Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa
File: e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa (raw, json)
Hash identifier: vUD8NuJhigxsYWFuifEqmVcBS44HVDK+NhVaDGCWAbI=
Subject key identifier: 98:23:2C:29:10:C4:A3:AE:F4:EA:A1:0D:43:1B:0B:9C:25:66:EC:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E952DB8587F1758BF82DEF9FEABBFC44B7D4AAE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa
Signing time: Mon 22 Jun 2026 02:40:42 +0000
ROA not before: Mon 22 Jun 2026 02:40:42 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:95:2d:b8:58:7f:17:58:bf:82:de:f9:fe:ab:bf:c4:4b:7d:4a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:42 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=7d3e46d6f304a356ed78e1d3885ca4534b24f699cf192eeab304649f40b787a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:62:05:22:9c:83:c1:19:27:ed:2d:3e:83:68:
12:10:a1:0f:20:a8:f1:74:b2:3b:b4:e1:be:f2:19:
bf:88:8d:5b:9a:b1:0b:a7:cf:95:90:0a:be:7b:5e:
89:14:ad:09:a5:6f:22:73:80:38:87:96:77:af:e5:
78:1b:67:70:09:1d:2b:94:31:0b:e4:cd:1b:1b:d5:
55:25:f1:8e:16:ef:3f:06:ca:55:e4:cb:c9:1b:c8:
6b:59:92:6c:7a:f2:7e:57:00:ec:fe:40:28:db:2e:
d2:c8:14:71:b3:13:35:b3:bd:35:de:5a:ed:1c:7c:
b3:d3:1a:c1:d4:e6:92:37:2e:69:ab:6d:4a:4e:5b:
be:bb:e3:20:54:45:f7:f3:f9:04:37:7a:df:8d:d3:
c2:33:3d:ac:9d:a7:8e:ad:20:04:7a:a6:c8:f1:34:
a0:c6:63:b6:b8:ed:ce:1a:fd:5b:af:ef:2f:81:b0:
c0:97:a2:9c:74:7d:a7:fd:d9:9f:41:c5:a0:59:a4:
17:f6:fa:e2:44:a1:ab:df:ca:da:43:9d:ff:80:bd:
49:8b:e1:1b:3d:1b:7d:f3:d6:96:e2:95:c1:eb:64:
c2:4c:1f:18:f7:7d:62:91:12:30:36:5a:0d:85:ec:
bf:49:d3:c5:9e:c1:da:9b:52:f6:10:20:f9:4a:da:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:2C:29:10:C4:A3:AE:F4:EA:A1:0D:43:1B:0B:9C:25:66:EC:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:2000::/40
Signature Algorithm: sha256WithRSAEncryption
88:65:ba:f7:33:c0:5b:51:e2:94:0e:1b:30:91:42:98:ce:82:
0b:4d:2a:67:4e:dd:e1:d2:24:08:55:77:b7:c8:b6:d6:0e:cb:
e1:35:5e:b9:24:c5:89:20:39:bc:71:49:a9:59:cf:b0:88:da:
18:bf:67:40:46:8c:71:57:43:82:9d:d9:71:36:fa:f6:15:7e:
e2:f0:23:1a:5a:90:99:4d:3a:c9:81:24:6e:6a:85:24:93:2a:
94:5c:7d:05:66:e3:7d:f8:be:3b:c8:10:51:66:0c:76:b8:de:
fb:a0:28:18:71:f1:89:95:97:5c:d9:d9:1b:c3:b0:6c:3e:ff:
af:ed:01:2c:9c:04:4b:79:e0:4e:6e:fb:00:e9:b0:8c:f5:b0:
a1:4e:c7:78:cf:e0:c8:e6:2b:ca:15:52:28:cd:7e:12:9a:a6:
76:10:e9:84:cf:f6:70:77:41:03:3e:ae:72:3f:06:1c:55:da:
00:1d:3e:29:cf:66:8a:47:27:e5:f3:87:14:3b:df:53:8a:93:
2e:f0:40:d7:47:a3:4c:4c:10:3f:95:e5:63:b0:93:48:87:1f:
5b:6c:1f:21:cd:95:ad:3a:b6:fc:38:2d:3f:10:ce:fd:7f:db:
e1:10:c5:3a:b7:fd:d2:f9:64:b7:37:64:78:3e:e1:34:8a:ab:
93:55:cc:99
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULpUtuFh/F1i/gt75/qu/xEt9Sq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA2MjIwMjQwNDJaFw0yNjA5MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkM2U0NmQ2ZjMwNGEzNTZlZDc4ZTFkMzg4NWNhNDUzNGIyNGY2OTljZjE5
MmVlYWIzMDQ2NDlmNDBiNzg3YTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPhiBSKcg8EZJ+0tPoNoEhChDyCo8XSyO7ThvvIZv4iNW5qxC6fPlZAKvnte
iRStCaVvInOAOIeWd6/leBtncAkdK5QxC+TNGxvVVSXxjhbvPwbKVeTLyRvIa1mS
bHryflcA7P5AKNsu0sgUcbMTNbO9Nd5a7Rx8s9MawdTmkjcuaattSk5bvrvjIFRF
9/P5BDd6343TwjM9rJ2njq0gBHqmyPE0oMZjtrjtzhr9W6/vL4GwwJeinHR9p/3Z
n0HFoFmkF/b64kShq9/K2kOd/4C9SYvhGz0bffPWluKVwetkwkwfGPd9YpESMDZa
DYXsv0nTxZ7B2ptS9hAg+UrazLUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSYIywp
EMSjrvTqoQ1DGwucJWbszzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTExNDFhY2QtMzFlMC00NGM2LWI2YjEtYWZhN2RjZjEwYTc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gsg
MA0GCSqGSIb3DQEBCwUAA4IBAQCIZbr3M8BbUeKUDhswkUKYzoILTSpnTt3h0iQI
VXe3yLbWDsvhNV65JMWJIDm8cUmpWc+wiNoYv2dARoxxV0OCndlxNvr2FX7i8CMa
WpCZTTrJgSRuaoUkkyqUXH0FZuN9+L47yBBRZgx2uN77oCgYcfGJlZdc2dkbw7Bs
Pv+v7QEsnARLeeBObvsA6bCM9bChTsd4z+DI5ivKFVIozX4SmqZ2EOmEz/Zwd0ED
Pq5yPwYcVdoAHT4pz2aKRyfl84cUO99TipMu8EDXR6NMTBA/leVjsJNIhx9bbB8h
zZWtOrb8OC0/EM79f9vhEMU6t/3S+WS3N2R4PuE0iquTVcyZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:14:59 2026 by rpki-client