Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
File: 0b50b516-b90a-4f69-ace2-8e904f240f1d.roa (raw, json)
Hash identifier: OdLOZJDeQYyypaZvyE4XOBDWRJccqyXB8uEkUnofnbs=
Subject key identifier: C2:5D:18:E6:CF:00:2F:E7:90:D9:A2:E2:2A:85:BF:8C:DF:2C:F7:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60BD90C23052B77B293E75922714EACBA5D4E576
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
Signing time: Fri 07 Aug 2026 04:40:57 +0000
ROA not before: Fri 07 Aug 2026 04:40:57 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bd:90:c2:30:52:b7:7b:29:3e:75:92:27:14:ea:cb:a5:d4:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:57 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ac15d4c89ba7041e820e462f863548bc8cdaf1390ff1519500adf2b72052cabf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:0b:0b:a8:5b:a5:06:f4:b4:1b:76:ce:68:
9a:00:bb:0e:75:5d:72:99:38:30:4b:f2:2d:2f:18:
b1:d9:ae:34:95:1b:5b:e1:9b:87:8f:b9:9f:39:4b:
2a:9c:86:df:2f:6f:d6:a5:7e:38:2c:82:07:b9:23:
44:74:fc:6b:75:2d:9a:fb:c4:70:8e:5a:2f:ca:b0:
20:40:3e:12:db:54:8f:5e:0c:06:46:0a:17:fe:fe:
4d:f9:1f:42:8c:6d:e0:d2:15:ff:35:93:25:52:e0:
07:fd:a2:0a:e2:2f:48:82:5b:50:9c:42:b5:e4:5b:
c2:5f:7b:35:fa:61:35:3f:bd:6c:a2:71:7d:ff:43:
bb:1d:aa:cb:9c:a4:01:6e:2c:d4:2c:88:c1:d7:f7:
88:f8:fc:22:c6:2e:e3:7d:83:23:4d:32:66:85:94:
d4:8d:88:9f:4d:ec:1d:d2:1e:1f:6c:77:d6:50:f9:
b4:c2:72:db:d1:b7:84:50:2a:b6:c6:28:8a:af:38:
c7:1e:e5:0d:94:2c:1d:11:15:ea:be:34:15:43:1d:
43:ec:30:7b:46:fb:54:1b:84:69:b1:20:ce:93:db:
e0:03:d1:33:1c:74:5b:b0:ee:7a:5b:42:c1:a7:ca:
5a:23:fa:92:a0:41:97:b3:8a:d2:98:e6:9e:a0:49:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5D:18:E6:CF:00:2F:E7:90:D9:A2:E2:2A:85:BF:8C:DF:2C:F7:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:c00::/38
Signature Algorithm: sha256WithRSAEncryption
27:ab:af:ed:73:10:54:d0:e3:b6:67:3d:73:46:15:6e:f3:7a:
65:4e:d9:2a:e1:9d:61:56:11:dd:35:a9:b6:7c:0d:94:07:da:
ea:26:b7:9c:67:95:11:98:31:17:b0:6e:d5:3d:24:e9:08:aa:
58:46:d2:91:ce:91:96:d5:b3:2c:9a:f1:53:a9:b5:04:f3:9d:
e6:3d:d7:19:fe:73:9c:68:7c:66:7e:4b:66:9e:e5:1d:2d:d5:
e9:bd:ba:b6:e1:a0:27:93:4d:82:16:0b:55:d2:83:8b:63:39:
47:79:f5:14:b7:2f:e3:9e:b6:8f:bb:b5:a5:73:5a:cf:6b:2d:
c7:bd:ae:01:39:8f:5a:1d:17:35:8e:b4:40:1c:81:77:27:81:
97:65:0c:a1:08:bc:ba:81:21:e8:17:83:29:9c:55:c9:90:99:
19:25:91:7e:78:5a:ad:65:e9:25:ac:26:d5:ad:c5:f4:10:2e:
41:1b:8a:07:7f:f4:28:5b:67:ff:9b:f6:d6:5c:17:6a:1a:e0:
1c:e3:80:ad:46:db:c5:8a:6c:51:d6:ff:c9:ff:9c:73:33:47:
c8:78:fd:06:f8:b6:6e:84:34:b2:6f:db:ca:f9:59:2b:8c:9b:
ad:61:f2:a4:e3:07:62:80:b5:65:aa:eb:e0:9e:9b:72:11:20:
83:cf:35:3c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYL2QwjBSt3spPnWSJxTqy6XU5XYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDQwNTdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjMTVkNGM4OWJhNzA0MWU4MjBlNDYyZjg2MzU0OGJjOGNkYWYxMzkwZmYx
NTE5NTAwYWRmMmI3MjA1MmNhYmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIlBCwuoW6UG9LQbds5omgC7DnVdcpk4MEvyLS8YsdmuNJUbW+Gbh4+5nzlL
KpyG3y9v1qV+OCyCB7kjRHT8a3UtmvvEcI5aL8qwIEA+EttUj14MBkYKF/7+Tfkf
Qoxt4NIV/zWTJVLgB/2iCuIvSIJbUJxCteRbwl97NfphNT+9bKJxff9Dux2qy5yk
AW4s1CyIwdf3iPj8IsYu432DI00yZoWU1I2In03sHdIeH2x31lD5tMJy29G3hFAq
tsYoiq84xx7lDZQsHREV6r40FUMdQ+wwe0b7VBuEabEgzpPb4APRMxx0W7DueltC
wafKWiP6kqBBl7OK0pjmnqBJMWcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTCXRjm
zwAv55DZouIqhb+M3yz3gDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGI1MGI1MTYtYjkwYS00ZjY5LWFjZTItOGU5MDRmMjQwZjFkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BoM
MA0GCSqGSIb3DQEBCwUAA4IBAQAnq6/tcxBU0OO2Zz1zRhVu83plTtkq4Z1hVhHd
Nam2fA2UB9rqJrecZ5URmDEXsG7VPSTpCKpYRtKRzpGW1bMsmvFTqbUE853mPdcZ
/nOcaHxmfktmnuUdLdXpvbq24aAnk02CFgtV0oOLYzlHefUUty/jnraPu7Wlc1rP
ay3Hva4BOY9aHRc1jrRAHIF3J4GXZQyhCLy6gSHoF4MpnFXJkJkZJZF+eFqtZekl
rCbVrcX0EC5BG4oHf/QoW2f/m/bWXBdqGuAc44CtRtvFimxR1v/J/5xzM0fIeP0G
+LZuhDSyb9vK+VkrjJutYfKk4wdigLVlquvgnptyESCDzzU8
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:04 2026 by rpki-client