Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
File: 640a1f52-8635-44af-ae6e-cc941e49e749.roa (raw, json)
Hash identifier: kazadj3smx918llOr3VHQ7MfF4OJs3ouxVvc/HB9ow4=
Subject key identifier: 64:5A:7D:78:49:F0:CC:EF:DE:97:F8:20:4D:79:53:AE:F1:A1:7C:E9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E52584AEF9356733DC61382F1A049ECA274099C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
Signing time: Mon 27 Apr 2026 00:30:13 +0000
ROA not before: Mon 27 Apr 2026 00:30:13 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:52:58:4a:ef:93:56:73:3d:c6:13:82:f1:a0:49:ec:a2:74:09:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 27 00:30:13 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=fb330417ac43aa536fb7335cf19b9186ed742009580e66d733d74953c7504558, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:46:c2:77:11:fe:e5:68:74:31:99:40:16:
f1:ff:af:eb:cb:25:a3:4b:1a:ac:50:7f:31:ab:ac:
06:8d:2f:df:fe:16:00:89:1b:16:9b:05:e6:94:e7:
fa:b3:99:53:94:ce:9a:d1:38:86:82:13:d4:b1:3c:
db:68:ce:bc:f0:a1:3b:06:84:c4:4d:a9:55:df:de:
5f:d3:22:ce:61:ac:c2:d9:00:da:ae:c9:df:8e:6f:
c7:da:de:c6:fb:6a:43:0b:ca:23:c3:88:55:26:8b:
c7:07:aa:96:c4:8f:41:fb:80:57:14:49:e4:e5:87:
0d:5b:b7:20:65:8c:80:f8:0f:b0:23:34:4e:1c:da:
42:c3:ab:89:ce:30:c5:f1:e3:2a:a2:72:87:8c:f5:
0e:ef:dd:08:4f:7c:5f:3c:31:de:32:b1:04:5e:66:
40:fe:31:75:a8:b2:f8:40:6a:5c:81:dd:a3:b7:8a:
81:8a:d4:12:31:a0:e0:7b:5d:84:d4:15:52:76:aa:
41:ff:d2:67:dc:24:12:bc:14:86:ba:8d:9c:f6:f4:
21:b0:53:51:f9:4f:9d:9d:ea:be:f7:bc:87:89:d1:
ec:88:be:06:33:09:5c:0d:7a:8d:b7:17:73:9b:a1:
6a:59:0c:62:32:68:80:d7:6e:d3:43:e5:d0:0c:1c:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:7D:78:49:F0:CC:EF:DE:97:F8:20:4D:79:53:AE:F1:A1:7C:E9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6080::/46
Signature Algorithm: sha256WithRSAEncryption
ca:02:db:3c:d3:14:7c:c3:5a:6a:7a:d0:32:7c:24:dd:53:d1:
ac:dc:8f:23:49:e6:52:0c:53:fb:56:e2:16:d8:e9:1d:1a:91:
b6:7c:3c:75:5d:53:71:70:54:c1:26:dd:6d:e7:1e:d2:e0:91:
2c:dc:b5:3f:58:c7:b9:2b:03:50:32:45:ec:56:0a:8c:a2:72:
f0:2d:bf:ac:cd:fc:a1:14:ce:16:0c:55:ba:87:a2:2d:30:80:
7f:b4:1c:24:0f:7c:38:44:0a:98:5a:23:89:83:d1:9d:98:d7:
d2:1d:23:33:54:e1:3a:5e:40:44:07:47:3c:66:ab:4e:3e:85:
49:11:b2:21:94:41:c7:85:39:9a:fd:39:e0:e3:4a:af:ff:4b:
21:e7:ba:c8:84:9e:6b:d6:14:2c:a0:6c:89:ae:3f:9e:5f:b2:
a7:c3:45:96:70:f9:7c:5f:82:83:9e:5c:ae:f3:db:ae:dd:1f:
a0:03:3f:94:ab:a8:54:95:b8:fb:77:cc:a4:3c:19:54:a8:a2:
5c:7a:1b:b0:e9:5f:97:80:41:e0:64:8b:45:e0:42:fa:22:51:
5d:cd:22:90:7c:8b:4b:2b:d4:62:64:c8:03:78:74:b2:c7:00:
80:0e:23:6a:1d:c6:4c:7a:c5:e4:ae:ee:6a:ef:8a:e6:c4:e6:
ff:bb:e9:44
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDlJYSu+TVnM9xhOC8aBJ7KJ0CZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA0MjcwMDMwMTNaFw0yNjA3MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQGZiMzMwNDE3YWM0M2FhNTM2ZmI3MzM1Y2YxOWI5MTg2ZWQ3NDIwMDk1ODBl
NjZkNzMzZDc0OTUzYzc1MDQ1NTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJd+RsJ3Ef7laHQxmUAW8f+v68slo0sarFB/MausBo0v3/4WAIkbFpsF5pTn
+rOZU5TOmtE4hoIT1LE822jOvPChOwaExE2pVd/eX9MizmGswtkA2q7J345vx9re
xvtqQwvKI8OIVSaLxweqlsSPQfuAVxRJ5OWHDVu3IGWMgPgPsCM0ThzaQsOric4w
xfHjKqJyh4z1Du/dCE98Xzwx3jKxBF5mQP4xdaiy+EBqXIHdo7eKgYrUEjGg4Htd
hNQVUnaqQf/SZ9wkErwUhrqNnPb0IbBTUflPnZ3qvve8h4nR7Ii+BjMJXA16jbcX
c5uhalkMYjJogNdu00Pl0AwcPosCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRkWn14
SfDM796X+CBNeVOu8aF86TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjQwYTFmNTItODYzNS00NGFmLWFlNmUtY2M5NDFlNDllNzQ5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DRg
gDANBgkqhkiG9w0BAQsFAAOCAQEAygLbPNMUfMNaanrQMnwk3VPRrNyPI0nmUgxT
+1biFtjpHRqRtnw8dV1TcXBUwSbdbece0uCRLNy1P1jHuSsDUDJF7FYKjKJy8C2/
rM38oRTOFgxVuoeiLTCAf7QcJA98OEQKmFojiYPRnZjX0h0jM1ThOl5ARAdHPGar
Tj6FSRGyIZRBx4U5mv054ONKr/9LIee6yISea9YULKBsia4/nl+yp8NFlnD5fF+C
g55crvPbrt0foAM/lKuoVJW4+3fMpDwZVKiiXHobsOlfl4BB4GSLReBC+iJRXc0i
kHyLSyvUYmTIA3h0sscAgA4jah3GTHrF5K7uau+K5sTm/7vpRA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 20:46:24 2026 by rpki-client