Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
File: 53f71feb-77ff-438f-8d1f-e553194144d2.roa (raw, json)
Hash identifier: laGlPYDs0N7jEXUykqolh9WEPRsKUwLqLIedHw45k40=
Subject key identifier: 51:14:8B:AA:99:26:CB:E3:76:F5:C9:6A:8F:8D:B9:C7:8C:91:23:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67D00A674DE7F9E12F945DCE3F31BAA8676C1280
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
Signing time: Mon 04 May 2026 15:30:38 +0000
ROA not before: Mon 04 May 2026 15:30:38 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d0:0a:67:4d:e7:f9:e1:2f:94:5d:ce:3f:31:ba:a8:67:6c:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:30:38 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=b61b84f9b0f4ebc6935b23a084c5c91709bcf9dfb04df754bb4dc51c19a00988, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:b5:7c:7a:21:90:b0:9a:0d:a3:d7:c1:7b:
bd:74:74:85:70:38:9e:92:f3:75:4f:2f:63:54:a2:
bf:86:47:70:9a:9b:c8:d7:6e:e7:3e:ed:b2:08:85:
5d:ee:83:d8:b0:6c:ee:2b:07:d3:19:09:7c:e4:07:
60:f5:dd:17:dd:0f:e4:aa:b8:8a:19:2a:4d:07:e9:
d2:3b:f9:c1:d8:28:64:e3:94:11:38:60:ac:1b:d9:
20:43:86:72:48:f1:3f:13:66:da:61:4e:74:e1:b8:
6d:97:f8:f0:35:9a:02:af:df:aa:2b:de:f1:18:7e:
af:4b:66:18:5a:06:8f:be:09:fb:44:02:93:da:22:
4e:b9:5d:3f:88:12:10:f1:e0:51:e7:fb:c5:01:d8:
dc:f4:73:57:f7:05:8a:c0:24:73:f7:5a:64:16:29:
91:e9:68:e1:a3:38:ed:b2:a2:36:c9:78:7d:cf:82:
ce:b9:69:89:dd:f0:84:b3:29:ad:27:f4:fb:39:d4:
9d:a6:39:46:f9:6b:a8:21:69:78:94:ab:5b:b3:f0:
36:f6:37:11:bc:a2:ea:f7:89:94:01:ea:78:ec:d3:
4f:ac:90:bd:ef:ee:2c:02:19:ca:93:07:a1:61:8b:
e1:c3:f9:62:36:f4:fd:4f:21:a8:02:06:40:b6:f3:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:8B:AA:99:26:CB:E3:76:F5:C9:6A:8F:8D:B9:C7:8C:91:23:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4020::/48
Signature Algorithm: sha256WithRSAEncryption
21:ee:e4:eb:8d:53:d5:f9:9f:d2:ab:82:7d:4b:49:92:64:51:
77:0a:a1:0e:43:68:f7:5c:92:02:32:81:b5:7d:91:7a:a5:ff:
74:e2:a0:1d:ab:6a:5a:23:1a:8d:9a:30:3d:0b:83:4c:52:6e:
b6:63:67:d8:68:d7:4a:d6:db:f1:0e:48:9d:55:05:d7:b0:02:
e2:77:56:29:c0:72:37:0d:0c:82:9b:0f:7d:be:0e:14:d0:d8:
74:b0:9f:d0:f4:f3:24:37:3d:04:da:cb:9d:73:da:a7:77:18:
27:57:e5:74:fc:cc:45:6b:00:b6:1b:ed:9c:ac:37:af:0a:da:
03:50:4b:6f:98:49:07:1e:34:1e:17:af:a4:98:ac:c2:0d:f5:
89:42:33:60:62:8b:2d:3c:38:a4:a8:43:87:89:9b:69:7c:71:
1a:46:da:05:98:99:08:f5:97:34:c5:db:87:d7:4c:70:48:9e:
78:59:bc:fb:6a:9b:ea:4a:b3:ca:58:8e:34:a5:3e:07:ab:10:
2e:5c:e5:b0:5c:47:e8:ee:45:ae:33:60:d2:d3:20:b9:3f:9a:
08:a6:26:2d:3e:d7:1f:1d:73:56:13:6e:a1:34:60:6c:4c:9c:
07:8c:44:2e:95:88:9d:04:b2:bd:92:09:7c:20:ad:19:de:ec:
74:a2:83:21
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZ9AKZ03n+eEvlF3OPzG6qGdsEoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDQxNTMwMzhaFw0yNjA4MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQGI2MWI4NGY5YjBmNGViYzY5MzViMjNhMDg0YzVjOTE3MDliY2Y5ZGZiMDRk
Zjc1NGJiNGRjNTFjMTlhMDA5ODgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANh3tXx6IZCwmg2j18F7vXR0hXA4npLzdU8vY1Siv4ZHcJqbyNdu5z7tsgiF
Xe6D2LBs7isH0xkJfOQHYPXdF90P5Kq4ihkqTQfp0jv5wdgoZOOUEThgrBvZIEOG
ckjxPxNm2mFOdOG4bZf48DWaAq/fqive8Rh+r0tmGFoGj74J+0QCk9oiTrldP4gS
EPHgUef7xQHY3PRzV/cFisAkc/daZBYpkelo4aM47bKiNsl4fc+Czrlpid3whLMp
rSf0+znUnaY5RvlrqCFpeJSrW7PwNvY3Ebyi6veJlAHqeOzTT6yQve/uLAIZypMH
oWGL4cP5Yjb0/U8hqAIGQLbzC+MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRRFIuq
mSbL43b1yWqPjbnHjJEjtzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTNmNzFmZWItNzdmZi00MzhmLThkMWYtZTU1MzE5NDE0NGQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJA
IDANBgkqhkiG9w0BAQsFAAOCAQEAIe7k641T1fmf0quCfUtJkmRRdwqhDkNo91yS
AjKBtX2ReqX/dOKgHatqWiMajZowPQuDTFJutmNn2GjXStbb8Q5InVUF17AC4ndW
KcByNw0MgpsPfb4OFNDYdLCf0PTzJDc9BNrLnXPap3cYJ1fldPzMRWsAthvtnKw3
rwraA1BLb5hJBx40HhevpJiswg31iUIzYGKLLTw4pKhDh4mbaXxxGkbaBZiZCPWX
NMXbh9dMcEieeFm8+2qb6kqzyliONKU+B6sQLlzlsFxH6O5FrjNg0tMguT+aCKYm
LT7XHx1zVhNuoTRgbEycB4xELpWInQSyvZIJfCCtGd7sdKKDIQ==
-----END CERTIFICATE-----
Generated at Tue May 12 23:35:53 2026 by rpki-client