Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/080fdf7d-eddd-4f75-a2e3-7e1f962b06c0.roa
File: 080fdf7d-eddd-4f75-a2e3-7e1f962b06c0.roa (raw, json)
Hash identifier: ZN2G2brtOMG6vH59EDuMLEAUVcXjEP+kMtrdeYwHR6w=
Subject key identifier: 33:F2:BA:F0:2F:F1:82:C5:43:AB:DC:54:56:71:F7:8B:93:14:2C:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 796E967590FC0E57AC7F133268B7B1D1D082362B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/080fdf7d-eddd-4f75-a2e3-7e1f962b06c0.roa
Signing time: Tue 28 Jul 2026 18:19:19 +0000
ROA not before: Tue 28 Jul 2026 18:19:19 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6e:96:75:90:fc:0e:57:ac:7f:13:32:68:b7:b1:d1:d0:82:36:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 18:19:19 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=16a7cdec927db768d809a22ea7095b4db449b88527fc9eec64b479a61b2f7af6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:a4:87:96:b7:21:7a:e1:9c:30:24:a3:83:
c3:ca:13:7b:4c:7a:c8:81:b7:28:13:9a:6f:5b:1d:
f0:85:63:7f:89:02:de:82:e4:67:ad:8f:91:f8:e8:
48:fa:fb:e6:33:40:45:08:42:81:cd:32:d9:d8:21:
ed:c1:64:e0:e1:33:45:30:46:cd:1c:e7:4a:92:4d:
41:95:a3:2d:f7:c2:55:23:c4:9e:48:d9:f9:8b:f5:
8e:a2:99:c5:d7:d3:17:26:24:3c:85:9b:ae:e8:11:
58:46:6d:7a:89:45:dc:f0:92:c8:3d:a1:b7:75:2f:
f5:15:a6:08:a8:d0:07:84:78:66:3e:2a:1f:d6:15:
de:17:2b:0d:4a:99:d9:b8:f4:29:62:40:d4:e7:71:
66:01:1c:6e:5e:96:9c:56:da:53:a6:de:28:57:56:
3a:0c:af:70:c9:27:8a:19:17:89:6c:8f:e6:4a:64:
70:88:36:77:68:55:de:b2:9b:a6:4a:38:50:01:11:
2d:96:69:14:59:bb:c8:96:ce:9c:bf:c3:d3:be:ca:
d9:c8:59:d3:44:77:79:a7:f3:4d:ca:4d:7e:03:de:
34:11:48:ed:b8:f0:29:c7:30:32:e2:c3:ea:ed:0d:
7f:e6:4e:b3:3b:aa:39:76:72:f8:60:5b:8f:11:c9:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:BA:F0:2F:F1:82:C5:43:AB:DC:54:56:71:F7:8B:93:14:2C:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/080fdf7d-eddd-4f75-a2e3-7e1f962b06c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:c000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:cc:1a:97:60:e6:9b:1d:f0:c1:69:48:03:64:07:03:ff:8f:
4e:07:da:ec:07:90:89:65:c1:29:f1:04:2c:ce:75:34:90:bc:
7e:81:3b:63:0d:62:b8:d6:87:79:de:3b:5e:c7:16:0d:99:d2:
70:a8:67:9e:02:3a:a6:9f:a8:11:c0:41:97:f4:f1:c9:d5:70:
a3:0e:4f:67:11:28:ce:29:85:dd:e7:0b:78:c4:1c:7c:a8:9b:
ec:75:46:ad:81:2d:af:16:2c:4f:5c:c8:ab:c7:d7:2e:bd:fd:
92:0f:43:6d:ab:ea:93:1e:11:41:6d:36:ef:bc:93:08:fb:f5:
93:a9:fd:8e:72:ff:8b:f3:78:78:06:a3:ae:01:5f:84:17:5e:
b2:83:08:d3:f4:08:ca:ea:97:0e:f4:19:21:fa:3f:58:7d:fc:
e7:9d:92:c7:50:3b:f6:1c:92:6d:16:f1:6c:91:96:b2:78:6c:
c5:81:d5:97:b1:29:62:c3:f4:13:a0:37:aa:c1:48:32:2c:dd:
46:5e:68:61:5f:ee:f4:d7:a1:6d:98:6d:77:3a:e5:13:24:10:
d2:4c:76:f9:b9:d2:0d:5e:24:79:78:ae:39:63:bc:f6:db:91:
f2:3d:7e:76:6f:2e:4e:0a:2e:47:a8:a3:29:36:d9:8e:c1:af:
72:99:42:82
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeW6WdZD8DlesfxMyaLex0dCCNiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjgxODE5MTlaFw0yNjEwMjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2YTdjZGVjOTI3ZGI3NjhkODA5YTIyZWE3MDk1YjRkYjQ0OWI4ODUyN2Zj
OWVlYzY0YjQ3OWE2MWIyZjdhZjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOsWpIeWtyF64ZwwJKODw8oTe0x6yIG3KBOab1sd8IVjf4kC3oLkZ62Pkfjo
SPr75jNARQhCgc0y2dgh7cFk4OEzRTBGzRznSpJNQZWjLffCVSPEnkjZ+Yv1jqKZ
xdfTFyYkPIWbrugRWEZteolF3PCSyD2ht3Uv9RWmCKjQB4R4Zj4qH9YV3hcrDUqZ
2bj0KWJA1OdxZgEcbl6WnFbaU6beKFdWOgyvcMknihkXiWyP5kpkcIg2d2hV3rKb
pko4UAERLZZpFFm7yJbOnL/D077K2chZ00R3eafzTcpNfgPeNBFI7bjwKccwMuLD
6u0Nf+ZOszuqOXZy+GBbjxHJOAUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQz8rrw
L/GCxUOr3FRWcfeLkxQs6zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDgwZmRmN2QtZWRkZC00Zjc1LWEyZTMtN2UxZjk2MmIwNmMwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DPA
MA0GCSqGSIb3DQEBCwUAA4IBAQC8zBqXYOabHfDBaUgDZAcD/49OB9rsB5CJZcEp
8QQsznU0kLx+gTtjDWK41od53jtexxYNmdJwqGeeAjqmn6gRwEGX9PHJ1XCjDk9n
ESjOKYXd5wt4xBx8qJvsdUatgS2vFixPXMirx9cuvf2SD0Ntq+qTHhFBbTbvvJMI
+/WTqf2Ocv+L83h4BqOuAV+EF16ygwjT9AjK6pcO9Bkh+j9YffznnZLHUDv2HJJt
FvFskZayeGzFgdWXsSliw/QToDeqwUgyLN1GXmhhX+7016FtmG13OuUTJBDSTHb5
udINXiR5eK45Y7z225HyPX52by5OCi5HqKMpNtmOwa9ymUKC
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:37 2026 by rpki-client