Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b075b252-d559-49fd-9ab7-e03dea73a820.roa
File: b075b252-d559-49fd-9ab7-e03dea73a820.roa (raw, json)
Hash identifier: HRSCQS77fBg7u56iyCQXU1KE6W33KbXyiBAedzAo+wI=
Subject key identifier: F8:F6:03:CC:C9:4D:0E:A8:BB:6F:41:EE:87:AB:09:45:96:D3:CE:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23ABCF73B88FCA7BCF1FFAD9B303B1240E7A1504
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b075b252-d559-49fd-9ab7-e03dea73a820.roa
Signing time: Tue 28 Jul 2026 18:19:16 +0000
ROA not before: Tue 28 Jul 2026 18:19:16 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ab:cf:73:b8:8f:ca:7b:cf:1f:fa:d9:b3:03:b1:24:0e:7a:15:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 18:19:16 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=9293b67c368ff2ee2e44d58d072696cb3acb91d8895fe8aeee088596deebd024, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:ea:ca:f6:df:c2:b5:e3:d0:63:3e:ca:54:
02:45:33:0e:35:af:67:3e:b9:19:64:42:21:89:fd:
8e:3c:44:b8:83:40:92:4e:bb:f4:4d:d4:f4:3a:c1:
5e:50:06:6b:92:6b:93:3d:bb:0a:55:cf:b9:59:3c:
c4:10:56:41:95:f4:b0:65:1d:fa:71:ef:0f:ba:33:
83:b2:b3:dc:ca:d1:23:13:8d:8a:e3:72:16:59:91:
e8:46:40:bf:89:ec:09:93:4d:33:a6:40:f2:46:fc:
d2:ef:ce:9b:d6:8e:83:2c:d2:95:36:da:09:32:1a:
52:02:24:2e:4e:51:98:38:8f:96:5c:74:88:f7:7e:
89:64:d5:72:7b:3d:f4:39:14:4b:58:74:49:f9:46:
2a:9d:5c:ae:6a:fe:ab:e1:32:9f:24:3a:39:8c:1c:
b4:75:48:e2:e1:6d:39:c5:88:2d:4c:4d:a9:47:c0:
da:49:30:5e:96:e8:46:ca:fe:c3:1a:e5:e8:3e:84:
9c:b5:67:1e:06:41:c5:51:87:29:d3:cd:b8:0d:19:
ea:b2:63:72:e7:24:92:f9:fc:63:59:8c:a4:30:51:
01:65:2d:b5:bc:97:b6:76:27:cd:8a:bd:c9:b7:a3:
d4:6f:8b:86:fb:5e:55:36:2b:99:e5:a3:8f:54:d1:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F6:03:CC:C9:4D:0E:A8:BB:6F:41:EE:87:AB:09:45:96:D3:CE:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b075b252-d559-49fd-9ab7-e03dea73a820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:5000::/40
Signature Algorithm: sha256WithRSAEncryption
91:3c:99:75:c3:ae:36:9a:7d:ac:3b:3f:b9:bf:5d:0b:37:75:
0b:b1:af:2c:f4:2b:40:98:17:af:a8:6c:47:ae:ad:56:05:94:
0c:46:ad:46:6e:e3:62:fb:4f:f5:3b:56:d8:90:0d:f3:1f:58:
1d:61:11:18:88:68:36:10:2a:49:6c:69:f1:48:e2:aa:fe:a2:
d5:56:7a:5a:1b:9f:66:54:88:ba:d0:50:f3:5f:a4:68:9f:4b:
e1:19:09:0e:77:eb:04:a3:0e:89:ef:38:f6:0d:b0:cd:af:c8:
3c:b3:60:f6:f2:37:4c:08:b8:e1:3e:0a:8d:cf:3b:dd:f8:d5:
f3:18:c6:e7:5d:1b:38:b8:45:d1:a2:bf:c8:d0:00:51:1c:0a:
b3:34:bc:89:c1:74:dc:15:98:59:3d:fb:4d:8b:89:ef:a7:1a:
ea:2c:0e:61:07:b0:ee:0c:35:b3:11:0d:ec:b3:a4:55:bf:e9:
26:54:3b:d3:95:1c:d4:61:c6:b3:8e:f3:ae:3a:e4:34:63:31:
30:f5:5e:47:d7:cf:df:4b:a9:19:18:cd:fa:65:7d:65:96:60:
10:d2:c1:6a:22:88:5c:6e:b7:28:92:8a:c0:78:c7:8a:13:56:
36:36:60:5e:49:b0:44:3d:8e:34:b6:44:a8:a1:f1:01:c1:fe:
2c:f9:b2:d0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUI6vPc7iPynvPH/rZswOxJA56FQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjgxODE5MTZaFw0yNjEwMjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyOTNiNjdjMzY4ZmYyZWUyZTQ0ZDU4ZDA3MjY5NmNiM2FjYjkxZDg4OTVm
ZThhZWVlMDg4NTk2ZGVlYmQwMjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIVn6sr238K149BjPspUAkUzDjWvZz65GWRCIYn9jjxEuINAkk679E3U9DrB
XlAGa5Jrkz27ClXPuVk8xBBWQZX0sGUd+nHvD7ozg7Kz3MrRIxONiuNyFlmR6EZA
v4nsCZNNM6ZA8kb80u/Om9aOgyzSlTbaCTIaUgIkLk5RmDiPllx0iPd+iWTVcns9
9DkUS1h0SflGKp1crmr+q+EynyQ6OYwctHVI4uFtOcWILUxNqUfA2kkwXpboRsr+
wxrl6D6EnLVnHgZBxVGHKdPNuA0Z6rJjcuckkvn8Y1mMpDBRAWUttbyXtnYnzYq9
ybej1G+LhvteVTYrmeWjj1TRYH8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT49gPM
yU0OqLtvQe6HqwlFltPOQjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjA3NWIyNTItZDU1OS00OWZkLTlhYjctZTAzZGVhNzNhODIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DNQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCRPJl1w642mn2sOz+5v10LN3ULsa8s9CtAmBev
qGxHrq1WBZQMRq1GbuNi+0/1O1bYkA3zH1gdYREYiGg2ECpJbGnxSOKq/qLVVnpa
G59mVIi60FDzX6Ron0vhGQkOd+sEow6J7zj2DbDNr8g8s2D28jdMCLjhPgqNzzvd
+NXzGMbnXRs4uEXRor/I0ABRHAqzNLyJwXTcFZhZPftNi4nvpxrqLA5hB7DuDDWz
EQ3ss6RVv+kmVDvTlRzUYcazjvOuOuQ0YzEw9V5H18/fS6kZGM36ZX1llmAQ0sFq
IohcbrcokorAeMeKE1Y2NmBeSbBEPY40tkSoofEBwf4s+bLQ
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:33 2026 by rpki-client