Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa
File: bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa (raw, json)
Hash identifier: nkVHNG6PigrVaCUmx4g3ElfRjTc6Nfc8TY64eZPixDM=
Subject key identifier: 8B:42:71:F3:1F:19:0B:92:CA:D4:92:AE:D8:78:87:6F:F2:BF:87:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DC4B96FB26FDA634C7414AB8BDE33835B466018
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa
Signing time: Fri 08 May 2026 03:30:14 +0000
ROA not before: Fri 08 May 2026 03:30:14 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c4:b9:6f:b2:6f:da:63:4c:74:14:ab:8b:de:33:83:5b:46:60:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:30:14 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=748749ab10472d89ae7b140d5146aeac2937353c953f080530e1ec3de29dae20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:3f:04:61:9e:68:cd:83:9c:2e:52:a8:17:
93:93:c9:18:12:d5:98:d6:4a:a7:a4:e8:1d:d3:0d:
dd:5f:77:9a:5a:9e:a0:1a:69:a7:54:87:13:fd:3d:
67:f4:90:b1:1d:c5:51:8d:ca:57:f8:88:41:5f:66:
ce:da:5c:b4:79:ed:a0:65:c7:15:9b:b6:57:4d:18:
99:b1:2d:6c:e1:23:53:b2:18:d5:81:e7:36:3a:4c:
20:78:54:fb:e6:0b:06:e7:d3:81:65:bb:70:07:48:
d5:45:cf:0b:89:7b:7b:65:02:6e:d3:06:04:35:5c:
60:7f:5a:75:a0:34:f3:ed:bb:d5:64:30:b3:7b:28:
19:c1:0e:cc:77:f8:14:dd:f2:6f:88:7b:3f:4f:7d:
2c:45:2f:b9:28:4c:a1:9a:b8:5f:2f:66:30:f5:26:
f5:0c:5c:37:bf:63:b6:13:3b:cc:eb:51:c3:87:07:
d6:52:eb:ba:4f:26:8d:c7:eb:b6:7a:46:cd:72:6a:
bd:d3:ba:8e:07:5d:b8:7f:ea:a6:c8:23:24:e7:c1:
f3:31:65:44:9e:14:c6:07:bd:6a:53:03:91:4f:3e:
38:a1:96:2f:a6:80:4c:fc:cc:fe:22:0e:83:44:ff:
7a:a5:e7:58:c9:3c:04:e7:a0:19:f1:91:b2:0b:5a:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:42:71:F3:1F:19:0B:92:CA:D4:92:AE:D8:78:87:6F:F2:BF:87:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbc59b63-5d58-4e68-8e95-c972a0df4b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:800::/40
Signature Algorithm: sha256WithRSAEncryption
04:8d:a0:6e:7e:12:8d:88:c2:9b:4d:1a:f7:59:8b:0a:49:49:
4d:50:df:3a:be:81:7e:2d:44:41:e3:a6:90:00:aa:6c:fb:b4:
32:a1:8e:6d:7a:b1:1b:76:d6:a4:e7:18:e9:2b:bf:b4:22:c1:
ba:89:e5:87:57:93:54:c0:67:3b:14:4e:cf:4b:52:c4:56:7c:
d1:63:d3:0d:5b:11:7f:1d:16:9d:3a:6f:cd:35:2f:a0:2b:f6:
18:94:9d:81:5f:05:7a:2e:8a:96:20:d5:ae:10:e9:e3:18:ea:
7e:7c:11:e0:2b:a9:3e:b5:1e:88:36:fc:65:f9:7a:35:e3:9d:
b5:f1:99:b8:26:fe:3c:10:04:ff:8d:3d:bc:ff:c3:af:cd:a9:
0a:8c:f7:2c:2b:ea:59:79:30:4c:9a:b0:45:93:0c:c8:f4:15:
b0:36:c9:bb:ba:d2:75:90:bf:9a:d8:f9:f0:8e:35:52:c7:51:
41:64:8d:76:56:8e:a3:45:d9:ce:e1:90:f4:83:0d:42:2d:0a:
e2:45:e1:e6:fa:22:08:02:32:9f:31:33:62:31:04:72:37:43:
bb:90:3b:b1:b6:5e:c3:d1:66:ea:90:0d:ff:db:1a:f6:e8:f6:
d8:e9:13:4d:99:c4:c5:92:ec:7f:89:d2:c3:14:79:5b:88:a5:
fa:86:3a:16
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfcS5b7Jv2mNMdBSri94zg1tGYBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDgwMzMwMTRaFw0yNjA4MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDc0ODc0OWFiMTA0NzJkODlhZTdiMTQwZDUxNDZhZWFjMjkzNzM1M2M5NTNm
MDgwNTMwZTFlYzNkZTI5ZGFlMjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKvpPwRhnmjNg5wuUqgXk5PJGBLVmNZKp6ToHdMN3V93mlqeoBppp1SHE/09
Z/SQsR3FUY3KV/iIQV9mztpctHntoGXHFZu2V00YmbEtbOEjU7IY1YHnNjpMIHhU
++YLBufTgWW7cAdI1UXPC4l7e2UCbtMGBDVcYH9adaA08+271WQws3soGcEOzHf4
FN3yb4h7P099LEUvuShMoZq4Xy9mMPUm9QxcN79jthM7zOtRw4cH1lLruk8mjcfr
tnpGzXJqvdO6jgdduH/qpsgjJOfB8zFlRJ4Uxge9alMDkU8+OKGWL6aATPzM/iIO
g0T/eqXnWMk8BOegGfGRsgta1IUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSLQnHz
HxkLksrUkq7YeIdv8r+HtTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmJjNTliNjMtNWQ1OC00ZTY4LThlOTUtYzk3MmEwZGY0YjY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0AAI
MA0GCSqGSIb3DQEBCwUAA4IBAQAEjaBufhKNiMKbTRr3WYsKSUlNUN86voF+LURB
46aQAKps+7QyoY5terEbdtak5xjpK7+0IsG6ieWHV5NUwGc7FE7PS1LEVnzRY9MN
WxF/HRadOm/NNS+gK/YYlJ2BXwV6LoqWINWuEOnjGOp+fBHgK6k+tR6INvxl+Xo1
45218Zm4Jv48EAT/jT28/8OvzakKjPcsK+pZeTBMmrBFkwzI9BWwNsm7utJ1kL+a
2PnwjjVSx1FBZI12Vo6jRdnO4ZD0gw1CLQriReHm+iIIAjKfMTNiMQRyN0O7kDux
tl7D0WbqkA3/2xr26PbY6RNNmcTFkux/idLDFHlbiKX6hjoW
-----END CERTIFICATE-----
Generated at Tue May 12 23:36:04 2026 by rpki-client