Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be43dd39-558d-4a44-9ced-00461f1d4c42.roa
File: be43dd39-558d-4a44-9ced-00461f1d4c42.roa (raw, json)
Hash identifier: LS8MbwOI6EL3zsjG3qs047w0RISY+DYs76JbfCb4VwI=
Subject key identifier: 30:C3:74:97:0D:BB:0E:53:04:A4:6A:5F:13:5D:64:C2:D3:B4:1F:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4967FE705A9DA8B012E78FDA48F0EDE3E1D17C5E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be43dd39-558d-4a44-9ced-00461f1d4c42.roa
Signing time: Tue 21 Jul 2026 01:20:09 +0000
ROA not before: Tue 21 Jul 2026 01:20:09 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:67:fe:70:5a:9d:a8:b0:12:e7:8f:da:48:f0:ed:e3:e1:d1:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:09 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=0e36604cf7a561826932627c38cfce7989ed53c30aa4ecb77c492cb2d8a0bd75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:1a:eb:86:74:3c:d1:34:31:49:db:b5:cb:
b6:98:c7:a6:1b:a7:66:c5:9f:f7:4b:b2:a3:1a:3c:
48:ac:62:ed:1f:3c:32:04:48:a2:af:87:58:a1:bf:
4d:78:78:f6:9d:76:4d:0c:1f:a0:59:11:02:a6:b4:
00:82:4c:6a:91:fe:a4:8c:20:fc:8a:01:b7:84:39:
42:e1:7c:9b:a0:d8:1f:f0:47:e2:80:30:7b:6a:e9:
65:46:2d:6d:5a:e3:80:e8:30:c7:4b:ff:d4:87:b2:
83:39:21:35:9e:0a:2a:f3:be:36:f3:d4:ef:e2:1f:
22:63:7b:92:4f:00:b7:21:05:b6:3f:9b:5d:c1:36:
3b:9a:61:dd:7f:b0:12:1c:79:8e:8b:1d:f8:ed:48:
67:62:ad:9a:84:36:4d:47:ed:77:77:69:2b:31:7b:
89:a7:84:3a:28:cf:85:aa:d8:21:ff:1c:97:1b:f6:
10:ed:48:29:fe:91:9f:58:4b:fc:8f:fb:d4:c6:b7:
eb:67:46:40:82:3a:ad:db:a7:47:3c:a2:44:6a:fd:
c9:95:03:ad:46:8b:95:1b:38:75:36:d9:7a:88:2c:
66:fc:f4:b7:01:03:b5:fd:c6:2f:d7:ff:c9:d1:81:
16:51:78:82:7e:c4:ad:f4:8a:1a:ed:f9:c4:89:d7:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:74:97:0D:BB:0E:53:04:A4:6A:5F:13:5D:64:C2:D3:B4:1F:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be43dd39-558d-4a44-9ced-00461f1d4c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
46:b3:f0:ef:76:a1:b7:9d:ad:b7:72:9d:be:3d:1a:e7:b3:d9:
cd:fc:7c:37:54:2d:7e:07:89:90:cc:ac:99:dc:67:ed:61:e7:
c4:8f:25:f2:3c:4c:f9:d5:10:99:3a:08:60:8b:71:ff:8a:1b:
e6:b2:2f:e5:87:fc:e4:63:99:86:fa:dd:61:38:ee:b5:8e:82:
b5:7f:8f:76:2a:b2:9d:dc:1a:d3:b4:76:82:96:58:1b:8d:ab:
f4:fe:90:37:ce:52:bf:8b:ff:b6:ca:5f:2e:27:69:4a:5c:ac:
46:1e:5a:3e:2c:65:4e:c5:16:13:e6:4c:5c:5c:f0:88:c0:1a:
54:2c:e3:35:d4:83:54:7d:ec:b8:9f:a6:f1:ae:24:dd:4f:77:
97:1b:0f:76:f9:a3:4f:65:ed:2d:09:20:dd:89:73:9e:5d:f8:
f8:f1:ba:ef:5b:5a:47:f8:9b:bc:56:1e:53:77:c2:ab:ab:b6:
c3:04:6a:96:7b:e2:18:2d:32:96:bf:a3:8a:46:04:9a:dd:72:
0d:fa:65:cd:c0:7e:b9:ef:2e:17:f1:2d:b7:ae:07:99:fa:97:
00:a2:bd:46:92:e3:bb:05:23:92:0c:2b:19:5f:f6:00:cb:dd:
0b:b4:87:f6:bc:a7:a6:0f:1b:86:3f:9d:42:72:0a:14:f0:d6:
7e:34:4f:0b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSWf+cFqdqLAS54/aSPDt4+HRfF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjEwMTIwMDlaFw0yNjEwMTkyMzU5NTlaMHoxSTBHBgNV
BAUTQDBlMzY2MDRjZjdhNTYxODI2OTMyNjI3YzM4Y2ZjZTc5ODllZDUzYzMwYWE0
ZWNiNzdjNDkyY2IyZDhhMGJkNzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMcpGuuGdDzRNDFJ27XLtpjHphunZsWf90uyoxo8SKxi7R88MgRIoq+HWKG/
TXh49p12TQwfoFkRAqa0AIJMapH+pIwg/IoBt4Q5QuF8m6DYH/BH4oAwe2rpZUYt
bVrjgOgwx0v/1IeygzkhNZ4KKvO+NvPU7+IfImN7kk8AtyEFtj+bXcE2O5ph3X+w
Ehx5josd+O1IZ2KtmoQ2TUftd3dpKzF7iaeEOijPharYIf8clxv2EO1IKf6Rn1hL
/I/71Ma362dGQII6rdunRzyiRGr9yZUDrUaLlRs4dTbZeogsZvz0twEDtf3GL9f/
ydGBFlF4gn7ErfSKGu35xInXWNkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQww3SX
DbsOUwSkal8TXWTC07Qf4DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmU0M2RkMzktNTU4ZC00YTQ0LTljZWQtMDA0NjFmMWQ0YzQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gog
MA0GCSqGSIb3DQEBCwUAA4IBAQBGs/DvdqG3na23cp2+PRrns9nN/Hw3VC1+B4mQ
zKyZ3GftYefEjyXyPEz51RCZOghgi3H/ihvmsi/lh/zkY5mG+t1hOO61joK1f492
KrKd3BrTtHaCllgbjav0/pA3zlK/i/+2yl8uJ2lKXKxGHlo+LGVOxRYT5kxcXPCI
wBpULOM11INUfey4n6bxriTdT3eXGw92+aNPZe0tCSDdiXOeXfj48brvW1pH+Ju8
Vh5Td8Krq7bDBGqWe+IYLTKWv6OKRgSa3XIN+mXNwH657y4X8S23rgeZ+pcAor1G
kuO7BSOSDCsZX/YAy90LtIf2vKemDxuGP51CcgoU8NZ+NE8L
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:35:07 2026 by rpki-client