Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
File: 90bd72ba-b30d-4433-a47e-e0543a4ea451.roa (raw, json)
Hash identifier: QA/fPEiZrLQxanbunQgRF41jDRfPLfnuZsjxH8PSxhI=
Subject key identifier: 29:B2:EB:13:2D:1A:F9:8A:73:83:1A:D5:6B:C0:17:23:3E:DF:F8:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 434E40B74D99D00610FFADB1021B953214D28804
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
Signing time: Fri 07 Aug 2026 04:50:22 +0000
ROA not before: Fri 07 Aug 2026 04:50:22 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 07:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4e:40:b7:4d:99:d0:06:10:ff:ad:b1:02:1b:95:32:14:d2:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:22 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=19fa297418afe970ed1b064c1e63c120741197731159a923012c95b56684dffd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:60:2a:ef:7c:b5:33:72:f0:30:d1:55:83:
81:f5:f8:af:08:e2:2e:3a:13:be:b7:eb:4b:19:b5:
ac:ca:22:83:a5:f8:e2:45:b1:78:69:96:5f:a4:bc:
07:34:4d:4d:6f:9f:3d:ee:31:55:89:80:9e:6d:a6:
ec:a5:da:e7:34:bb:41:b4:4b:e8:0e:3e:fd:c8:2a:
b5:c7:7e:9b:98:a9:d0:ca:ea:d9:a8:b7:a5:f6:30:
8b:97:0d:86:0b:f7:fa:34:d8:5d:7e:0b:a8:43:82:
31:aa:12:4f:82:c8:5d:8f:81:82:f4:c0:8f:e7:c7:
73:cc:91:37:a4:02:50:30:24:25:5e:ef:93:4e:73:
10:4a:90:a0:c8:ee:ab:53:62:91:1d:7a:05:2a:eb:
0a:b5:3e:ca:2a:4f:ef:c8:ba:36:63:be:7a:8e:d9:
65:0d:a9:df:b1:26:d0:32:26:fe:cc:33:5c:ae:e9:
12:0a:62:1e:21:63:52:b7:04:db:2f:33:4b:6b:1c:
bc:5b:cd:22:9b:67:28:6e:ce:e2:5a:26:08:68:17:
99:87:b4:0b:22:7c:31:fc:72:3e:90:3a:1d:e1:89:
95:68:7b:29:83:9b:79:ed:b2:01:78:25:40:d1:fa:
97:d4:f0:9a:3b:6e:ab:c2:72:c5:40:67:f5:cf:dc:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:EB:13:2D:1A:F9:8A:73:83:1A:D5:6B:C0:17:23:3E:DF:F8:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:e000::/40
Signature Algorithm: sha256WithRSAEncryption
47:00:42:ac:7b:54:35:c7:72:a2:e4:be:a4:09:7b:15:cd:f2:
f5:f5:5e:89:4b:cd:a8:3e:1b:08:44:35:b3:b7:85:48:49:07:
8c:32:b5:ee:e7:7f:04:2f:3e:33:22:da:19:0c:8d:87:82:93:
14:2e:81:4b:30:f5:84:fd:56:97:1f:ce:60:39:ef:17:02:cf:
74:89:e6:79:11:7f:60:13:46:cc:a6:82:0c:c0:b7:8a:af:f5:
53:dd:66:55:dc:a7:af:b7:32:89:20:96:06:db:a0:fc:4c:ce:
c2:55:87:31:f6:f4:e3:37:bb:40:3c:c7:be:ce:68:33:1c:17:
cd:4b:94:b7:8d:0d:3e:3c:60:67:38:10:2c:ea:05:1d:ee:b1:
32:f1:c8:05:3c:8a:96:15:40:c1:37:e2:27:14:67:1e:44:bb:
a1:6a:f6:bc:89:bc:0c:0c:6c:bc:fb:8b:0a:a9:d5:07:66:bf:
3b:81:06:e5:1a:40:04:df:28:43:d4:b8:95:a8:d2:74:46:55:
c8:7d:a1:ab:fb:e2:27:c9:f4:12:b3:66:f5:a8:7c:83:8d:ce:
c4:5f:8b:e9:b1:c6:7c:84:dd:f4:23:bd:50:5f:2c:63:69:f8:
d7:23:cd:14:4d:b2:dc:64:c8:d9:eb:81:23:31:00:cd:8e:e7:
7d:92:c9:a6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQ05At02Z0AYQ/62xAhuVMhTSiAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMjJaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE5ZmEyOTc0MThhZmU5NzBlZDFiMDY0YzFlNjNjMTIwNzQxMTk3NzMxMTU5
YTkyMzAxMmM5NWI1NjY4NGRmZmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKreYCrvfLUzcvAw0VWDgfX4rwjiLjoTvrfrSxm1rMoig6X44kWxeGmWX6S8
BzRNTW+fPe4xVYmAnm2m7KXa5zS7QbRL6A4+/cgqtcd+m5ip0Mrq2ai3pfYwi5cN
hgv3+jTYXX4LqEOCMaoST4LIXY+BgvTAj+fHc8yRN6QCUDAkJV7vk05zEEqQoMju
q1NikR16BSrrCrU+yipP78i6NmO+eo7ZZQ2p37Em0DIm/swzXK7pEgpiHiFjUrcE
2y8zS2scvFvNIptnKG7O4lomCGgXmYe0CyJ8MfxyPpA6HeGJlWh7KYObee2yAXgl
QNH6l9Twmjtuq8JyxUBn9c/cFJ8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQpsusT
LRr5inODGtVrwBcjPt/4AjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTBiZDcyYmEtYjMwZC00NDMzLWE0N2UtZTA1NDNhNGVhNDUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DTg
MA0GCSqGSIb3DQEBCwUAA4IBAQBHAEKse1Q1x3Ki5L6kCXsVzfL19V6JS82oPhsI
RDWzt4VISQeMMrXu538ELz4zItoZDI2HgpMULoFLMPWE/VaXH85gOe8XAs90ieZ5
EX9gE0bMpoIMwLeKr/VT3WZV3KevtzKJIJYG26D8TM7CVYcx9vTjN7tAPMe+zmgz
HBfNS5S3jQ0+PGBnOBAs6gUd7rEy8cgFPIqWFUDBN+InFGceRLuhava8ibwMDGy8
+4sKqdUHZr87gQblGkAE3yhD1LiVqNJ0RlXIfaGr++InyfQSs2b1qHyDjc7EX4vp
scZ8hN30I71QXyxjafjXI80UTbLcZMjZ64EjMQDNjud9ksmm
-----END CERTIFICATE-----
Generated at Tue Aug 11 09:26:35 2026 by rpki-client