Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
File: abbee85f-272a-4ae4-8329-48f63bc24277.roa (raw, json)
Hash identifier: SvEWqiRdt3fh/OqIRVxHVlh6HsCtY8rZH//r9HGYZ00=
Subject key identifier: BE:D1:18:9A:3A:5F:68:11:68:33:93:1B:27:85:0D:BC:A6:D0:76:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78D1261403322F76B0C75127715834B6B902354A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
Signing time: Sat 02 May 2026 01:30:40 +0000
ROA not before: Sat 02 May 2026 01:30:40 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d1:26:14:03:32:2f:76:b0:c7:51:27:71:58:34:b6:b9:02:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:30:40 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=e05046e6d1238546f784b3ab75a1e7532c85c6d45f9f44af56d6d1eb4f0c2e46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:6c:d0:8f:27:1c:33:78:c0:95:47:a8:f4:
49:61:59:cf:1e:3f:5c:ab:0e:06:14:0b:5e:78:c7:
04:56:d2:38:26:22:a9:7a:2c:6c:16:06:75:4d:3d:
11:21:92:af:7f:66:3e:0c:5e:d9:db:dc:ac:3d:4b:
63:37:42:d0:9d:13:96:74:1d:65:07:07:2e:71:80:
7d:ee:31:bd:af:e6:58:b4:4d:f0:e4:a2:45:26:4d:
bb:49:9d:cf:30:15:73:eb:40:41:ac:b8:47:32:a3:
56:32:26:d4:d1:c9:a7:62:58:09:60:72:02:ef:e8:
b2:f8:57:b5:83:a3:9a:e6:d6:66:56:1b:25:6d:96:
09:dc:fd:d3:2e:5c:14:88:2f:38:cc:76:19:ff:8e:
45:65:4b:c9:74:ad:9e:a5:24:19:34:24:1c:fe:69:
c3:2c:3c:4e:fc:4b:55:33:58:18:ff:df:f0:13:83:
c5:07:ea:f6:72:55:de:56:2c:9f:4c:05:b0:e5:cf:
58:51:ab:ae:6f:c8:ae:32:2f:d1:fb:70:42:c3:aa:
ef:e0:b5:02:45:20:63:b8:87:38:2b:b6:d9:c4:e7:
8b:e5:30:6f:83:e1:fb:e8:e7:d0:cb:74:09:61:28:
9d:bf:ba:ff:9a:ae:65:01:e1:30:2b:07:c2:60:09:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:18:9A:3A:5F:68:11:68:33:93:1B:27:85:0D:BC:A6:D0:76:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a080::/48
Signature Algorithm: sha256WithRSAEncryption
23:a5:b1:df:71:5b:bb:d9:71:dc:c5:71:fb:16:6e:06:35:ef:
30:75:3b:64:3f:38:37:35:7b:44:65:b3:da:0b:fc:05:2c:e9:
45:d3:fb:a3:54:01:5e:0e:9c:05:46:d1:f7:a0:c1:d8:4b:90:
62:c9:9b:7f:b2:fc:83:6c:31:9f:4c:7e:08:db:e9:cd:9b:93:
b5:c4:84:ab:bb:9e:53:ec:5a:7a:b6:46:ef:43:80:ad:b8:d6:
33:d9:a4:d4:62:e8:53:36:89:2f:70:15:3e:84:0c:df:18:80:
a1:05:ab:fb:61:02:78:d6:12:cb:51:26:9f:51:1c:d9:fc:53:
2e:b0:9a:7d:81:96:e4:98:2a:d2:59:5a:c5:d4:06:92:17:13:
80:72:57:25:cc:dd:df:98:93:61:06:39:a1:a4:45:60:00:32:
c7:79:cd:83:77:89:9e:1f:46:e4:a7:d4:73:fc:23:95:b9:c1:
66:d8:c4:13:93:f5:5e:21:1f:3d:c2:4f:8a:13:13:50:e6:ae:
36:b4:7a:58:dc:e9:ca:a0:02:0b:28:bc:12:c9:8e:a8:ac:d3:
c6:98:a6:23:23:1b:c6:e2:05:5f:da:01:ab:8a:94:fc:fe:63:
bc:8d:f9:d9:67:04:4f:c9:9f:00:85:55:02:f6:3e:c6:9e:9c:
f2:be:6e:c9
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUeNEmFAMyL3awx1EncVg0trkCNUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDIwMTMwNDBaFw0yNjA3MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGUwNTA0NmU2ZDEyMzg1NDZmNzg0YjNhYjc1YTFlNzUzMmM4NWM2ZDQ1Zjlm
NDRhZjU2ZDZkMWViNGYwYzJlNDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxmbNCPJxwzeMCVR6j0SWFZzx4/XKsOBhQLXnjHBFbSOCYiqXosbBYGdU09
ESGSr39mPgxe2dvcrD1LYzdC0J0TlnQdZQcHLnGAfe4xva/mWLRN8OSiRSZNu0md
zzAVc+tAQay4RzKjVjIm1NHJp2JYCWByAu/osvhXtYOjmubWZlYbJW2WCdz90y5c
FIgvOMx2Gf+ORWVLyXStnqUkGTQkHP5pwyw8TvxLVTNYGP/f8BODxQfq9nJV3lYs
n0wFsOXPWFGrrm/IrjIv0ftwQsOq7+C1AkUgY7iHOCu22cTni+Uwb4Ph++jn0Mt0
CWEonb+6/5quZQHhMCsHwmAJGuECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS+0Ria
Ol9oEWgzkxsnhQ28ptB2jDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWJiZWU4NWYtMjcyYS00YWU0LTgzMjktNDhmNjNiYzI0Mjc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gqg
gDANBgkqhkiG9w0BAQsFAAOCAQEAI6Wx33Fbu9lx3MVx+xZuBjXvMHU7ZD84NzV7
RGWz2gv8BSzpRdP7o1QBXg6cBUbR96DB2EuQYsmbf7L8g2wxn0x+CNvpzZuTtcSE
q7ueU+xaerZG70OArbjWM9mk1GLoUzaJL3AVPoQM3xiAoQWr+2ECeNYSy1Emn1Ec
2fxTLrCafYGW5Jgq0llaxdQGkhcTgHJXJczd35iTYQY5oaRFYAAyx3nNg3eJnh9G
5KfUc/wjlbnBZtjEE5P1XiEfPcJPihMTUOauNrR6WNzpyqACCyi8EsmOqKzTxpim
IyMbxuIFX9oBq4qU/P5jvI352WcET8mfAIVVAvY+xp6c8r5uyQ==
-----END CERTIFICATE-----
Generated at Tue May 12 23:39:32 2026 by rpki-client