Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7c14cb3-24d5-4890-8889-cb7c26338a6d.roa
File: f7c14cb3-24d5-4890-8889-cb7c26338a6d.roa (raw, json)
Hash identifier: DOa0U0eVBYTYI9RRnplpCOjZGKNak3616uaSdHmUIvY=
Subject key identifier: DC:6A:4C:8C:77:45:EC:AF:2F:62:D4:11:C0:25:DB:B6:2B:13:41:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 149253D9C654002D55072185F49424A1BCCFCDB5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7c14cb3-24d5-4890-8889-cb7c26338a6d.roa
Signing time: Thu 30 Jul 2026 01:41:00 +0000
ROA not before: Thu 30 Jul 2026 01:41:00 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:92:53:d9:c6:54:00:2d:55:07:21:85:f4:94:24:a1:bc:cf:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:41:00 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=95eb7a9b018250926f8141872e08778a2f0574f43e224bc3f7692452b9475932, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:e2:f7:c5:5d:06:95:a4:0f:46:95:de:65:
cc:90:ad:55:ed:b7:e0:9d:14:a4:35:a0:02:6f:2c:
fa:a6:45:55:90:0c:01:d5:d4:d8:8c:9b:6a:e7:2c:
ec:75:7c:7a:a2:60:2a:fb:17:a6:b2:ab:8c:60:f2:
be:95:c5:9c:c4:28:22:fa:3f:5f:0e:4f:31:d9:9c:
31:6e:ff:e5:f4:2d:2d:09:91:3a:90:63:ae:e6:c0:
c5:03:9e:fb:f6:5b:2f:33:15:b4:9e:b8:90:04:35:
d6:c9:32:fc:a0:4e:76:7e:61:67:56:02:d3:68:93:
f3:bb:de:ff:fa:cb:ba:9a:0e:84:0d:09:dd:c9:fe:
67:08:e2:f2:91:cf:0e:05:de:1d:fb:10:56:ec:1a:
2b:00:6c:4b:0f:9c:c0:b6:cc:e0:95:94:6f:22:2c:
7d:9f:00:a4:e8:fc:09:44:ae:c7:21:21:b7:df:75:
e6:43:3e:df:7c:c9:1d:a1:ff:bf:32:6d:fb:7b:8b:
c6:11:9d:85:76:bb:1a:c2:db:0b:b1:c4:22:2b:aa:
e8:94:dd:fe:f5:85:0d:e6:17:09:19:22:82:c4:17:
1e:70:3d:8e:7d:95:78:ee:ba:eb:01:e1:f1:51:14:
b3:b6:68:4e:23:38:96:ea:f6:21:07:11:3a:8b:4e:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:4C:8C:77:45:EC:AF:2F:62:D4:11:C0:25:DB:B6:2B:13:41:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7c14cb3-24d5-4890-8889-cb7c26338a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:e000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:af:33:ed:17:f5:c4:e3:a6:b3:74:1b:dc:32:a0:7d:ff:2a:
59:c8:43:10:a1:cd:b2:13:87:a2:77:da:ca:ac:43:8d:e2:25:
d5:a2:03:dc:1f:6d:e1:3b:4e:df:4d:8e:93:c1:d9:7e:70:2a:
75:5f:6f:fd:cc:ee:10:84:b2:6a:79:29:91:8a:1a:3f:1c:29:
d2:42:67:79:55:a6:ac:82:a1:81:45:4a:04:8e:9a:fe:4c:a5:
1d:9b:3c:d5:00:3c:9b:0d:6a:05:36:0f:ce:01:95:cb:2e:c0:
bc:5f:1b:64:76:3d:c3:d2:07:8b:b7:95:df:37:70:97:81:ee:
90:d0:3e:52:74:43:c2:ec:d5:51:77:d8:a9:a2:d2:21:57:7e:
01:e3:b0:8b:25:39:c6:1e:e5:60:ab:0c:1f:e0:08:4c:fc:3d:
d4:7a:7c:9e:42:d8:91:33:b0:68:e4:56:3a:29:65:5e:65:a0:
49:c8:56:5d:70:c6:14:19:2b:de:65:02:f6:ce:72:ff:29:4e:
74:8b:6b:0b:10:73:a8:91:40:92:fc:2d:bc:7c:31:2a:df:df:
5a:37:72:8d:dc:37:05:4f:b3:36:7e:b1:cd:01:73:90:aa:b9:
75:0b:da:be:c7:82:a6:2d:c2:44:7c:5a:76:9d:f3:81:13:c1:
dd:50:c6:0c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFJJT2cZUAC1VByGF9JQkobzPzbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQxMDBaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDk1ZWI3YTliMDE4MjUwOTI2ZjgxNDE4NzJlMDg3NzhhMmYwNTc0ZjQzZTIy
NGJjM2Y3NjkyNDUyYjk0NzU5MzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIC4vfFXQaVpA9Gld5lzJCtVe234J0UpDWgAm8s+qZFVZAMAdXU2Iybaucs
7HV8eqJgKvsXprKrjGDyvpXFnMQoIvo/Xw5PMdmcMW7/5fQtLQmROpBjrubAxQOe
+/ZbLzMVtJ64kAQ11sky/KBOdn5hZ1YC02iT87ve//rLupoOhA0J3cn+Zwji8pHP
DgXeHfsQVuwaKwBsSw+cwLbM4JWUbyIsfZ8ApOj8CUSuxyEht9915kM+33zJHaH/
vzJt+3uLxhGdhXa7GsLbC7HEIiuq6JTd/vWFDeYXCRkigsQXHnA9jn2VeO666wHh
8VEUs7ZoTiM4lur2IQcROotOLmsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTcakyM
d0Xsry9i1BHAJdu2KxNBlzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjdjMTRjYjMtMjRkNS00ODkwLTg4ODktY2I3YzI2MzM4YTZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DDg
MA0GCSqGSIb3DQEBCwUAA4IBAQC9rzPtF/XE46azdBvcMqB9/ypZyEMQoc2yE4ei
d9rKrEON4iXVogPcH23hO07fTY6Twdl+cCp1X2/9zO4QhLJqeSmRiho/HCnSQmd5
VaasgqGBRUoEjpr+TKUdmzzVADybDWoFNg/OAZXLLsC8Xxtkdj3D0geLt5XfN3CX
ge6Q0D5SdEPC7NVRd9ipotIhV34B47CLJTnGHuVgqwwf4AhM/D3UenyeQtiRM7Bo
5FY6KWVeZaBJyFZdcMYUGSveZQL2znL/KU50i2sLEHOokUCS/C28fDEq399aN3KN
3DcFT7M2frHNAXOQqrl1C9q+x4KmLcJEfFp2nfOBE8HdUMYM
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:18:15 2026 by rpki-client