Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
File: 85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json)
Hash identifier: EOqeqz0mSR/P8P5JYgA8uH8vySJbDumlZ8ACB/HdSic=
Subject key identifier: 0E:83:ED:90:D8:A2:63:70:B4:B5:D0:A7:C3:48:FE:39:AD:AF:C2:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B0064939C480B5B4C2E4499A8E64166B3316368
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
Signing time: Fri 07 Aug 2026 04:50:38 +0000
ROA not before: Fri 07 Aug 2026 04:50:38 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:00:64:93:9c:48:0b:5b:4c:2e:44:99:a8:e6:41:66:b3:31:63:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:38 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=01a3d4bd22ba9350c94cc58d7803ccd08b2402a8442a695bf57cf21850231958, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:c0:b4:65:44:6c:9d:52:84:40:55:5e:38:
16:e4:bc:e6:7e:60:76:fe:f8:85:d1:57:6a:5f:ba:
0b:51:fa:db:cd:b1:f8:0f:a5:b7:b2:66:6a:71:9a:
6d:64:8b:cd:f4:38:07:c6:b8:ce:46:7c:51:82:c8:
e4:83:b7:f5:32:f7:60:e1:48:6f:76:cc:f7:ac:04:
94:fc:0a:ec:5c:ff:f1:d6:b7:e8:f0:72:66:c4:9d:
fc:c4:f8:5c:93:c2:5b:9e:38:f7:45:56:f4:31:35:
7d:82:2f:f7:34:46:63:95:41:a7:65:13:f1:4f:ed:
a4:74:77:18:f2:17:d1:af:44:68:50:9e:53:a5:f5:
da:70:e7:fb:a5:2c:ba:04:9d:3e:96:6c:f0:c4:1e:
1e:86:1b:ab:74:f6:ef:32:01:c6:f5:55:06:6e:9b:
a4:fe:90:e3:4d:2e:ce:5c:c4:35:9f:dc:00:6e:d0:
ca:e9:95:81:b1:09:31:84:fe:f0:5c:91:e3:d9:77:
61:b3:d5:86:50:58:a1:a6:aa:45:4a:cd:c5:98:81:
ea:08:6f:04:23:85:10:13:84:c6:9f:04:93:a3:08:
20:66:46:dc:72:17:f7:50:fb:be:47:05:dc:bc:4e:
47:7f:78:0d:c9:ba:56:9d:72:67:c5:26:ac:ec:08:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:ED:90:D8:A2:63:70:B4:B5:D0:A7:C3:48:FE:39:AD:AF:C2:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:4c:0d:ed:e9:51:17:94:f6:0e:92:0e:e2:5d:72:4c:d9:85:
07:5f:71:db:1d:dc:83:d7:56:60:59:f4:78:9a:1a:89:c4:3a:
8d:db:f9:9e:16:23:eb:85:a5:c1:dc:9b:fa:ef:77:66:84:84:
a9:f9:dc:b6:2b:cd:eb:7d:b0:8f:9a:96:cb:26:9d:46:eb:79:
65:4c:26:c5:e0:d4:53:af:8e:ab:72:ba:da:50:d9:a8:d2:13:
7f:b6:ae:d2:9e:7d:f8:fb:83:be:3a:76:ac:e2:e0:39:ef:f6:
04:9f:a6:fd:ea:cf:a2:f9:9f:4f:f9:23:fb:c8:ad:59:00:81:
95:c7:4f:c8:89:ed:04:9d:18:d2:08:f3:b8:2f:a3:5f:dd:a0:
41:3f:0f:30:30:23:5b:09:9d:e4:75:c4:af:04:cc:4c:98:7f:
ed:a9:9c:35:5c:d1:fd:de:0f:62:32:0b:58:c2:2e:7b:f6:02:
6a:bd:30:36:42:de:ec:67:6a:40:f2:66:76:c5:83:d6:72:1f:
a4:3f:56:59:cd:29:87:a9:d9:74:82:14:ff:36:a2:8f:37:42:
57:35:50:6e:69:af:8b:c1:35:a2:f3:40:7e:b9:6d:72:a5:35:
9b:ab:37:6b:26:94:c8:bd:8d:6c:e1:02:50:12:4f:21:2a:95:
5e:c5:e7:05
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUewBkk5xIC1tMLkSZqOZBZrMxY2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMzhaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDAxYTNkNGJkMjJiYTkzNTBjOTRjYzU4ZDc4MDNjY2QwOGIyNDAyYTg0NDJh
Njk1YmY1N2NmMjE4NTAyMzE5NTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANaFwLRlRGydUoRAVV44FuS85n5gdv74hdFXal+6C1H6282x+A+lt7JmanGa
bWSLzfQ4B8a4zkZ8UYLI5IO39TL3YOFIb3bM96wElPwK7Fz/8da36PByZsSd/MT4
XJPCW54490VW9DE1fYIv9zRGY5VBp2UT8U/tpHR3GPIX0a9EaFCeU6X12nDn+6Us
ugSdPpZs8MQeHoYbq3T27zIBxvVVBm6bpP6Q400uzlzENZ/cAG7QyumVgbEJMYT+
8FyR49l3YbPVhlBYoaaqRUrNxZiB6ghvBCOFEBOExp8Ek6MIIGZG3HIX91D7vkcF
3LxOR394Dcm6Vp1yZ8UmrOwIVGcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQOg+2Q
2KJjcLS10KfDSP45ra/CJzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODUxNTFhMzQtMWFjMy00YjliLTgwMWItMzNiZDE1M2FjODhkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC9TA3t6VEXlPYOkg7iXXJM2YUHX3HbHdyD11Zg
WfR4mhqJxDqN2/meFiPrhaXB3Jv673dmhISp+dy2K83rfbCPmpbLJp1G63llTCbF
4NRTr46rcrraUNmo0hN/tq7Snn34+4O+Onas4uA57/YEn6b96s+i+Z9P+SP7yK1Z
AIGVx0/Iie0EnRjSCPO4L6Nf3aBBPw8wMCNbCZ3kdcSvBMxMmH/tqZw1XNH93g9i
MgtYwi579gJqvTA2Qt7sZ2pA8mZ2xYPWch+kP1ZZzSmHqdl0ghT/NqKPN0JXNVBu
aa+LwTWi80B+uW1ypTWbqzdrJpTIvY1s4QJQEk8hKpVexecF
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:46:39 2026 by rpki-client