Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f67554-ef04-4edc-997e-0a2f920a8c91.roa
File: 03f67554-ef04-4edc-997e-0a2f920a8c91.roa (raw, json)
Hash identifier: hEC9s5ElXu73gIVhhmyzs4KFAE97pWnuRN/d7ses/S4=
Subject key identifier: 18:5B:A6:A7:AC:D5:51:E6:FF:DE:88:F8:88:4D:24:CE:93:31:33:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56311E84996BE0151311AB22E147E4089EC76451
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f67554-ef04-4edc-997e-0a2f920a8c91.roa
Signing time: Mon 10 Aug 2026 00:50:28 +0000
ROA not before: Mon 10 Aug 2026 00:50:28 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:31:1e:84:99:6b:e0:15:13:11:ab:22:e1:47:e4:08:9e:c7:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:28 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=1d2001aeee97baeaf8c55291f4a40dd84c33be778bac44761d7142bccdbde10d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:7f:a3:31:96:72:7b:f9:67:fd:36:af:85:
1b:4a:41:17:0a:47:3f:38:6a:eb:10:ae:11:16:f5:
70:1c:bb:be:05:b6:6e:fe:01:fb:d4:57:2e:0c:30:
8b:ae:25:d5:18:92:fc:54:07:ed:18:c4:5f:69:cf:
92:8f:14:92:12:e6:a1:34:01:c4:61:71:17:b7:47:
66:fb:1b:08:79:08:45:dd:f1:93:59:7b:eb:db:9e:
3b:08:b1:b7:bb:af:bd:32:26:fa:5a:5f:aa:96:00:
9a:8d:5b:0a:7c:70:87:25:03:37:bb:a0:90:4c:a0:
7f:51:80:d5:94:4a:75:b0:41:aa:c0:56:1c:8d:15:
05:56:31:e3:cd:b3:5b:f4:a9:bd:b3:8b:63:f1:d0:
68:6b:d4:fe:02:62:fc:f4:5c:85:fe:a7:b7:7e:d3:
36:c2:ee:5e:f3:8a:a0:b0:95:d5:aa:99:47:c1:64:
b6:35:19:38:ef:86:d8:65:6e:85:9a:7c:7f:c7:0b:
71:41:fc:7d:96:42:c4:a3:58:f1:95:12:7c:69:2c:
6c:90:ac:e9:35:5b:28:67:cd:a6:c7:a3:cd:d4:b5:
25:7e:f9:93:7c:ff:d2:91:0c:7d:8c:f9:4e:22:66:
d2:6a:67:50:45:d2:01:f6:9d:3b:5e:46:40:f9:10:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:A6:A7:AC:D5:51:E6:FF:DE:88:F8:88:4D:24:CE:93:31:33:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f67554-ef04-4edc-997e-0a2f920a8c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4080::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4e:44:16:0f:19:09:c7:83:14:f5:20:d1:83:56:d0:11:fc:
73:64:b2:94:e6:68:48:d2:8b:07:5e:4d:d0:a4:da:ac:e6:a4:
29:36:21:9b:5b:e9:c8:b0:f0:6f:1a:0e:7f:a6:63:3f:de:6b:
5c:3f:d3:a4:81:39:0a:a7:1f:32:1b:32:b8:d0:a7:87:ab:4e:
4e:62:dc:97:6f:06:be:5c:30:4b:98:17:b8:66:e5:bc:b5:b7:
66:50:62:d4:10:bf:5f:bf:32:b0:db:fd:0d:76:1d:10:c1:45:
77:9a:a5:50:e5:71:e2:84:2b:f8:38:63:a5:30:de:ec:98:07:
2c:cd:49:d9:7e:5d:e0:79:4b:ba:57:7f:cf:6c:16:2f:46:3f:
f4:60:ba:45:65:08:3f:52:97:c8:ea:18:9f:20:46:e6:ac:d9:
59:0b:65:c0:20:a4:72:97:9a:0a:f1:dd:bf:b9:07:07:b9:eb:
07:82:52:20:9c:16:fb:a5:28:35:43:e1:95:88:b4:a6:55:09:
9b:aa:c9:a9:46:96:09:b1:f5:fd:f5:c7:b5:42:a1:e8:37:21:
53:53:39:43:ad:fe:c9:c8:c8:af:f3:20:08:44:00:02:a0:44:
10:b0:b9:f2:cb:44:91:13:e5:3e:75:cf:04:d5:66:59:a5:21:
a4:d1:3e:f3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUVjEehJlr4BUTEasi4UfkCJ7HZFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMDUwMjhaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkMjAwMWFlZWU5N2JhZWFmOGM1NTI5MWY0YTQwZGQ4NGMzM2JlNzc4YmFj
NDQ3NjFkNzE0MmJjY2RiZGUxMGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOPWf6MxlnJ7+Wf9Nq+FG0pBFwpHPzhq6xCuERb1cBy7vgW2bv4B+9RXLgww
i64l1RiS/FQH7RjEX2nPko8UkhLmoTQBxGFxF7dHZvsbCHkIRd3xk1l769ueOwix
t7uvvTIm+lpfqpYAmo1bCnxwhyUDN7ugkEygf1GA1ZRKdbBBqsBWHI0VBVYx482z
W/SpvbOLY/HQaGvU/gJi/PRchf6nt37TNsLuXvOKoLCV1aqZR8FktjUZOO+G2GVu
hZp8f8cLcUH8fZZCxKNY8ZUSfGksbJCs6TVbKGfNpsejzdS1JX75k3z/0pEMfYz5
TiJm0mpnUEXSAfadO15GQPkQ2PkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQYW6an
rNVR5v/eiPiITSTOkzEz9TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDNmNjc1NTQtZWYwNC00ZWRjLTk5N2UtMGEyZjkyMGE4YzkxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GhA
gDANBgkqhkiG9w0BAQsFAAOCAQEAj05EFg8ZCceDFPUg0YNW0BH8c2SylOZoSNKL
B15N0KTarOakKTYhm1vpyLDwbxoOf6ZjP95rXD/TpIE5CqcfMhsyuNCnh6tOTmLc
l28GvlwwS5gXuGblvLW3ZlBi1BC/X78ysNv9DXYdEMFFd5qlUOVx4oQr+DhjpTDe
7JgHLM1J2X5d4HlLuld/z2wWL0Y/9GC6RWUIP1KXyOoYnyBG5qzZWQtlwCCkcpea
CvHdv7kHB7nrB4JSIJwW+6UoNUPhlYi0plUJm6rJqUaWCbH1/fXHtUKh6DchU1M5
Q63+ycjIr/MgCEQAAqBEELC58stEkRPlPnXPBNVmWaUhpNE+8w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:22 2026 by rpki-client