Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
File: 73ae3aed-406c-4215-aaab-cbe4f0a30441.roa (raw, json)
Hash identifier: y10e9ivP1liI9C5LEncpQMuve0uc+++W49TzP3eFqCY=
Subject key identifier: 10:73:7F:96:C1:36:78:65:C6:DC:1C:B2:49:D8:1D:07:DC:FC:EF:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69924F34602188DB7DB26F2D4DC3922E9A9B5253
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
Signing time: Thu 25 Jun 2026 00:00:04 +0000
ROA not before: Thu 25 Jun 2026 00:00:04 +0000
ROA not after: Wed 23 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:92:4f:34:60:21:88:db:7d:b2:6f:2d:4d:c3:92:2e:9a:9b:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 25 00:00:04 2026 GMT
Not After : Sep 23 23:59:59 2026 GMT
Subject: serialNumber=e7cb479f4813cf624643021459f67ee1fce0fdb6dcd6eacf099a54b4257cfb43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:47:33:1f:83:6a:75:d4:ba:0f:92:40:96:
5e:a8:27:aa:e8:b3:52:15:97:32:e7:9e:d9:71:85:
52:08:94:f8:0c:5d:de:42:3d:36:cb:a2:75:7b:f5:
36:fa:26:9c:e0:26:45:75:7f:56:09:f6:6d:3c:12:
30:a8:e8:48:58:cc:02:8c:0a:b5:07:a8:58:47:5a:
39:e4:bd:a8:d7:b9:cc:4f:36:f1:c5:27:b2:50:b4:
8d:d4:17:44:f6:70:57:a2:43:bc:3b:b7:5b:c7:55:
da:b6:11:e6:cb:52:b7:4d:18:ef:0f:fb:7a:e4:25:
2e:a8:04:77:b2:85:8e:2d:b3:45:ce:c3:d6:4a:5d:
6f:65:99:ac:df:26:97:e6:f0:2d:6a:60:56:6a:9c:
0e:8d:52:3f:f9:a8:b5:cd:95:21:f4:7f:85:3d:c2:
5c:0a:95:63:cc:01:42:1f:91:a9:1d:58:83:17:85:
4b:69:64:7f:44:af:c6:f1:41:89:05:30:d9:3c:16:
c0:c1:d9:54:32:05:e9:9a:2c:e9:32:6c:b8:37:43:
d1:bb:59:4f:1b:32:cb:88:5f:b4:d5:c0:c5:ef:23:
bf:1a:f0:19:c5:f0:a5:f6:b9:d6:6b:13:4a:86:ff:
7d:dc:c4:ac:2f:3a:83:64:7b:dc:1a:94:a2:97:a6:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:7F:96:C1:36:78:65:C6:DC:1C:B2:49:D8:1D:07:DC:FC:EF:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:1000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:9b:3c:57:54:e5:5a:0a:74:c7:03:a2:26:61:5a:7d:56:7e:
13:28:01:55:51:9a:84:9a:aa:a3:9e:fb:eb:ce:7e:1e:09:12:
74:5f:30:f1:d4:f2:d0:0e:98:08:f8:1f:3b:74:1c:30:67:82:
2c:14:b4:9e:d4:ed:53:e1:30:b8:f1:60:a6:f6:91:56:f8:ce:
ba:71:d2:d3:6f:88:50:5e:a8:16:2d:7f:0d:37:67:66:39:04:
16:32:31:ee:f2:08:0f:92:e5:cc:be:32:0a:34:a8:a9:13:36:
b5:23:8f:92:9e:93:e5:c9:6c:04:0e:20:43:a1:ca:b2:9d:c2:
5e:d7:a8:eb:62:fe:06:b8:ca:de:91:4c:e0:fb:19:98:09:b8:
fe:b3:35:b2:2e:dc:c0:f2:fb:6f:59:be:b9:bc:72:6b:31:fb:
90:c6:06:4d:9d:f7:2d:55:0d:12:5e:49:97:ca:62:47:42:6c:
fe:2b:d0:70:dd:2e:89:b4:8b:88:d8:3b:a9:dc:c2:a2:52:da:
f7:b6:36:7d:b1:da:3d:be:39:be:1f:76:d8:b3:01:d6:cc:03:
b1:4a:3b:b8:38:9a:f7:c0:d7:51:8c:e1:4e:6c:98:c5:fe:52:
61:0e:f2:5a:37:7e:ea:53:8b:82:34:9a:6a:be:5e:b7:95:88:
32:d5:36:31
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaZJPNGAhiNt9sm8tTcOSLpqbUlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA2MjUwMDAwMDRaFw0yNjA5MjMyMzU5NTlaMHoxSTBHBgNV
BAUTQGU3Y2I0NzlmNDgxM2NmNjI0NjQzMDIxNDU5ZjY3ZWUxZmNlMGZkYjZkY2Q2
ZWFjZjA5OWE1NGI0MjU3Y2ZiNDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO07RzMfg2p11LoPkkCWXqgnquizUhWXMuee2XGFUgiU+Axd3kI9NsuidXv1
NvomnOAmRXV/Vgn2bTwSMKjoSFjMAowKtQeoWEdaOeS9qNe5zE828cUnslC0jdQX
RPZwV6JDvDu3W8dV2rYR5stSt00Y7w/7euQlLqgEd7KFji2zRc7D1kpdb2WZrN8m
l+bwLWpgVmqcDo1SP/motc2VIfR/hT3CXAqVY8wBQh+RqR1YgxeFS2lkf0SvxvFB
iQUw2TwWwMHZVDIF6Zos6TJsuDdD0btZTxsyy4hftNXAxe8jvxrwGcXwpfa51msT
Sob/fdzErC86g2R73BqUopem6/UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQQc3+W
wTZ4ZcbcHLJJ2B0H3PzvHjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzNhZTNhZWQtNDA2Yy00MjE1LWFhYWItY2JlNGYwYTMwNDQxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BwQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCamzxXVOVaCnTHA6ImYVp9Vn4TKAFVUZqEmqqj
nvvrzn4eCRJ0XzDx1PLQDpgI+B87dBwwZ4IsFLSe1O1T4TC48WCm9pFW+M66cdLT
b4hQXqgWLX8NN2dmOQQWMjHu8ggPkuXMvjIKNKipEza1I4+SnpPlyWwEDiBDocqy
ncJe16jrYv4GuMrekUzg+xmYCbj+szWyLtzA8vtvWb65vHJrMfuQxgZNnfctVQ0S
XkmXymJHQmz+K9Bw3S6JtIuI2Dup3MKiUtr3tjZ9sdo9vjm+H3bYswHWzAOxSju4
OJr3wNdRjOFObJjF/lJhDvJaN37qU4uCNJpqvl63lYgy1TYx
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:54:48 2026 by rpki-client