Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1355f6bf-dfcf-46fa-a416-03838fc26eb7.roa
File: 1355f6bf-dfcf-46fa-a416-03838fc26eb7.roa (raw, json)
Hash identifier: r4QZqNUpmAx7znuYYlswoLPxqKrKs8LpWh4oxnIc0PA=
Subject key identifier: 48:B3:CD:E6:80:09:D3:B5:CC:47:06:B0:E9:67:F6:4F:32:BD:9B:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 391D588B4667597B60CEA00ED41332E3E1C89E4E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1355f6bf-dfcf-46fa-a416-03838fc26eb7.roa
Signing time: Wed 09 Sep 2026 16:12:54 +0000
ROA not before: Wed 09 Sep 2026 16:12:54 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:58:8b:46:67:59:7b:60:ce:a0:0e:d4:13:32:e3:e1:c8:9e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:54 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=887cf4ed2596a166f544f7cf51fca6b4d7f92621516d0d24ce70b95018fa96f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:d4:35:71:e5:68:07:4c:cd:9d:4b:c4:73:
86:7e:19:4f:cc:39:9d:94:9e:2d:1a:f4:a6:b8:0b:
33:fd:a4:c6:67:6f:f7:0a:cc:23:78:03:fd:c4:4e:
c0:3f:b6:93:17:21:61:50:03:3c:69:60:98:f8:38:
5b:0f:6c:59:90:12:83:fc:27:94:85:a1:47:d2:37:
73:17:98:7e:ca:97:f1:bd:28:75:81:90:f5:05:0c:
9f:bf:e6:52:94:8f:e3:21:bb:20:94:3e:1a:c2:ae:
20:53:97:68:53:c9:3e:ae:8c:49:f2:97:0a:50:a1:
97:d5:61:b0:72:c9:54:d8:a7:ed:f5:26:8b:5c:a6:
0e:c1:80:f7:f9:a0:78:eb:f8:4d:4c:f0:a2:79:a0:
ac:ed:b8:71:ed:e3:b7:cc:50:16:d3:01:2a:a1:ae:
d0:c5:19:ec:12:1c:4d:97:c0:14:da:a7:17:95:11:
f4:a7:48:23:ff:3d:e1:5c:97:02:c4:e8:b7:e2:39:
b9:d0:43:7f:d1:51:c5:45:ba:36:bd:48:d7:56:8a:
5a:43:e6:b5:d4:63:dd:c2:8f:a2:14:d2:65:50:d1:
d0:4c:6a:43:be:18:b9:50:22:aa:2a:7d:a1:c3:f3:
c7:49:db:27:6f:cc:67:50:bf:e5:46:ef:56:61:5e:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:CD:E6:80:09:D3:B5:CC:47:06:B0:E9:67:F6:4F:32:BD:9B:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1355f6bf-dfcf-46fa-a416-03838fc26eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:4800::/40
Signature Algorithm: sha256WithRSAEncryption
36:a7:77:31:c8:97:7f:c6:24:99:92:f9:92:b6:05:b7:91:e4:
7b:21:59:9a:ca:95:cf:40:ba:6c:86:06:a8:d7:9a:f1:72:1a:
2a:d1:0b:d1:27:4d:01:7a:6f:27:6f:64:8d:ce:ca:fa:16:27:
a7:e0:44:1f:23:1f:52:aa:64:61:29:bd:8f:fe:c3:f3:d3:79:
06:9c:22:a0:0a:09:ae:0f:47:43:81:ae:e0:40:64:be:90:24:
c3:6c:09:ad:75:11:2f:fa:d7:6b:54:7c:f6:a6:7d:3e:9d:c3:
f6:89:1b:b1:b8:c6:e9:a3:8a:ce:59:4b:97:be:e8:81:62:ae:
67:f8:75:0b:f3:8f:1f:46:29:4b:90:9e:02:98:13:c2:83:ab:
ed:05:32:4d:9f:d2:6f:70:88:f2:23:2d:4d:8e:9e:a7:7d:b9:
45:d0:16:6b:1a:71:2c:10:a6:90:52:cc:0f:d2:b2:a1:c7:9d:
a2:7e:24:4c:2d:ff:ca:cc:fc:55:41:df:8d:5b:e8:1d:ad:34:
a8:3b:34:33:d7:e6:94:14:ca:93:2d:da:f9:42:9c:df:bd:07:
49:ac:30:dd:46:05:24:4c:14:8e:90:c8:1a:40:46:0e:ab:a6:
9b:71:d3:32:0d:b2:a7:69:c7:c1:2b:c6:a1:0c:44:a2:da:3b:
0e:c9:db:10
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOR1Yi0ZnWXtgzqAO1BMy4+HInk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjEyNTRaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDg4N2NmNGVkMjU5NmExNjZmNTQ0ZjdjZjUxZmNhNmI0ZDdmOTI2MjE1MTZk
MGQyNGNlNzBiOTUwMThmYTk2ZjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIWX1DVx5WgHTM2dS8Rzhn4ZT8w5nZSeLRr0prgLM/2kxmdv9wrMI3gD/cRO
wD+2kxchYVADPGlgmPg4Ww9sWZASg/wnlIWhR9I3cxeYfsqX8b0odYGQ9QUMn7/m
UpSP4yG7IJQ+GsKuIFOXaFPJPq6MSfKXClChl9VhsHLJVNin7fUmi1ymDsGA9/mg
eOv4TUzwonmgrO24ce3jt8xQFtMBKqGu0MUZ7BIcTZfAFNqnF5UR9KdII/894VyX
AsTot+I5udBDf9FRxUW6Nr1I11aKWkPmtdRj3cKPohTSZVDR0ExqQ74YuVAiqip9
ocPzx0nbJ2/MZ1C/5UbvVmFe0D0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRIs83m
gAnTtcxHBrDpZ/ZPMr2bMjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTM1NWY2YmYtZGZjZi00NmZhLWE0MTYtMDM4MzhmYzI2ZWI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DVI
MA0GCSqGSIb3DQEBCwUAA4IBAQA2p3cxyJd/xiSZkvmStgW3keR7IVmaypXPQLps
hgao15rxchoq0QvRJ00Bem8nb2SNzsr6Fien4EQfIx9SqmRhKb2P/sPz03kGnCKg
CgmuD0dDga7gQGS+kCTDbAmtdREv+tdrVHz2pn0+ncP2iRuxuMbpo4rOWUuXvuiB
Yq5n+HUL848fRilLkJ4CmBPCg6vtBTJNn9JvcIjyIy1Njp6nfblF0BZrGnEsEKaQ
UswP0rKhx52ifiRMLf/KzPxVQd+NW+gdrTSoOzQz1+aUFMqTLdr5QpzfvQdJrDDd
RgUkTBSOkMgaQEYOq6abcdMyDbKnacfBK8ahDESi2jsOydsQ
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:44 2026 by rpki-client