Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
File: 6fa185be-42e8-4c62-ba43-464d0598c2ee.roa (raw, json)
Hash identifier: rxuxlV+8nz7yzGJXJFJU8l9CzuGy7z25bUUMcfvKqUE=
Subject key identifier: 0E:7C:2D:AB:02:2E:AA:37:61:FE:13:00:53:3A:D4:0D:F5:BF:BE:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3010A39C792CC051F70FE048A47E5D9E11C35D5D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
Signing time: Mon 04 May 2026 15:30:37 +0000
ROA not before: Mon 04 May 2026 15:30:37 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:10:a3:9c:79:2c:c0:51:f7:0f:e0:48:a4:7e:5d:9e:11:c3:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 4 15:30:37 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=3cddbeaa5ca9cdd989d1a64baa4071f7b299250d8115ba6ed87f137d31ff5915, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:01:65:83:2e:ed:83:fe:a4:21:41:19:d5:
34:8b:14:05:e9:bf:3b:3c:a3:ff:05:84:42:79:78:
ba:64:fe:a9:35:f9:66:c7:db:10:0c:47:68:a4:54:
53:e3:de:d1:3d:74:20:52:88:38:b9:11:63:b1:e8:
a6:a1:e7:39:3b:a0:a2:c7:ce:50:6a:02:05:1b:35:
48:73:20:76:df:6b:ea:cc:25:b4:f0:9d:34:37:75:
25:aa:5d:23:7a:ff:f2:d2:04:99:94:3e:1a:85:8c:
e2:47:3c:fa:99:0d:2e:55:6e:53:74:d2:56:a0:2b:
8a:36:f7:88:a6:26:2f:b1:76:8c:1a:cc:23:a1:6e:
29:ab:03:f1:e3:e4:7e:b6:c5:d1:13:e3:6f:43:f7:
9a:dd:69:fd:c9:a0:a6:4f:9b:88:c2:61:2a:8b:b0:
51:a8:af:3b:85:2d:6a:52:20:23:f3:fa:f0:ff:98:
d3:01:b7:b3:73:29:56:39:0a:ad:b2:14:88:64:08:
25:f5:29:74:43:1c:a9:09:ca:2f:23:7d:dd:a6:b6:
4a:9a:03:6b:e8:de:1d:02:8c:34:4b:08:30:85:58:
87:91:56:ce:ff:26:c7:40:a7:59:c5:c1:89:16:16:
95:7a:c1:64:70:34:88:db:a3:01:9f:1b:79:7e:a2:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:2D:AB:02:2E:AA:37:61:FE:13:00:53:3A:D4:0D:F5:BF:BE:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b080::/46
Signature Algorithm: sha256WithRSAEncryption
89:8c:14:c6:0f:e9:db:47:0f:f2:c0:1a:b9:5a:90:e3:89:d4:
31:c2:e9:93:37:44:98:17:b1:63:39:51:4e:c8:22:f4:70:52:
5e:62:ce:83:26:7f:ee:14:b9:8b:8d:35:ba:34:c1:46:f6:73:
59:bd:0c:65:d8:58:6c:3a:7c:7c:6b:4d:72:b1:e2:ad:6e:1c:
07:13:00:df:13:60:1f:0b:21:90:cd:6a:f5:83:34:fd:41:b0:
cb:8e:8b:31:3f:42:e1:8f:9a:a6:40:53:2c:27:53:d0:29:25:
43:59:6d:b1:46:80:6e:c1:9d:dd:df:c4:88:78:52:54:8b:69:
d1:d8:74:bf:21:c6:1b:6a:30:09:21:d6:c2:c1:12:27:1c:0f:
42:21:d1:31:fa:17:e2:e3:18:21:3f:a9:4a:a0:9e:60:2e:e6:
1b:d5:cf:03:90:39:3b:77:39:a8:49:84:e8:d1:c0:f9:10:a6:
83:f9:2e:3c:31:65:26:bc:ee:2e:6d:d7:4a:28:63:bd:bf:5a:
ff:bc:9c:fe:18:2b:57:67:69:3a:a5:84:f1:92:95:b5:51:f7:
23:77:e2:55:31:95:7b:d2:b1:06:65:09:ed:9a:47:23:35:91:
ec:9e:c9:85:0e:2b:a9:bb:8b:fa:2d:f2:41:a5:c0:00:0f:3e:
59:d3:b2:ff
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMBCjnHkswFH3D+BIpH5dnhHDXV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDQxNTMwMzdaFw0yNjA4MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDNjZGRiZWFhNWNhOWNkZDk4OWQxYTY0YmFhNDA3MWY3YjI5OTI1MGQ4MTE1
YmE2ZWQ4N2YxMzdkMzFmZjU5MTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANuhAWWDLu2D/qQhQRnVNIsUBem/Ozyj/wWEQnl4umT+qTX5ZsfbEAxHaKRU
U+Pe0T10IFKIOLkRY7HopqHnOTugosfOUGoCBRs1SHMgdt9r6swltPCdNDd1Japd
I3r/8tIEmZQ+GoWM4kc8+pkNLlVuU3TSVqArijb3iKYmL7F2jBrMI6FuKasD8ePk
frbF0RPjb0P3mt1p/cmgpk+biMJhKouwUaivO4UtalIgI/P68P+Y0wG3s3MpVjkK
rbIUiGQIJfUpdEMcqQnKLyN93aa2SpoDa+jeHQKMNEsIMIVYh5FWzv8mx0CnWcXB
iRYWlXrBZHA0iNujAZ8beX6iCd0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQOfC2r
Ai6qN2H+EwBTOtQN9b++4TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmZhMTg1YmUtNDJlOC00YzYyLWJhNDMtNDY0ZDA1OThjMmVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HOw
gDANBgkqhkiG9w0BAQsFAAOCAQEAiYwUxg/p20cP8sAauVqQ44nUMcLpkzdEmBex
YzlRTsgi9HBSXmLOgyZ/7hS5i401ujTBRvZzWb0MZdhYbDp8fGtNcrHirW4cBxMA
3xNgHwshkM1q9YM0/UGwy46LMT9C4Y+apkBTLCdT0CklQ1ltsUaAbsGd3d/EiHhS
VItp0dh0vyHGG2owCSHWwsESJxwPQiHRMfoX4uMYIT+pSqCeYC7mG9XPA5A5O3c5
qEmE6NHA+RCmg/kuPDFlJrzuLm3XSihjvb9a/7yc/hgrV2dpOqWE8ZKVtVH3I3fi
VTGVe9KxBmUJ7ZpHIzWR7J7JhQ4rqbuL+i3yQaXAAA8+WdOy/w==
-----END CERTIFICATE-----
Generated at Tue May 12 23:13:07 2026 by rpki-client