Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
File: 84b89066-b432-45c3-befb-ffa2b4be3b71.roa (raw, json)
Hash identifier: RW6u04+Cd9az6TRXqMfmLI8qPJTNbhUO6dGrXHYVKzc=
Subject key identifier: 83:B9:DE:71:F2:C1:9C:28:32:AD:AF:FB:23:48:EB:0D:B6:9F:8C:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 090A43ACEA8E5D1FCF4C005591A12A697A14B127
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
Signing time: Tue 19 May 2026 05:20:09 +0000
ROA not before: Tue 19 May 2026 05:20:09 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0a:43:ac:ea:8e:5d:1f:cf:4c:00:55:91:a1:2a:69:7a:14:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 19 05:20:09 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=c8d1810572514915a6f8dd3f39f47bd6a33edbe7ced2201e69e6d0aafc777a3b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:ed:b4:bf:c1:12:49:75:a1:e8:44:af:80:
74:ee:65:e3:86:97:b0:32:c2:e6:0b:cb:d3:49:2b:
d4:28:bb:ce:b0:da:bd:a5:83:a9:7b:a1:00:0a:12:
32:7a:d0:2b:4e:f0:06:9b:0f:19:52:d1:48:f4:6f:
63:a0:17:b1:2f:1a:6b:e3:3e:a6:45:76:14:fa:d8:
e7:8e:2e:70:58:40:04:79:6a:05:a1:db:66:5f:39:
70:7b:fe:9b:65:a1:b0:6a:81:39:ac:3d:f8:12:04:
50:ad:e7:2a:a3:58:d9:75:e6:9c:8e:1e:f6:ec:16:
38:d0:dd:b2:48:c6:74:ec:5b:48:c0:da:a0:78:11:
5e:a3:99:ab:61:f1:f5:ea:84:2e:e1:90:3a:2f:25:
1d:15:9d:ef:e8:05:52:40:ea:e3:59:b9:9b:5f:bc:
bc:30:c4:23:7d:96:ed:bd:29:88:53:e5:a7:cc:b4:
45:9d:4d:6b:0f:63:fc:3c:2e:6c:0a:70:bd:be:70:
40:3e:db:b1:50:ad:67:c4:81:21:d7:b8:49:0a:2a:
72:a4:ff:40:1b:70:9f:20:a4:c2:8b:8c:fa:01:d3:
ac:fc:c3:f1:e3:d2:2e:2c:39:be:66:e8:78:73:00:
41:b0:8d:db:f0:95:7f:6b:24:9b:ff:0c:07:ea:94:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B9:DE:71:F2:C1:9C:28:32:AD:AF:FB:23:48:EB:0D:B6:9F:8C:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:4000::/40
Signature Algorithm: sha256WithRSAEncryption
72:c9:10:f3:55:ef:51:85:29:c9:ab:c2:86:be:16:04:20:8e:
0c:c2:8b:82:2e:24:87:ff:7d:2a:22:ad:b7:f1:aa:b4:13:ca:
53:3d:31:3d:82:ff:99:cf:49:68:8b:e9:44:06:3b:6f:0f:32:
83:2e:48:0f:44:c5:9d:c1:11:90:69:c8:6e:fe:be:7c:18:8b:
99:d2:27:15:d3:8d:cf:79:2e:5b:92:e9:af:ed:4e:fd:c0:c0:
49:df:c3:b2:bf:6d:37:7c:60:c8:79:7d:51:50:85:f9:6d:64:
d4:5b:23:f8:e7:a9:ba:d9:0b:66:2a:9d:af:ff:aa:30:8e:7b:
e3:7a:b8:b7:ff:09:49:1f:bc:5b:4d:c8:53:2c:fe:21:c1:2c:
6c:03:cb:81:32:95:c7:6e:ad:d2:bc:14:4c:9d:35:54:fa:98:
49:de:e5:16:bc:16:5e:5c:ce:8f:06:b7:99:88:91:7c:25:bc:
4a:a8:ac:0b:a8:1d:67:6f:39:44:8f:cf:37:2b:f0:88:68:86:
a8:b8:65:b8:e8:c5:98:2e:a9:eb:ea:18:94:90:f2:93:38:e0:
a2:37:33:86:d3:76:76:f1:6b:d2:69:06:44:fe:a0:9d:20:ce:
19:04:85:26:69:72:99:75:6a:bc:3c:14:21:30:66:8a:35:35:
69:27:76:3b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCQpDrOqOXR/PTABVkaEqaXoUsScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTkwNTIwMDlaFw0yNjA4MTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGM4ZDE4MTA1NzI1MTQ5MTVhNmY4ZGQzZjM5ZjQ3YmQ2YTMzZWRiZTdjZWQy
MjAxZTY5ZTZkMGFhZmM3NzdhM2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZK7bS/wRJJdaHoRK+AdO5l44aXsDLC5gvL00kr1Ci7zrDavaWDqXuhAAoS
MnrQK07wBpsPGVLRSPRvY6AXsS8aa+M+pkV2FPrY544ucFhABHlqBaHbZl85cHv+
m2WhsGqBOaw9+BIEUK3nKqNY2XXmnI4e9uwWONDdskjGdOxbSMDaoHgRXqOZq2Hx
9eqELuGQOi8lHRWd7+gFUkDq41m5m1+8vDDEI32W7b0piFPlp8y0RZ1Naw9j/Dwu
bApwvb5wQD7bsVCtZ8SBIde4SQoqcqT/QBtwnyCkwouM+gHTrPzD8ePSLiw5vmbo
eHMAQbCN2/CVf2skm/8MB+qUDekCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSDud5x
8sGcKDKtr/sjSOsNtp+M/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODRiODkwNjYtYjQzMi00NWMzLWJlZmItZmZhMmI0YmUzYjcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HhA
MA0GCSqGSIb3DQEBCwUAA4IBAQByyRDzVe9RhSnJq8KGvhYEII4MwouCLiSH/30q
Iq238aq0E8pTPTE9gv+Zz0loi+lEBjtvDzKDLkgPRMWdwRGQachu/r58GIuZ0icV
043PeS5bkumv7U79wMBJ38Oyv203fGDIeX1RUIX5bWTUWyP456m62QtmKp2v/6ow
jnvjeri3/wlJH7xbTchTLP4hwSxsA8uBMpXHbq3SvBRMnTVU+phJ3uUWvBZeXM6P
BreZiJF8JbxKqKwLqB1nbzlEj883K/CIaIaouGW46MWYLqnr6hiUkPKTOOCiNzOG
03Z28WvSaQZE/qCdIM4ZBIUmaXKZdWq8PBQhMGaKNTVpJ3Y7
-----END CERTIFICATE-----
Generated at Sat Jun 6 00:20:46 2026 by rpki-client