Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
File: 3c844715-62ed-456f-9c5c-b7ee56a1e984.roa (raw, json)
Hash identifier: f8gcSZ1aep0N6wT/f2DjfgRLSGdnMDGFo9Vd9tRU8QU=
Subject key identifier: D0:DC:1D:31:54:98:72:A2:20:9F:3E:33:91:64:00:E4:6B:AF:63:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79566CFF15E5824B0CDA58525792D75679D2D966
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
Signing time: Sat 02 May 2026 01:30:20 +0000
ROA not before: Sat 02 May 2026 01:30:20 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:56:6c:ff:15:e5:82:4b:0c:da:58:52:57:92:d7:56:79:d2:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:20 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=c5a7543ad5d47478dfdb4456f124fb8799bdc59ee5afee0236d47a4db059e8e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:59:37:2d:62:98:c9:85:ab:33:4c:7b:e7:
21:ff:48:f1:b0:04:e8:08:89:16:b8:3f:4e:db:77:
67:5c:c3:0b:a0:25:20:08:ed:33:f1:7a:55:91:f4:
6f:d2:04:b7:00:92:f7:c1:1b:fa:e8:6a:29:7b:a4:
4d:48:a0:a7:62:9c:21:0d:45:d2:5c:89:41:02:a5:
8c:99:13:dd:28:7c:08:e5:df:dc:95:a3:7b:56:03:
09:a4:57:67:79:95:47:00:c5:c3:f8:fc:73:16:97:
2f:49:64:b3:24:03:2c:cb:db:37:39:2b:26:20:f8:
a1:97:5d:ed:d4:a2:3f:e1:89:95:8c:e3:61:ff:1e:
3b:a2:55:3b:62:75:ce:dd:ae:81:13:99:b0:9f:63:
0c:11:db:f0:25:0e:05:b5:e8:0e:af:2a:f7:7c:c2:
22:38:be:d8:f3:47:17:aa:e5:8d:b6:22:6e:16:5a:
67:5f:62:32:2a:3d:03:e9:0d:1e:65:bd:42:d3:03:
c3:94:99:07:8a:59:e3:da:2a:b8:d5:73:d7:35:aa:
ac:a6:b4:5b:a0:a4:41:c1:62:e2:ea:26:ef:5e:a6:
6b:91:3c:13:ed:da:13:6d:ce:45:68:38:45:b7:91:
64:f6:1f:be:6d:af:5c:c2:ca:a8:a6:4f:d2:ec:33:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:1D:31:54:98:72:A2:20:9F:3E:33:91:64:00:E4:6B:AF:63:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:5000::/40
Signature Algorithm: sha256WithRSAEncryption
02:9d:fc:e1:5e:40:c3:79:cd:6b:4e:34:7d:71:e6:84:df:2f:
cf:b5:4f:3e:88:0b:48:22:2a:34:70:7f:c5:31:f2:e1:28:97:
e7:f8:c5:86:9e:60:cb:fa:65:b7:19:19:1f:eb:ea:a9:7b:27:
c2:e1:c9:1c:d5:64:e0:41:81:4c:a8:82:4c:f7:e0:d0:79:a9:
dc:dc:c5:ed:12:73:ce:bf:04:28:6d:75:72:08:ec:cc:00:bc:
cb:3c:4b:b1:1d:53:eb:cd:31:ab:13:5d:9f:37:c4:1f:e2:7d:
f7:84:26:2b:50:f8:e5:a0:7b:55:b5:c3:ac:84:fd:85:b2:54:
0b:53:14:f7:94:f1:37:21:40:da:99:f0:9e:0e:fa:7e:fb:92:
4a:2b:67:24:08:e1:33:b6:e7:52:d8:73:05:ad:62:9a:9c:d3:
85:d2:aa:aa:8f:75:07:17:b5:32:79:e3:5f:39:5a:db:29:22:
0c:c8:af:dd:89:e8:9b:59:00:91:ef:f3:82:3c:91:de:2a:8d:
31:27:58:e5:85:8c:86:83:9e:b3:99:ac:f9:80:58:2a:e3:71:
ee:ee:6b:a6:ef:21:4d:c2:6b:99:62:09:a5:67:dd:80:d5:eb:
b2:9e:98:dd:a0:20:b3:a2:25:9d:14:2e:d9:d0:30:00:23:32:
4e:dc:b7:f2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeVZs/xXlgksM2lhSV5LXVnnS2WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDIwMTMwMjBaFw0yNjA3MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGM1YTc1NDNhZDVkNDc0NzhkZmRiNDQ1NmYxMjRmYjg3OTliZGM1OWVlNWFm
ZWUwMjM2ZDQ3YTRkYjA1OWU4ZTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAzWTctYpjJhaszTHvnIf9I8bAE6AiJFrg/Ttt3Z1zDC6AlIAjtM/F6VZH0
b9IEtwCS98Eb+uhqKXukTUigp2KcIQ1F0lyJQQKljJkT3Sh8COXf3JWje1YDCaRX
Z3mVRwDFw/j8cxaXL0lksyQDLMvbNzkrJiD4oZdd7dSiP+GJlYzjYf8eO6JVO2J1
zt2ugROZsJ9jDBHb8CUOBbXoDq8q93zCIji+2PNHF6rljbYibhZaZ19iMio9A+kN
HmW9QtMDw5SZB4pZ49oquNVz1zWqrKa0W6CkQcFi4uom716ma5E8E+3aE23ORWg4
RbeRZPYfvm2vXMLKqKZP0uwzyf0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTQ3B0x
VJhyoiCfPjORZADka69jTTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2M4NDQ3MTUtNjJlZC00NTZmLTljNWMtYjdlZTU2YTFlOTg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GpQ
MA0GCSqGSIb3DQEBCwUAA4IBAQACnfzhXkDDec1rTjR9ceaE3y/PtU8+iAtIIio0
cH/FMfLhKJfn+MWGnmDL+mW3GRkf6+qpeyfC4ckc1WTgQYFMqIJM9+DQeanc3MXt
EnPOvwQobXVyCOzMALzLPEuxHVPrzTGrE12fN8Qf4n33hCYrUPjloHtVtcOshP2F
slQLUxT3lPE3IUDamfCeDvp++5JKK2ckCOEztudS2HMFrWKanNOF0qqqj3UHF7Uy
eeNfOVrbKSIMyK/dieibWQCR7/OCPJHeKo0xJ1jlhYyGg56zmaz5gFgq43Hu7mum
7yFNwmuZYgmlZ92A1euynpjdoCCzoiWdFC7Z0DAAIzJO3Lfy
-----END CERTIFICATE-----
Generated at Tue May 12 23:33:21 2026 by rpki-client