Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190e1645-8146-4d32-be0a-feed324f8efa.roa
File: 190e1645-8146-4d32-be0a-feed324f8efa.roa (raw, json)
Hash identifier: EO8O5XFowgoA3374MJTnhBRyhu2aV2sUxD9SSx/79uY=
Subject key identifier: 21:4C:32:28:83:D9:5B:B5:45:95:9F:FD:7A:6D:A0:97:E3:AA:5C:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 094229888CFFB0322A463DC053BEB478C03B1D7C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190e1645-8146-4d32-be0a-feed324f8efa.roa
Signing time: Fri 07 Aug 2026 04:40:07 +0000
ROA not before: Fri 07 Aug 2026 04:40:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:42:29:88:8c:ff:b0:32:2a:46:3d:c0:53:be:b4:78:c0:3b:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=2f87d359b66f3217bdf28ab8d91d15a3a29ab846b920e45867a3a289746bcd6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:c8:01:f3:d5:1a:34:e8:1d:4c:6a:75:41:
35:28:f5:80:92:62:06:ab:a8:d6:c3:b6:12:59:1e:
d6:48:2a:55:f9:4b:0a:fd:cb:95:4a:c2:17:1d:d6:
35:1c:0e:80:31:9e:a1:3a:28:5a:c1:20:2d:8c:d0:
62:9d:fc:73:f0:23:6c:f7:03:11:27:e4:76:fa:6d:
14:b2:7b:d7:07:34:5c:51:6a:55:4d:2f:27:93:44:
cd:b9:40:db:57:88:f2:4b:4d:c9:a0:e3:28:aa:e1:
72:7b:57:ad:38:2f:4a:1d:05:75:3b:a8:47:40:8f:
b8:c8:b5:0d:b8:05:3c:6f:cb:6a:54:a5:7e:f4:e6:
25:68:1b:01:95:a1:e6:bf:29:86:ab:70:8b:f9:c9:
0b:ba:3d:90:43:9f:ff:29:3b:ef:c3:5c:cf:88:af:
3c:d9:a8:69:4f:88:1f:e6:25:6e:f3:c4:c7:a5:0c:
2e:d3:33:f6:b0:15:d0:e4:c9:94:62:35:aa:a3:3c:
5c:4c:a5:8a:b5:9c:96:c3:02:2e:92:19:e2:d7:fa:
51:5f:87:b9:3c:3b:fb:17:f3:c5:69:ab:27:f3:ef:
fc:20:e9:73:e5:cc:2a:42:d5:8d:b4:36:a1:c4:03:
c6:09:57:e5:46:11:ee:ba:c0:93:92:ae:03:6c:2b:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:32:28:83:D9:5B:B5:45:95:9F:FD:7A:6D:A0:97:E3:AA:5C:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190e1645-8146-4d32-be0a-feed324f8efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:a000::/40
Signature Algorithm: sha256WithRSAEncryption
34:64:37:cc:14:e5:9f:25:b5:2b:21:52:6e:19:f5:ae:d9:14:
f6:b9:b3:bc:fa:2d:54:1c:13:10:d5:d1:cf:7f:f2:5a:52:68:
db:d1:44:fb:80:d1:be:35:7a:0d:ab:46:78:ce:eb:08:6e:d1:
8a:c4:96:49:12:3d:cd:b3:48:41:50:13:23:b2:2b:98:9c:72:
f1:ae:63:c4:42:84:59:b4:ad:93:e2:d9:10:0c:91:6a:dc:51:
9c:6f:c5:88:8c:3a:0c:31:9f:41:c5:be:29:6d:37:55:c8:b9:
32:82:be:ef:e9:e1:55:90:e6:c7:37:0e:0b:f7:e4:bf:56:ef:
02:9c:b4:ec:94:b7:5e:b5:b4:33:b9:f8:a8:7b:90:d8:9e:3a:
c0:d8:8d:cc:5c:ae:40:9f:a6:8e:9b:29:fb:ab:e7:79:98:db:
e5:e7:fb:7c:95:1f:06:b5:4e:48:b1:ea:38:36:72:f4:59:05:
9c:32:61:5f:db:0a:2a:c5:c3:6c:4d:47:58:4e:db:0f:73:19:
e4:18:6a:52:16:b6:b4:81:33:c6:5c:01:14:8e:7e:6f:56:63:
7d:98:7b:7c:e7:56:c9:e2:80:39:f0:49:6b:b7:a2:97:e5:3f:
6c:db:fe:83:5a:69:12:0b:12:fd:8b:3e:19:39:25:1d:23:92:
1f:8a:a8:c0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCUIpiIz/sDIqRj3AU760eMA7HXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDQwMDdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDJmODdkMzU5YjY2ZjMyMTdiZGYyOGFiOGQ5MWQxNWEzYTI5YWI4NDZiOTIw
ZTQ1ODY3YTNhMjg5NzQ2YmNkNmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALw7yAHz1Ro06B1ManVBNSj1gJJiBquo1sO2Elke1kgqVflLCv3LlUrCFx3W
NRwOgDGeoTooWsEgLYzQYp38c/AjbPcDESfkdvptFLJ71wc0XFFqVU0vJ5NEzblA
21eI8ktNyaDjKKrhcntXrTgvSh0FdTuoR0CPuMi1DbgFPG/LalSlfvTmJWgbAZWh
5r8phqtwi/nJC7o9kEOf/yk778Ncz4ivPNmoaU+IH+YlbvPEx6UMLtMz9rAV0OTJ
lGI1qqM8XEylirWclsMCLpIZ4tf6UV+HuTw7+xfzxWmrJ/Pv/CDpc+XMKkLVjbQ2
ocQDxglX5UYR7rrAk5KuA2wr6CkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhTDIo
g9lbtUWVn/16baCX46pc2zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTkwZTE2NDUtODE0Ni00ZDMyLWJlMGEtZmVlZDMyNGY4ZWZhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DSg
MA0GCSqGSIb3DQEBCwUAA4IBAQA0ZDfMFOWfJbUrIVJuGfWu2RT2ubO8+i1UHBMQ
1dHPf/JaUmjb0UT7gNG+NXoNq0Z4zusIbtGKxJZJEj3Ns0hBUBMjsiuYnHLxrmPE
QoRZtK2T4tkQDJFq3FGcb8WIjDoMMZ9Bxb4pbTdVyLkygr7v6eFVkObHNw4L9+S/
Vu8CnLTslLdetbQzufioe5DYnjrA2I3MXK5An6aOmyn7q+d5mNvl5/t8lR8GtU5I
seo4NnL0WQWcMmFf2woqxcNsTUdYTtsPcxnkGGpSFra0gTPGXAEUjn5vVmN9mHt8
51bJ4oA58Elrt6KX5T9s2/6DWmkSCxL9iz4ZOSUdI5IfiqjA
-----END CERTIFICATE-----
Generated at Fri Aug 14 14:50:46 2026 by rpki-client