQAn
SMDrEQOLgHMSszWdMlK9/WP70NiyfIcfRaVv+Mi2u5o4lIsoEwQ6nQ42WVFqCLpY
C/758abS9gujCGntWh2iVcoBWtM1XAVyXYa+YxD++yl4GJsv1dZiPu/+MUbLkZjf
masLf+z4oGsbnddAeUs4+GxyojNRQqXRiMN+662jQc+UoIAs
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:02 2026 by rpki-client