Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
File: 0849241f-abaf-4c57-aadb-d881485a0aac.roa (raw, json)
Hash identifier: ptPX8AEO69cSjT6bbpkmI/YHZKT4Cg6rxlmp5cpzLlw=
Subject key identifier: 86:49:E8:A2:76:6C:4C:A0:88:EF:D5:DE:95:44:15:B9:CB:0B:D6:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32FAA3D895AFF85AC055DF853DA24708032289F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
Signing time: Fri 07 Aug 2026 04:40:25 +0000
ROA not before: Fri 07 Aug 2026 04:40:25 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fa:a3:d8:95:af:f8:5a:c0:55:df:85:3d:a2:47:08:03:22:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:25 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ad642bf5fefbee48a0ec32972a8b69fdc19299d2b68b799913f987a4b461abab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:50:05:09:4c:32:7e:e3:bb:08:10:54:ab:
f7:c0:c3:96:bd:6c:3b:04:b5:78:eb:da:63:5f:92:
81:a0:0d:2c:e9:42:15:9e:25:d3:a6:67:fb:d3:62:
64:e0:fc:1c:8b:a5:46:6d:15:9f:31:6c:4a:a5:f3:
a9:9c:e0:f9:8e:c2:23:83:b1:29:dc:cc:6c:66:1f:
80:72:47:07:f0:3b:f4:b8:4f:5c:b1:e3:b5:e1:94:
5d:91:f7:fd:91:61:0d:98:d0:77:d1:83:e6:81:ca:
a6:dc:1e:96:97:25:19:83:be:40:78:e4:75:40:33:
0a:bc:a2:fc:bf:7e:8b:5c:b8:9c:57:5a:d6:4d:d3:
aa:b4:a6:45:9a:b8:d0:89:eb:6d:60:b5:16:9c:52:
8a:24:f8:cd:cf:52:38:dc:a0:60:5f:ec:2f:af:52:
ca:4b:d1:1c:e2:81:0f:1e:9f:5b:8d:e8:56:cf:d4:
ed:22:60:34:a7:16:f9:42:71:a9:fd:7d:90:2b:de:
7f:82:cc:f3:25:cb:00:22:d3:fb:6e:ec:99:e7:6d:
e4:b6:1b:b1:c2:c0:e5:85:fc:b8:10:06:88:19:e8:
37:a3:31:da:6b:e5:ec:51:17:d5:bd:d8:98:bf:19:
c3:41:ac:f8:34:7e:3d:3a:11:00:31:7f:0c:f7:57:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:49:E8:A2:76:6C:4C:A0:88:EF:D5:DE:95:44:15:B9:CB:0B:D6:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/38
Signature Algorithm: sha256WithRSAEncryption
a7:21:4e:73:ce:da:dc:30:67:55:c1:87:01:ff:3d:76:98:94:
7a:7c:40:8f:92:5a:f7:74:a9:ef:e5:c2:91:ab:7e:9d:e1:8a:
2d:f2:3d:c5:ca:cf:24:1a:a5:a5:a5:41:ec:6e:f8:5c:bb:a8:
3b:3e:b6:4d:ad:ab:ae:a0:8f:74:fe:81:f9:cd:68:6a:7d:09:
15:d4:c7:ff:43:d6:76:d5:42:04:29:1d:72:f5:78:b8:37:e8:
8f:94:85:1b:b4:11:13:68:fb:b2:7d:7f:f4:19:e5:97:2e:15:
6f:a1:99:9b:28:dd:4d:9d:a4:dd:08:af:ee:6e:55:a5:05:14:
27:8b:89:fe:1d:ec:c5:d5:9f:3f:c0:cc:9b:71:e2:6e:d9:74:
f0:a4:cb:ac:d4:7b:49:ac:61:ee:65:5d:e4:56:7e:59:42:5e:
64:06:36:39:ae:da:99:ca:52:6f:8c:f0:bd:a4:ea:4a:7a:74:
1f:dc:44:27:cd:97:80:28:8b:2f:b3:d8:12:89:f5:4a:c2:ed:
d3:1d:a3:b8:78:4f:14:1c:91:94:5e:1d:c8:2b:f9:d5:ee:48:
55:9e:8b:1f:d7:91:21:67:70:94:22:9b:de:b3:c0:ad:38:09:
3c:6a:27:79:96:80:94:66:fa:78:91:a1:7a:38:7e:f6:b8:93:
b5:c4:1c:7e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMvqj2JWv+FrAVd+FPaJHCAMiifAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDQwMjVaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkNjQyYmY1ZmVmYmVlNDhhMGVjMzI5NzJhOGI2OWZkYzE5Mjk5ZDJiNjhi
Nzk5OTEzZjk4N2E0YjQ2MWFiYWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMTLUAUJTDJ+47sIEFSr98DDlr1sOwS1eOvaY1+SgaANLOlCFZ4l06Zn+9Ni
ZOD8HIulRm0VnzFsSqXzqZzg+Y7CI4OxKdzMbGYfgHJHB/A79LhPXLHjteGUXZH3
/ZFhDZjQd9GD5oHKptwelpclGYO+QHjkdUAzCryi/L9+i1y4nFda1k3TqrSmRZq4
0InrbWC1FpxSiiT4zc9SONygYF/sL69SykvRHOKBDx6fW43oVs/U7SJgNKcW+UJx
qf19kCvef4LM8yXLACLT+27smedt5LYbscLA5YX8uBAGiBnoN6Mx2mvl7FEX1b3Y
mL8Zw0Gs+DR+PToRADF/DPdXF+sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSGSeii
dmxMoIjv1d6VRBW5ywvWmTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDg0OTI0MWYtYWJhZi00YzU3LWFhZGItZDg4MTQ4NWEwYWFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BIA
MA0GCSqGSIb3DQEBCwUAA4IBAQCnIU5zztrcMGdVwYcB/z12mJR6fECPklr3dKnv
5cKRq36d4Yot8j3Fys8kGqWlpUHsbvhcu6g7PrZNrauuoI90/oH5zWhqfQkV1Mf/
Q9Z21UIEKR1y9Xi4N+iPlIUbtBETaPuyfX/0GeWXLhVvoZmbKN1NnaTdCK/ublWl
BRQni4n+HezF1Z8/wMybceJu2XTwpMus1HtJrGHuZV3kVn5ZQl5kBjY5rtqZylJv
jPC9pOpKenQf3EQnzZeAKIsvs9gSifVKwu3THaO4eE8UHJGUXh3IK/nV7khVnosf
15EhZ3CUIpves8CtOAk8aid5loCUZvp4kaF6OH72uJO1xBx+
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:45 2026 by rpki-client