Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80e6f80b-f4ff-4881-9245-6f9c441ea212.roa
File: 80e6f80b-f4ff-4881-9245-6f9c441ea212.roa (raw, json)
Hash identifier: Y4ywU84xpLqzgpFHJXSMrurWFTjzgz3sWAGje729Hi4=
Subject key identifier: 6A:09:23:43:E3:54:76:DB:A9:97:23:10:72:8B:57:95:8B:A3:5A:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 146A5790827C7021DA09D4FB9238EADF12217B6E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80e6f80b-f4ff-4881-9245-6f9c441ea212.roa
Signing time: Mon 22 Jun 2026 02:40:44 +0000
ROA not before: Mon 22 Jun 2026 02:40:44 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6a:57:90:82:7c:70:21:da:09:d4:fb:92:38:ea:df:12:21:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:44 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=034357e95f232cd0ee41f23dd3a7ef58061acc53c1a1039c505ea1e732cde66f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:a0:02:6a:58:b9:a8:bf:27:b8:06:3a:8b:
f9:31:25:f7:36:17:33:a8:69:1c:e6:fa:33:7f:ff:
7d:10:53:2b:07:fd:b2:00:e0:9c:a6:3e:e7:c2:58:
a6:65:63:df:8e:84:04:9f:79:4e:52:d5:c3:6d:f1:
b2:c9:4c:6e:cb:b2:79:6e:a5:12:5b:c7:75:51:56:
3c:fb:6b:47:df:27:9f:d3:05:29:3d:e8:76:4f:fc:
a5:b6:32:12:29:f2:0a:6d:3b:1e:81:87:9f:c9:fc:
4f:9d:78:a4:71:48:0e:6f:61:32:17:f1:d4:59:89:
fe:8c:93:a8:af:13:ce:a8:1f:6f:21:b8:df:a9:09:
61:f4:19:ef:bb:21:c5:67:24:57:a0:03:fa:ac:2c:
c6:eb:e6:16:fd:59:48:aa:05:fc:0c:3d:9d:fd:79:
98:eb:9b:76:85:11:0a:7d:2d:21:dd:e4:ec:1e:93:
ce:8a:cf:23:48:da:3e:2a:7b:92:77:07:6f:27:38:
d6:c7:e3:bc:be:72:68:5c:80:7a:ea:a9:7e:ec:f5:
0b:b8:ab:68:a9:0b:28:d7:94:68:0c:01:51:73:7c:
17:54:ed:af:15:ca:3c:07:d1:74:ec:e7:f1:0f:b2:
80:96:57:09:43:19:dd:ca:21:3b:80:5f:70:89:fc:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:23:43:E3:54:76:DB:A9:97:23:10:72:8B:57:95:8B:A3:5A:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80e6f80b-f4ff-4881-9245-6f9c441ea212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:aa:9c:e8:8f:d6:0d:04:9e:71:b7:a5:b0:fc:4b:6e:d4:e0:
74:a8:db:3b:41:7a:4c:69:27:25:4e:e6:d5:22:d1:39:8d:8d:
b0:8b:7c:80:8a:8f:0e:81:68:cd:b8:c2:57:81:89:4c:7f:f1:
9d:d8:f1:f7:bd:dc:9a:21:9a:12:db:c4:39:04:e6:30:20:35:
e3:fb:57:b7:9e:ee:d4:3b:92:32:9a:8d:19:2e:6a:40:10:d5:
93:2f:65:bf:d7:91:6d:96:47:34:ab:99:85:1a:76:73:5f:04:
42:3f:c7:2d:ca:97:c3:ff:a4:94:fb:a2:f0:63:57:e4:0b:b1:
46:7c:fb:d5:15:c8:d8:89:c3:2b:a0:6e:93:55:19:e3:31:5d:
e4:75:8d:1c:c4:84:50:1c:c0:ca:18:d3:25:06:6c:44:e4:59:
35:08:a3:fe:fd:80:d1:76:a6:06:b2:ef:fc:ca:de:70:e9:26:
cc:19:2d:ec:ac:b8:dd:c7:33:96:4c:be:d1:73:01:6e:29:74:
2b:be:3f:dc:5c:54:34:be:7f:fa:bf:24:17:71:56:97:9f:52:
ce:18:1c:0c:dd:55:40:7f:55:6b:a5:a3:85:dd:c9:70:60:1c:
94:4e:ba:a6:38:e2:c7:19:a0:84:c1:7e:bc:c8:74:78:d4:84:
b8:a1:d6:80
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFGpXkIJ8cCHaCdT7kjjq3xIhe24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA2MjIwMjQwNDRaFw0yNjA5MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDAzNDM1N2U5NWYyMzJjZDBlZTQxZjIzZGQzYTdlZjU4MDYxYWNjNTNjMWEx
MDM5YzUwNWVhMWU3MzJjZGU2NmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpEoAJqWLmovye4BjqL+TEl9zYXM6hpHOb6M3//fRBTKwf9sgDgnKY+58JY
pmVj346EBJ95TlLVw23xsslMbsuyeW6lElvHdVFWPPtrR98nn9MFKT3odk/8pbYy
EinyCm07HoGHn8n8T514pHFIDm9hMhfx1FmJ/oyTqK8TzqgfbyG436kJYfQZ77sh
xWckV6AD+qwsxuvmFv1ZSKoF/Aw9nf15mOubdoURCn0tId3k7B6TzorPI0jaPip7
kncHbyc41sfjvL5yaFyAeuqpfuz1C7iraKkLKNeUaAwBUXN8F1TtrxXKPAfRdOzn
8Q+ygJZXCUMZ3cohO4BfcIn8fAcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRqCSND
41R226mXIxByi1eVi6NauzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODBlNmY4MGItZjRmZi00ODgxLTkyNDUtNmY5YzQ0MWVhMjEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtA
wDANBgkqhkiG9w0BAQsFAAOCAQEAPKqc6I/WDQSecbelsPxLbtTgdKjbO0F6TGkn
JU7m1SLROY2NsIt8gIqPDoFozbjCV4GJTH/xndjx973cmiGaEtvEOQTmMCA14/tX
t57u1DuSMpqNGS5qQBDVky9lv9eRbZZHNKuZhRp2c18EQj/HLcqXw/+klPui8GNX
5AuxRnz71RXI2InDK6Buk1UZ4zFd5HWNHMSEUBzAyhjTJQZsRORZNQij/v2A0Xam
BrLv/MrecOkmzBkt7Ky43cczlky+0XMBbil0K74/3FxUNL5/+r8kF3FWl59Szhgc
DN1VQH9Va6Wjhd3JcGAclE66pjjixxmghMF+vMh0eNSEuKHWgA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:10 2026 by rpki-client