Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa
File: d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa (raw, json)
Hash identifier: jaRptjMqBo7bZqaeLLcay6Pf/e1JT2lW2qmMvQK326E=
Subject key identifier: 12:83:E0:B1:EA:19:BC:D2:3D:AB:0F:B3:CE:17:97:21:E4:98:D9:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F5012EB2FBCE3D23F8CDC42955E40AFA68569C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa
Signing time: Mon 22 Jun 2026 02:40:03 +0000
ROA not before: Mon 22 Jun 2026 02:40:03 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:50:12:eb:2f:bc:e3:d2:3f:8c:dc:42:95:5e:40:af:a6:85:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:03 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=4efc14a7fc47288d0efb66189b4fb0e2be715a5b40f11c202375906cd524bb2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:af:63:63:48:2d:19:d3:8e:4f:2f:e2:ec:
99:58:42:fb:2c:dd:50:f4:d9:7a:e4:aa:7a:0c:88:
2f:1c:39:c6:07:10:eb:20:56:b8:dd:d6:46:e1:66:
ce:bc:c9:53:94:bc:38:b7:61:3b:6b:5e:7d:15:33:
51:92:1c:22:93:49:27:2b:af:67:9b:16:c4:25:9f:
be:70:74:3c:ea:7f:a6:e4:e8:e9:a2:d6:7c:5c:c3:
34:9f:8c:9f:b0:69:a1:40:b7:47:62:9a:9d:6c:e1:
50:26:1d:51:36:67:98:5f:9c:2b:80:08:d5:25:4f:
67:ee:34:bc:eb:00:3b:10:5a:d4:6d:2a:2a:64:26:
e5:3c:3d:86:a5:17:c8:22:e6:72:01:b2:82:73:55:
13:f2:45:00:88:3a:53:7c:1f:31:b4:b5:63:0d:ed:
11:3a:3f:b9:c8:72:d9:2e:c9:bb:36:80:2e:5c:f7:
4c:38:74:c8:83:fa:18:82:c0:53:89:32:f5:fe:a7:
bc:99:9c:40:35:c1:25:9d:6a:d4:e7:6e:b2:01:14:
c2:08:f9:1f:2a:da:2b:63:56:cd:d3:f3:b9:cd:f2:
2b:95:e4:f5:5a:ef:e1:0e:3b:d1:92:de:85:e1:22:
1e:4a:e8:54:27:be:cf:53:e4:b5:c9:57:f4:7b:ca:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:E0:B1:EA:19:BC:D2:3D:AB:0F:B3:CE:17:97:21:E4:98:D9:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:b000::/40
Signature Algorithm: sha256WithRSAEncryption
86:15:33:8d:4a:c7:d0:fb:f5:45:dc:79:b2:e2:2c:96:af:52:
48:b1:60:50:f7:87:99:9d:fe:51:41:8a:99:d7:4c:2d:38:5a:
95:45:b5:08:20:ac:d8:ab:15:45:81:40:04:a8:b1:2e:2b:c0:
de:2d:8d:d9:c2:f4:99:cf:39:38:08:96:d3:b1:53:c7:ce:ee:
ae:86:a3:67:29:ea:d1:fd:ae:91:ae:eb:91:fc:c9:45:31:c6:
d5:23:cf:12:b9:94:81:59:0e:66:f3:39:5a:df:4b:f6:1a:50:
ec:13:98:24:78:83:fb:5a:bb:2f:1a:84:9a:87:7f:d9:99:ee:
c5:f6:bb:1d:9d:44:58:4c:b5:1b:57:d6:7d:4c:c1:b0:fd:83:
69:66:dc:3d:de:e6:6c:8b:1f:7e:fa:c9:f0:5f:a9:31:12:d4:
13:8b:3a:a4:a8:b4:ba:0c:53:d8:09:e4:4e:aa:63:a8:be:9f:
87:34:87:fa:68:a3:80:e3:35:04:de:92:59:a1:6b:c6:e1:0c:
89:a6:0c:aa:d8:7e:94:5b:c2:9c:5f:2f:c2:95:9f:cd:6d:c5:
35:8a:aa:21:7d:c5:65:76:58:08:79:ac:ad:ae:e9:a1:38:e8:
98:fe:15:c3:05:e7:b5:27:f3:cd:b6:4a:c8:30:95:a8:85:ec:
0a:6b:43:2a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUL1AS6y+849I/jNxClV5Ar6aFacAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA2MjIwMjQwMDNaFw0yNjA5MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDRlZmMxNGE3ZmM0NzI4OGQwZWZiNjYxODliNGZiMGUyYmU3MTVhNWI0MGYx
MWMyMDIzNzU5MDZjZDUyNGJiMmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMHpr2NjSC0Z045PL+LsmVhC+yzdUPTZeuSqegyILxw5xgcQ6yBWuN3WRuFm
zrzJU5S8OLdhO2tefRUzUZIcIpNJJyuvZ5sWxCWfvnB0POp/puTo6aLWfFzDNJ+M
n7BpoUC3R2KanWzhUCYdUTZnmF+cK4AI1SVPZ+40vOsAOxBa1G0qKmQm5Tw9hqUX
yCLmcgGygnNVE/JFAIg6U3wfMbS1Yw3tETo/uchy2S7JuzaALlz3TDh0yIP6GILA
U4ky9f6nvJmcQDXBJZ1q1OdusgEUwgj5HyraK2NWzdPzuc3yK5Xk9Vrv4Q470ZLe
heEiHkroVCe+z1PktclX9HvKi+kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQSg+Cx
6hm80j2rD7POF5ch5JjZ2zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDc5MzgxZTItNGJhOS00NmM3LWFhYTItY2FmMzk5NWNkMTVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Guw
MA0GCSqGSIb3DQEBCwUAA4IBAQCGFTONSsfQ+/VF3Hmy4iyWr1JIsWBQ94eZnf5R
QYqZ10wtOFqVRbUIIKzYqxVFgUAEqLEuK8DeLY3ZwvSZzzk4CJbTsVPHzu6uhqNn
KerR/a6RruuR/MlFMcbVI88SuZSBWQ5m8zla30v2GlDsE5gkeIP7WrsvGoSah3/Z
me7F9rsdnURYTLUbV9Z9TMGw/YNpZtw93uZsix9++snwX6kxEtQTizqkqLS6DFPY
CeROqmOovp+HNIf6aKOA4zUE3pJZoWvG4QyJpgyq2H6UW8KcXy/ClZ/NbcU1iqoh
fcVldlgIeaytrumhOOiY/hXDBee1J/PNtkrIMJWohewKa0Mq
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:07:56 2026 by rpki-client