Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a0fdc7b-a496-4ece-b2f9-db9efa3d28ca.roa
File: 6a0fdc7b-a496-4ece-b2f9-db9efa3d28ca.roa (raw, json)
Hash identifier: rG9ic/FBo0w7Jfkxu1v9UAw6e7KYCj3gHtekgaPVJzs=
Subject key identifier: 5C:43:F8:38:3C:10:37:86:A3:1F:7F:8D:BF:5E:B0:C9:F9:5E:D0:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E126B9A546D9A98CC4CE6824B4E7701CAC923C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a0fdc7b-a496-4ece-b2f9-db9efa3d28ca.roa
Signing time: Thu 12 Mar 2026 15:36:37 +0000
ROA not before: Thu 12 Mar 2026 15:36:37 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:12:6b:9a:54:6d:9a:98:cc:4c:e6:82:4b:4e:77:01:ca:c9:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 12 15:36:37 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=9e09ea0d0dd26dede582449acf0c65f2d39d3e52ef6f5ba5e8a240fe19f3845e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:33:25:b0:0e:86:3f:9e:bd:94:67:1f:29:
e9:66:9e:61:93:7e:d2:d5:4c:02:6d:df:34:0a:c4:
42:66:cc:e7:36:49:ad:d5:3e:95:ee:2a:f3:24:8e:
cb:46:b3:6b:8e:d1:87:e3:52:eb:e9:7e:59:03:9a:
a6:3c:d7:dc:ae:7c:84:bb:02:de:c6:84:c2:66:da:
40:eb:c8:28:ee:ee:bc:05:94:ef:66:d8:a7:a5:ae:
d3:82:0b:a2:fc:6e:5d:9c:f7:9f:95:7c:a5:62:eb:
83:81:c0:14:7b:c8:a0:08:33:85:81:78:31:f6:57:
fa:ac:be:27:6c:92:27:68:8a:af:b2:4c:72:c5:17:
e6:41:03:d7:8e:ea:2c:97:b9:e0:28:42:2c:61:02:
8d:c3:07:3a:8d:93:4f:44:a0:72:35:49:f2:ce:67:
7e:a2:92:f2:12:c4:3f:11:55:91:2b:74:db:2e:bd:
04:c2:c8:d7:c0:c9:09:75:c0:f0:69:86:84:db:79:
a5:f6:d5:4c:07:18:9b:1b:55:26:e6:0c:37:5d:46:
ad:d4:9f:1b:a9:05:b9:40:78:1f:53:96:c5:9b:19:
d1:b3:34:76:15:ff:8e:e6:4a:85:13:29:be:f9:e6:
39:0c:9c:0d:53:45:91:aa:ed:88:78:fc:28:76:7b:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:F8:38:3C:10:37:86:A3:1F:7F:8D:BF:5E:B0:C9:F9:5E:D0:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a0fdc7b-a496-4ece-b2f9-db9efa3d28ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:800::/40
Signature Algorithm: sha256WithRSAEncryption
67:06:e9:cf:c3:b5:0d:40:11:a8:41:46:a6:3b:1b:f4:0f:88:
bc:d1:e1:c2:df:ff:44:06:a2:3c:ee:12:49:a5:b4:f8:8d:23:
13:f9:b7:54:16:6a:49:17:52:fc:cc:2f:1a:e2:dd:92:82:f5:
3d:06:99:33:b7:cf:4c:a7:a8:3a:59:e5:65:8a:37:00:c6:ac:
ab:ec:af:e1:ed:b2:2c:a6:1f:44:0e:58:ba:1c:f3:11:aa:59:
21:5d:60:32:34:61:5c:cf:17:d1:92:de:d5:9d:b4:85:6f:43:
fa:d8:96:46:d4:4b:a8:e5:a1:df:f8:b2:41:59:4d:56:4d:b0:
d3:1b:66:be:ad:ef:5e:f6:0c:1a:e6:ce:63:18:1b:1f:e7:5e:
53:04:c9:c4:4a:0e:7e:1a:9a:32:6c:f7:75:6e:45:9f:d1:37:
ad:4f:ee:2d:8f:04:b6:08:18:25:50:07:9e:6b:85:be:95:45:
ec:97:77:9c:39:47:33:bb:aa:b6:cf:38:5c:0d:78:18:05:8d:
9e:3a:c8:7e:de:b1:a8:82:a3:7f:98:21:3b:14:5a:ac:38:73:
7b:54:5e:8c:d0:cc:56:01:a8:ed:f2:66:f4:de:d1:17:4a:57:
46:b8:b2:95:ef:65:90:80:ea:49:77:e2:0e:a1:be:14:1e:4b:
fa:2a:48:8e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbhJrmlRtmpjMTOaCS053AcrJI8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAzMTIxNTM2MzdaFw0yNjA2MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDllMDllYTBkMGRkMjZkZWRlNTgyNDQ5YWNmMGM2NWYyZDM5ZDNlNTJlZjZm
NWJhNWU4YTI0MGZlMTlmMzg0NWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALT1MyWwDoY/nr2UZx8p6WaeYZN+0tVMAm3fNArEQmbM5zZJrdU+le4q8ySO
y0aza47Rh+NS6+l+WQOapjzX3K58hLsC3saEwmbaQOvIKO7uvAWU72bYp6Wu04IL
ovxuXZz3n5V8pWLrg4HAFHvIoAgzhYF4MfZX+qy+J2ySJ2iKr7JMcsUX5kED147q
LJe54ChCLGECjcMHOo2TT0SgcjVJ8s5nfqKS8hLEPxFVkSt02y69BMLI18DJCXXA
8GmGhNt5pfbVTAcYmxtVJuYMN11GrdSfG6kFuUB4H1OWxZsZ0bM0dhX/juZKhRMp
vvnmOQycDVNFkartiHj8KHZ7ATsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRcQ/g4
PBA3hqMff42/XrDJ+V7Q/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmEwZmRjN2ItYTQ5Ni00ZWNlLWIyZjktZGI5ZWZhM2QyOGNhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G8I
MA0GCSqGSIb3DQEBCwUAA4IBAQBnBunPw7UNQBGoQUamOxv0D4i80eHC3/9EBqI8
7hJJpbT4jSMT+bdUFmpJF1L8zC8a4t2SgvU9Bpkzt89Mp6g6WeVlijcAxqyr7K/h
7bIsph9EDli6HPMRqlkhXWAyNGFczxfRkt7VnbSFb0P62JZG1Euo5aHf+LJBWU1W
TbDTG2a+re9e9gwa5s5jGBsf515TBMnESg5+GpoybPd1bkWf0TetT+4tjwS2CBgl
UAeea4W+lUXsl3ecOUczu6q2zzhcDXgYBY2eOsh+3rGogqN/mCE7FFqsOHN7VF6M
0MxWAajt8mb03tEXSldGuLKV72WQgOpJd+IOob4UHkv6KkiO
-----END CERTIFICATE-----
Generated at Sat Mar 14 09:16:23 2026 by rpki-client