Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
File: b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa (raw, json)
Hash identifier: S40yNYb36x/ENH/Opp2NZupirT3+c6RUQgY4kSnSDfE=
Subject key identifier: 0E:06:D7:BF:41:F1:06:4F:21:A0:B9:08:B0:F9:20:BA:3B:FA:16:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 202E11AC677EC1B60B7E03E6665489F826A20E3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
Signing time: Sat 02 May 2026 01:20:09 +0000
ROA not before: Sat 02 May 2026 01:20:09 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2e:11:ac:67:7e:c1:b6:0b:7e:03:e6:66:54:89:f8:26:a2:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 2 01:20:09 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=1446e2b68a454991b4c07d3e035a21de5da04aeb9edc3b8b7928072e75162f1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:bd:ec:3c:01:95:2b:e1:ae:80:7a:9d:90:
34:63:19:c1:40:80:11:61:cd:b3:c5:19:0e:2a:e9:
4e:a0:9c:db:f5:69:05:84:b3:0c:bb:ec:d2:7f:bf:
de:f4:6d:7e:e7:4e:b2:75:12:42:06:1c:97:aa:ee:
b6:ff:71:00:55:41:85:ca:a8:4f:e8:ee:e9:a6:ac:
65:cb:bd:31:74:48:4b:de:fc:5d:05:d4:77:b4:c7:
03:13:d0:f8:48:e6:55:34:df:e2:63:db:76:52:43:
6c:08:7b:c8:cc:65:62:b7:3a:ca:ba:6f:85:0b:c8:
23:bf:30:1a:c2:6a:dc:b5:1d:20:b5:67:f0:36:05:
55:4f:63:eb:7d:24:e7:ca:c0:7e:99:ec:f7:c2:39:
35:f8:79:69:37:68:76:51:c4:de:ef:06:ef:4f:21:
df:35:c1:3b:df:17:90:1e:c5:05:db:2e:a0:37:21:
55:6e:10:23:4d:ab:bf:01:13:f9:77:1f:26:5b:73:
f5:ec:73:26:e1:c1:16:7e:8f:cc:d0:eb:47:11:42:
25:df:55:d3:56:ce:e5:03:23:b8:8a:f5:5f:ac:70:
f3:5c:49:0c:04:12:91:59:ee:fc:f8:72:32:7b:46:
77:76:18:e8:73:69:98:86:c7:93:fd:b0:b9:c9:6d:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:D7:BF:41:F1:06:4F:21:A0:B9:08:B0:F9:20:BA:3B:FA:16:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:02:7a:42:09:c0:df:cd:8d:72:f9:51:ff:2c:c5:4c:dd:59:
45:20:26:e6:34:14:91:77:ba:f3:03:8a:ab:b5:82:0b:36:a7:
03:ef:8d:2a:dc:b3:3f:f7:91:c8:fe:f0:c3:bf:5a:db:17:35:
56:1d:09:b4:85:0c:22:3f:7d:d4:76:e7:35:70:59:76:12:6a:
b8:96:95:f7:43:77:75:dc:d4:f0:f4:34:3d:a0:68:83:f9:70:
56:b8:b3:9f:fd:39:08:21:b4:9b:cc:c9:85:eb:78:c8:3d:6e:
5d:b0:44:b5:ff:de:1f:35:f7:c3:73:f0:25:b5:7a:c9:f1:32:
84:d3:1a:f3:e9:07:95:a2:9b:79:b1:12:74:a3:ff:bd:59:08:
e5:fb:36:df:4a:b9:bd:54:d4:d4:b8:5d:09:f5:2d:c3:65:c8:
02:50:63:07:d0:ac:f3:69:5c:82:a7:b6:18:50:6b:2c:86:22:
ad:9a:e8:36:17:91:d3:c9:93:d6:f3:81:80:d1:36:19:9a:c8:
c4:3e:88:4b:26:26:71:af:06:54:b4:be:5b:b7:a6:d6:f0:f7:
d5:39:a8:0a:d9:15:b5:f7:f9:c5:d7:a3:cc:9e:03:f4:e7:6e:
0d:df:e1:f1:5e:4b:df:f4:f0:27:d1:69:a4:4c:66:6e:83:d5:
88:15:e9:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIC4RrGd+wbYLfgPmZlSJ+CaiDjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDIwMTIwMDlaFw0yNjA3MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0NDZlMmI2OGE0NTQ5OTFiNGMwN2QzZTAzNWEyMWRlNWRhMDRhZWI5ZWRj
M2I4Yjc5MjgwNzJlNzUxNjJmMWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANC+vew8AZUr4a6Aep2QNGMZwUCAEWHNs8UZDirpTqCc2/VpBYSzDLvs0n+/
3vRtfudOsnUSQgYcl6rutv9xAFVBhcqoT+ju6aasZcu9MXRIS978XQXUd7THAxPQ
+EjmVTTf4mPbdlJDbAh7yMxlYrc6yrpvhQvII78wGsJq3LUdILVn8DYFVU9j630k
58rAfpns98I5Nfh5aTdodlHE3u8G708h3zXBO98XkB7FBdsuoDchVW4QI02rvwET
+XcfJltz9exzJuHBFn6PzNDrRxFCJd9V01bO5QMjuIr1X6xw81xJDAQSkVnu/Phy
MntGd3YY6HNpmIbHk/2wucltG2sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQOBte/
QfEGTyGguQiw+SC6O/oWQjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjE2M2M0ZmYtOTkwYi00MDgwLWIxYmEtZTg1NGU2YmI0Y2IxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GpA
MA0GCSqGSIb3DQEBCwUAA4IBAQBqAnpCCcDfzY1y+VH/LMVM3VlFICbmNBSRd7rz
A4qrtYILNqcD740q3LM/95HI/vDDv1rbFzVWHQm0hQwiP33Uduc1cFl2Emq4lpX3
Q3d13NTw9DQ9oGiD+XBWuLOf/TkIIbSbzMmF63jIPW5dsES1/94fNffDc/AltXrJ
8TKE0xrz6QeVopt5sRJ0o/+9WQjl+zbfSrm9VNTUuF0J9S3DZcgCUGMH0KzzaVyC
p7YYUGsshiKtmug2F5HTyZPW84GA0TYZmsjEPohLJiZxrwZUtL5bt6bW8PfVOagK
2RW19/nF16PMngP0524N3+HxXkvf9PAn0WmkTGZug9WIFelB
-----END CERTIFICATE-----
Generated at Tue May 12 23:13:38 2026 by rpki-client