Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
File: fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa (raw, json)
Hash identifier: hQZd8fwGvRr+NVb1Z809ELrribYYqv7jPHCcZaG5sUs=
Subject key identifier: 20:4B:50:B4:64:52:34:31:98:5D:FF:E0:0C:F5:5F:80:19:0C:BD:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BF4E59EB02C5086E712BE2B9807DE2BA6F15B92
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
Signing time: Thu 23 Jul 2026 15:20:08 +0000
ROA not before: Thu 23 Jul 2026 15:20:08 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f4:e5:9e:b0:2c:50:86:e7:12:be:2b:98:07:de:2b:a6:f1:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:08 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=437bfe58ea52200348f9544dc552a205155f25bd40af5d76f3350f988ab31dbe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:9b:2d:15:9d:a3:0a:39:ea:fa:78:32:b2:
79:16:58:46:78:7e:60:07:15:df:75:81:0c:69:c3:
5a:4c:02:3a:44:21:13:a7:52:bc:74:30:69:9c:dd:
24:08:46:4f:61:9a:61:1a:c3:af:c8:7d:cb:1c:7e:
f0:45:65:7b:4c:2c:9d:e8:ba:4f:03:63:0f:04:e1:
f6:29:9a:4e:5d:b1:9f:41:af:cc:39:1c:ae:dc:14:
3d:b6:9c:b0:9d:92:56:b3:43:4d:9e:7d:e7:f0:5b:
dd:f1:1a:98:ce:05:6b:55:cf:cf:3b:dc:b0:43:96:
0b:92:a6:43:40:c2:0f:12:b9:11:0e:d6:c5:a2:97:
80:d3:76:68:ff:08:5a:ed:c7:cf:c0:b0:a2:4e:f2:
dd:a2:4d:8c:47:28:36:5f:31:4b:49:92:9a:3c:37:
93:8a:b2:12:79:3c:31:e5:e7:38:dc:d2:a1:d9:8f:
6f:83:05:ef:71:c4:b7:79:e5:47:4a:ba:3c:e4:96:
04:07:0e:6a:6a:05:ba:32:11:91:50:f4:a2:4a:90:
44:13:ad:fd:bd:74:56:94:a5:d1:a9:3c:07:74:5b:
6e:e8:94:64:42:40:e9:ba:83:e8:3d:21:25:91:07:
97:cb:15:5a:e8:b0:31:80:5b:30:07:90:f9:c4:27:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:50:B4:64:52:34:31:98:5D:FF:E0:0C:F5:5F:80:19:0C:BD:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e040::/46
Signature Algorithm: sha256WithRSAEncryption
87:d3:0a:8b:c8:b8:e2:30:38:d2:2e:02:30:35:1a:83:d8:dc:
95:5f:19:66:b5:80:f8:a3:3e:0c:66:26:0d:c0:09:ce:f3:09:
1b:fa:a7:da:a6:93:e6:0e:08:2f:f1:5f:4b:b8:81:69:b1:46:
f5:1c:66:25:75:f1:11:e0:a2:11:e5:cc:06:53:e5:1e:13:ec:
25:5d:36:83:26:95:16:2b:a6:cb:ab:96:a4:91:10:24:bb:6f:
a5:c4:3c:04:2f:88:b8:7b:75:c9:df:84:81:63:2e:92:b7:a7:
1e:f0:4f:a5:c9:89:aa:6f:a9:05:98:58:42:6d:26:e0:c3:03:
a4:5a:07:be:c2:42:bd:db:55:62:1a:56:ce:2e:dc:d3:30:a3:
fb:65:a0:5f:24:67:f5:7f:3c:01:45:2c:33:32:ff:ae:0b:91:
28:db:bc:6a:d0:b9:c3:a3:12:ba:d2:2d:44:7f:9c:85:05:81:
e4:c1:1e:62:c8:ca:8f:17:92:e3:9b:0f:81:28:44:a2:fa:d5:
f0:9e:22:4d:0e:be:72:75:69:bc:f3:d3:a8:96:c1:a5:37:f4:
39:17:1d:7f:55:4a:ab:56:c2:23:3c:1d:75:be:d8:cd:2c:88:
c0:d7:d9:19:7a:6a:e7:ba:26:96:31:27:ea:d8:e8:a9:cc:65:
d2:18:5c:01
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUW/TlnrAsUIbnEr4rmAfeK6bxW5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjMxNTIwMDhaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDQzN2JmZTU4ZWE1MjIwMDM0OGY5NTQ0ZGM1NTJhMjA1MTU1ZjI1YmQ0MGFm
NWQ3NmYzMzUwZjk4OGFiMzFkYmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9umy0VnaMKOer6eDKyeRZYRnh+YAcV33WBDGnDWkwCOkQhE6dSvHQwaZzd
JAhGT2GaYRrDr8h9yxx+8EVle0wsnei6TwNjDwTh9imaTl2xn0GvzDkcrtwUPbac
sJ2SVrNDTZ595/Bb3fEamM4Fa1XPzzvcsEOWC5KmQ0DCDxK5EQ7WxaKXgNN2aP8I
Wu3Hz8Cwok7y3aJNjEcoNl8xS0mSmjw3k4qyEnk8MeXnONzSodmPb4MF73HEt3nl
R0q6POSWBAcOamoFujIRkVD0okqQRBOt/b10VpSl0ak8B3RbbuiUZEJA6bqD6D0h
JZEHl8sVWuiwMYBbMAeQ+cQnttUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQgS1C0
ZFI0MZhd/+AM9V+AGQy90jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmU2ZmNiOWEtOGNhNy00NjgxLTgyZTYtNDBlYTVmODAxOTgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPg
QDANBgkqhkiG9w0BAQsFAAOCAQEAh9MKi8i44jA40i4CMDUag9jclV8ZZrWA+KM+
DGYmDcAJzvMJG/qn2qaT5g4IL/FfS7iBabFG9RxmJXXxEeCiEeXMBlPlHhPsJV02
gyaVFiumy6uWpJEQJLtvpcQ8BC+IuHt1yd+EgWMukrenHvBPpcmJqm+pBZhYQm0m
4MMDpFoHvsJCvdtVYhpWzi7c0zCj+2WgXyRn9X88AUUsMzL/rguRKNu8atC5w6MS
utItRH+chQWB5MEeYsjKjxeS45sPgShEovrV8J4iTQ6+cnVpvPPTqJbBpTf0ORcd
f1VKq1bCIzwddb7YzSyIwNfZGXpq57omljEn6tjoqcxl0hhcAQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:34:28 2026 by rpki-client