Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa
File: 5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa (raw, json)
Hash identifier: Q7q75n4iSNybg0MvanC2qGFTv/wjfdBM0L7JKFTP5Lg=
Subject key identifier: 4F:04:42:D8:07:38:C8:B6:3D:F0:A7:B5:51:5D:9D:55:D9:13:D1:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0717424BAD0E9A5DDD668642890B5AC52DAE82F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa
Signing time: Fri 08 May 2026 03:21:15 +0000
ROA not before: Fri 08 May 2026 03:21:15 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:17:42:4b:ad:0e:9a:5d:dd:66:86:42:89:0b:5a:c5:2d:ae:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:21:15 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=4fcbcc5aaff1d9c770da8fb96ca0b9caa3db5fdb4230d7d4fb3661cdee291767, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:f7:ae:97:1b:f1:ed:62:7e:ba:d8:c7:5f:
23:bc:70:ea:5d:7e:80:75:85:54:cd:37:5d:e3:3b:
a9:ff:dd:37:91:7d:a2:4e:b6:9a:52:a8:83:95:d2:
02:72:88:ed:ae:ed:ce:e6:98:e1:67:a7:b9:c1:a5:
03:9e:b8:dd:70:04:57:49:54:c3:61:5c:cc:cb:48:
4a:db:6a:20:92:77:fd:09:e1:31:5e:22:61:93:10:
82:11:57:9b:1a:6e:7e:d6:dc:7a:be:e4:f5:b7:4b:
af:45:ac:3d:5b:b9:5c:a8:c8:29:26:8c:98:ff:b9:
b0:f2:af:6b:64:4c:8e:19:5d:6b:12:b6:aa:ef:93:
27:17:b9:3d:36:9a:b9:6a:b6:74:eb:1c:00:57:9b:
66:a7:f2:a7:fd:fe:42:d1:c4:3f:b2:31:a0:41:28:
9c:67:7f:c9:36:16:51:bc:8e:ef:70:14:73:c6:6b:
66:1a:85:2e:5f:41:52:f3:3b:42:23:e0:fc:60:1d:
47:99:4e:40:fc:52:ae:26:b6:83:1f:b5:e6:05:07:
5e:25:77:dc:54:29:4b:c4:21:42:43:ee:aa:a2:2f:
45:78:b3:25:2c:a8:b6:3c:c0:40:ed:39:4a:83:e4:
bd:3a:ee:a6:d0:9d:a7:2d:a2:4a:8a:eb:01:bf:15:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:42:D8:07:38:C8:B6:3D:F0:A7:B5:51:5D:9D:55:D9:13:D1:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:9000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:6d:0f:b2:78:05:07:cc:0d:c6:08:13:8e:7e:45:02:3b:7b:
31:07:f6:42:85:e4:a4:7a:ef:30:8c:24:26:2b:ee:7a:54:5a:
96:e9:46:ad:5b:ed:86:e0:0f:cd:23:ec:74:e9:68:30:e9:42:
1f:8f:07:c2:e5:76:d5:20:eb:93:20:9f:fd:47:c6:8f:33:d6:
73:7b:e9:67:9b:ef:66:0f:fd:f6:47:ac:2b:f0:db:a0:35:30:
cc:86:6f:f4:aa:b9:27:ed:c7:13:2f:9d:23:66:ac:bc:61:ff:
aa:26:75:9d:46:5a:b6:de:21:a2:bc:93:23:1f:5d:c4:72:24:
c4:c2:e6:0d:28:3b:d8:c4:7e:ef:40:f5:5c:6c:3b:28:fd:03:
23:e3:cd:e9:22:08:df:43:0e:27:da:75:59:1a:30:bd:53:a9:
58:d1:cb:2d:79:70:a4:8e:52:a9:c0:24:33:ce:53:69:ba:d3:
28:55:4b:60:83:1c:92:e1:48:1b:99:5d:d0:93:52:41:23:2e:
27:de:5e:43:3e:0b:3b:76:74:4c:11:8a:72:41:61:57:8c:37:
a6:70:7e:4f:07:ce:1e:52:9b:74:9b:0a:27:df:b5:5f:3e:9f:
eb:fa:fa:79:3a:cd:15:d4:6b:e2:6e:e1:8f:33:ba:ee:c2:96:
ff:a3:b6:b9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBxdCS60Oml3dZoZCiQtaxS2ugvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDgwMzIxMTVaFw0yNjA4MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDRmY2JjYzVhYWZmMWQ5Yzc3MGRhOGZiOTZjYTBiOWNhYTNkYjVmZGI0MjMw
ZDdkNGZiMzY2MWNkZWUyOTE3NjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJVE966XG/HtYn662MdfI7xw6l1+gHWFVM03XeM7qf/dN5F9ok62mlKog5XS
AnKI7a7tzuaY4WenucGlA5643XAEV0lUw2FczMtISttqIJJ3/QnhMV4iYZMQghFX
mxpuftbcer7k9bdLr0WsPVu5XKjIKSaMmP+5sPKva2RMjhldaxK2qu+TJxe5PTaa
uWq2dOscAFebZqfyp/3+QtHEP7IxoEEonGd/yTYWUbyO73AUc8ZrZhqFLl9BUvM7
QiPg/GAdR5lOQPxSria2gx+15gUHXiV33FQpS8QhQkPuqqIvRXizJSyotjzAQO05
SoPkvTruptCdpy2iSorrAb8VLjECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRPBELY
BzjItj3wp7VRXZ1V2RPRojAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWQzN2RjMTUtMTIyNC00OTAxLWFhYjEtN2Y3ZjMwZmU2MWM5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FmQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAPbQ+yeAUHzA3GCBOOfkUCO3sxB/ZCheSkeu8w
jCQmK+56VFqW6UatW+2G4A/NI+x06Wgw6UIfjwfC5XbVIOuTIJ/9R8aPM9Zze+ln
m+9mD/32R6wr8NugNTDMhm/0qrkn7ccTL50jZqy8Yf+qJnWdRlq23iGivJMjH13E
ciTEwuYNKDvYxH7vQPVcbDso/QMj483pIgjfQw4n2nVZGjC9U6lY0csteXCkjlKp
wCQzzlNputMoVUtggxyS4UgbmV3Qk1JBIy4n3l5DPgs7dnRMEYpyQWFXjDemcH5P
B84eUpt0mwon37VfPp/r+vp5Os0V1GvibuGPM7ruwpb/o7a5
-----END CERTIFICATE-----
Generated at Tue May 12 23:17:45 2026 by rpki-client