Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69f5be05-70d5-4f47-a04a-4d5030b172cf.roa
File: 69f5be05-70d5-4f47-a04a-4d5030b172cf.roa (raw, json)
Hash identifier: UrlQiiIom2KOS2I73/NMBjJVCHnadt1FIInQvIeVbC4=
Subject key identifier: BB:FC:2C:27:A5:EB:54:57:21:7E:5E:8A:FB:77:82:B4:42:89:E8:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7499D48E98CC183F94CE858271AD17EBDE6B66F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69f5be05-70d5-4f47-a04a-4d5030b172cf.roa
Signing time: Thu 12 Mar 2026 15:39:58 +0000
ROA not before: Thu 12 Mar 2026 15:39:58 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:99:d4:8e:98:cc:18:3f:94:ce:85:82:71:ad:17:eb:de:6b:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:39:58 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=67098500300e399abee89a21d38252566dbdffbf8dffbd2dc29461df9b974f28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:f9:02:dd:69:41:a5:95:9c:e8:3a:0e:4b:
17:66:6b:f9:bd:cf:79:fd:7c:bd:72:7f:16:9c:ae:
1c:36:cc:51:9e:39:e5:0c:e2:31:98:8e:78:22:c5:
e6:82:ee:e4:34:26:6b:3b:63:75:8d:61:62:89:93:
c5:96:05:30:08:23:00:a0:0c:22:c5:d1:fe:0d:c9:
e6:cc:81:af:18:fd:64:44:12:1f:ff:9a:13:40:dc:
fb:7e:6a:96:9d:5c:99:a0:c1:b2:0e:ee:86:60:d7:
ad:29:d1:8f:d9:94:36:3a:7f:96:66:57:b7:67:66:
04:bc:66:13:ee:8d:8f:07:0e:f6:19:e0:4e:3f:b4:
ec:b3:e0:c5:85:99:ef:f8:61:b3:89:5f:c6:24:7e:
42:7e:5f:5d:5b:4e:35:b3:5f:bb:84:fe:ec:5a:60:
83:11:ef:db:ac:85:8c:43:21:87:ff:0f:a1:73:34:
98:27:ea:e1:e8:c3:95:12:e2:cd:e3:3a:4e:b1:85:
0d:2c:e3:f3:13:6e:d6:41:1a:24:f4:e9:28:3b:96:
ab:8e:a1:01:2e:74:8f:0c:7f:f5:eb:00:ef:4c:29:
c9:5d:40:fb:2d:f9:2e:91:f6:7d:49:6e:16:fd:8f:
96:45:09:90:de:da:91:80:25:ea:b7:86:40:ad:d9:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:2C:27:A5:EB:54:57:21:7E:5E:8A:FB:77:82:B4:42:89:E8:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69f5be05-70d5-4f47-a04a-4d5030b172cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:b080::/48
Signature Algorithm: sha256WithRSAEncryption
7b:dd:5c:fd:22:4d:dd:fd:af:ad:72:97:83:f1:0d:89:fe:ba:
40:b1:93:31:55:79:6c:7e:72:6d:e7:c6:63:72:0b:ad:1b:80:
92:46:ed:b2:07:97:8e:6f:e6:5f:6c:83:5f:cb:b4:67:cb:76:
ab:e5:c5:55:ab:fb:38:47:93:2c:1a:bb:b2:11:1c:bb:eb:5d:
48:9b:eb:74:a7:b6:54:68:56:ec:81:a3:7c:bc:9e:22:61:2f:
7c:3b:fa:e6:d0:97:c4:62:5a:d7:41:4f:3f:97:96:08:5b:14:
46:c9:a5:22:54:7f:a4:e1:99:14:34:92:99:59:ef:8b:b4:71:
ac:ac:f6:e3:fd:10:3b:df:c0:07:02:aa:d1:3f:6b:98:0c:84:
9f:f2:62:7c:fd:64:a8:07:e6:42:a5:0e:a8:9e:a9:50:12:83:
b7:8e:fd:16:80:af:f7:fd:8f:17:17:5b:2b:51:71:c3:a9:e9:
44:e8:23:ba:53:ff:86:8e:2e:7a:4b:8d:fe:ea:09:fa:d4:0d:
bd:6b:8d:d1:6a:73:31:a1:d7:bf:50:3b:64:c9:f0:e1:96:b8:
e0:bf:66:a0:66:51:85:ef:f6:95:e1:bd:2c:de:0a:e7:fa:b0:
b9:bd:76:0b:b6:e3:5e:2c:96:9b:10:c7:29:d9:92:7b:64:b6:
35:99:20:b5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUdJnUjpjMGD+UzoWCca0X695rZvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAzMTIxNTM5NThaFw0yNjA2MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDY3MDk4NTAwMzAwZTM5OWFiZWU4OWEyMWQzODI1MjU2NmRiZGZmYmY4ZGZm
YmQyZGMyOTQ2MWRmOWI5NzRmMjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9L+QLdaUGllZzoOg5LF2Zr+b3Pef18vXJ/FpyuHDbMUZ455QziMZiOeCLF
5oLu5DQmaztjdY1hYomTxZYFMAgjAKAMIsXR/g3J5syBrxj9ZEQSH/+aE0Dc+35q
lp1cmaDBsg7uhmDXrSnRj9mUNjp/lmZXt2dmBLxmE+6NjwcO9hngTj+07LPgxYWZ
7/hhs4lfxiR+Qn5fXVtONbNfu4T+7FpggxHv26yFjEMhh/8PoXM0mCfq4ejDlRLi
zeM6TrGFDSzj8xNu1kEaJPTpKDuWq46hAS50jwx/9esA70wpyV1A+y35LpH2fUlu
Fv2PlkUJkN7akYAl6reGQK3Z0ukCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS7/Cwn
petUVyF+Xor7d4K0QonoYzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjlmNWJlMDUtNzBkNS00ZjQ3LWEwNGEtNGQ1MDMwYjE3MmNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H2w
gDANBgkqhkiG9w0BAQsFAAOCAQEAe91c/SJN3f2vrXKXg/ENif66QLGTMVV5bH5y
befGY3ILrRuAkkbtsgeXjm/mX2yDX8u0Z8t2q+XFVav7OEeTLBq7shEcu+tdSJvr
dKe2VGhW7IGjfLyeImEvfDv65tCXxGJa10FPP5eWCFsURsmlIlR/pOGZFDSSmVnv
i7RxrKz24/0QO9/ABwKq0T9rmAyEn/JifP1kqAfmQqUOqJ6pUBKDt479FoCv9/2P
FxdbK1Fxw6npROgjulP/ho4uekuN/uoJ+tQNvWuN0WpzMaHXv1A7ZMnw4Za44L9m
oGZRhe/2leG9LN4K5/qwub12C7bjXiyWmxDHKdmSe2S2NZkgtQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 09:14:57 2026 by rpki-client