Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
File: 042e82d3-e08f-4fca-9e40-387fde51dfd5.roa (raw, json)
Hash identifier: +eFcZnIVUhTpnH2UhRWLFIdEI79ibB/I4ZtbUScAHvs=
Subject key identifier: 1D:36:60:68:81:CE:D4:45:60:3C:A7:21:7D:5D:F5:7D:10:79:06:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 310996931FF718B093F7FC817822B91A8419665A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
Signing time: Fri 07 Aug 2026 05:10:07 +0000
ROA not before: Fri 07 Aug 2026 05:10:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:09:96:93:1f:f7:18:b0:93:f7:fc:81:78:22:b9:1a:84:19:66:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4b0b18f2892fff57aa6fe5dfd7af738e3ffc7ddab6c9ba1238e8a314f04ef5fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:49:83:43:27:c4:8f:35:9e:dd:97:83:da:
0c:f7:eb:02:1d:4a:6e:54:5e:eb:ef:08:8f:69:93:
df:57:e7:8c:30:1a:91:3f:cb:e4:8d:45:5e:3b:11:
23:0f:af:14:c0:3b:4b:4c:80:17:0e:27:43:2e:a4:
0f:dd:52:6d:0a:d6:2c:39:27:61:32:60:3d:a4:f9:
a9:a6:d0:e7:03:6c:4e:87:9e:0d:ea:6d:d8:0b:0a:
41:db:60:d7:b6:ff:a8:ab:42:6e:df:ea:46:18:ac:
c9:a5:da:10:b0:f7:88:30:53:d8:2e:c5:0a:83:1e:
0d:5f:23:12:e5:65:ef:bc:4c:9a:e3:88:99:4f:4d:
49:da:37:e4:a1:e6:d1:ae:94:f9:70:c7:78:a3:c6:
83:8a:81:f2:a0:f1:4f:8b:c5:3e:cb:15:5b:b2:1b:
c6:89:3a:7f:62:45:1c:fa:1a:cb:4f:94:f1:ad:25:
2f:81:dd:ee:22:d7:f5:5f:54:12:cb:d2:93:ad:54:
7d:b3:51:5d:7f:e3:66:81:5d:6b:ba:18:84:80:de:
65:3e:7d:52:0f:14:52:62:d9:4f:dc:a7:58:d1:8b:
18:b0:f4:6a:c4:28:a5:db:86:33:90:21:63:4a:b7:
85:04:14:bd:be:4d:22:5d:7b:f6:7d:bf:ba:6c:4e:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:60:68:81:CE:D4:45:60:3C:A7:21:7D:5D:F5:7D:10:79:06:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.104.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:c2:ed:8f:7c:da:35:63:86:f7:29:94:7a:91:68:b3:9e:21:
41:09:3d:c3:dd:43:1e:a4:e4:fe:fe:3d:81:09:c1:54:94:30:
8c:fa:59:43:6d:0e:d8:48:1b:14:e0:33:14:f4:0a:4c:e5:40:
0b:7b:7e:50:67:66:ba:2c:de:0c:01:f0:bc:34:3f:eb:67:49:
cb:ef:94:51:c5:5b:e7:75:96:08:22:c7:49:91:7b:cc:66:2f:
cd:49:b8:df:b0:2b:94:79:83:ce:82:54:e7:36:02:fd:72:53:
da:38:ff:25:19:b3:ab:f5:42:13:a2:27:f3:aa:3f:19:c8:69:
62:e2:15:5b:09:dd:f3:9d:3d:ee:9a:c2:bf:62:d2:09:4b:fd:
8c:3e:38:b7:81:23:cf:d6:29:9b:ef:cb:9e:51:63:c4:65:e4:
d5:6b:01:7e:4f:fa:08:2c:5c:14:ca:74:20:99:03:e5:70:fb:
da:0b:8e:36:94:da:3b:30:45:8d:a7:ef:d0:e4:97:9e:43:a4:
19:71:85:0e:bf:dc:a5:80:78:46:2e:66:cf:bb:20:21:e9:fc:
c5:50:d5:0c:fb:b3:6a:8e:07:d8:81:25:11:9c:f2:f3:52:61:
1a:08:90:72:8a:91:6e:3d:2f:72:f7:ee:1c:7a:81:f9:24:bd:
22:29:1d:c9
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMQmWkx/3GLCT9/yBeCK5GoQZZlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTEwMDdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDRiMGIxOGYyODkyZmZmNTdhYTZmZTVkZmQ3YWY3MzhlM2ZmYzdkZGFiNmM5
YmExMjM4ZThhMzE0ZjA0ZWY1ZmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ2ISYNDJ8SPNZ7dl4PaDPfrAh1KblRe6+8Ij2mT31fnjDAakT/L5I1FXjsR
Iw+vFMA7S0yAFw4nQy6kD91SbQrWLDknYTJgPaT5qabQ5wNsToeeDept2AsKQdtg
17b/qKtCbt/qRhisyaXaELD3iDBT2C7FCoMeDV8jEuVl77xMmuOImU9NSdo35KHm
0a6U+XDHeKPGg4qB8qDxT4vFPssVW7Ibxok6f2JFHPoay0+U8a0lL4Hd7iLX9V9U
EsvSk61UfbNRXX/jZoFda7oYhIDeZT59Ug8UUmLZT9ynWNGLGLD0asQopduGM5Ah
Y0q3hQQUvb5NIl179n2/umxOemkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQdNmBo
gc7URWA8pyF9XfV9EHkGgDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDQyZTgyZDMtZTA4Zi00ZmNhLTllNDAtMzg3ZmRlNTFkZmQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099aDAN
BgkqhkiG9w0BAQsFAAOCAQEAwMLtj3zaNWOG9ymUepFos54hQQk9w91DHqTk/v49
gQnBVJQwjPpZQ20O2EgbFOAzFPQKTOVAC3t+UGdmuizeDAHwvDQ/62dJy++UUcVb
53WWCCLHSZF7zGYvzUm437ArlHmDzoJU5zYC/XJT2jj/JRmzq/VCE6In86o/Gchp
YuIVWwnd85097prCv2LSCUv9jD44t4Ejz9Ypm+/LnlFjxGXk1WsBfk/6CCxcFMp0
IJkD5XD72guONpTaOzBFjafv0OSXnkOkGXGFDr/cpYB4Ri5mz7sgIen8xVDVDPuz
ao4H2IElEZzy81JhGgiQcoqRbj0vcvfuHHqB+SS9IikdyQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:34 2026 by rpki-client