Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a51b4f8-b1c3-444a-8ff9-d1cda2fa924f.roa
File: 1a51b4f8-b1c3-444a-8ff9-d1cda2fa924f.roa (raw, json)
Hash identifier: CmG5I5HM6T31XTNJQ0ota2mMiURxJlbDEH10UrxFYEo=
Subject key identifier: 3D:E8:CE:BE:5A:2B:F2:C2:9B:3B:3D:C6:84:58:F2:64:F9:67:7B:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26C666DDBF6F3A9D14BC339885AEEC15A8BE62FE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a51b4f8-b1c3-444a-8ff9-d1cda2fa924f.roa
Signing time: Wed 09 Sep 2026 16:14:07 +0000
ROA not before: Wed 09 Sep 2026 16:14:07 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c6:66:dd:bf:6f:3a:9d:14:bc:33:98:85:ae:ec:15:a8:be:62:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:07 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=b4b793edd673c6a19c975620d20b68464ef1539a2e16c782c3569f84936cc24e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:fe:4c:9c:ad:d7:9b:de:bc:bc:be:38:8b:
a2:4d:34:40:3b:51:6f:86:c6:75:e0:3c:c3:e4:73:
4b:10:a3:5a:d0:6e:ba:b7:91:7c:0d:ef:a0:a2:47:
75:2d:f3:f3:6a:bb:82:32:75:94:63:f3:9e:25:34:
1d:5b:bd:fd:f1:dc:a4:55:e6:c0:d4:50:f4:c8:73:
4e:52:98:c0:62:48:e1:d0:2e:a5:81:98:7e:76:a6:
ab:0f:90:b7:e3:60:4a:e2:ed:cc:04:11:fa:51:03:
5a:0e:45:44:53:89:bb:89:2e:3f:d8:d2:39:1d:88:
06:a6:84:a1:74:8c:8f:cf:d9:da:9b:d4:e6:e1:a0:
93:67:8e:e7:06:22:79:7e:e1:3a:fc:f5:ec:7c:04:
09:80:23:fc:7b:68:5a:66:92:9b:75:eb:c0:e0:4d:
4a:4a:2a:c1:ef:bf:df:d9:94:df:49:14:c9:82:ef:
68:b1:b7:43:a8:9a:9e:00:33:ce:d0:b4:66:62:32:
50:21:bb:31:c4:8d:da:b6:97:2e:06:cb:f5:02:1c:
dd:4b:1a:ec:86:14:08:11:21:30:f1:c1:ba:c1:c1:
13:4b:63:c0:6f:85:57:6f:74:4c:8f:ef:1a:42:12:
71:17:7f:be:42:cc:f3:59:40:68:14:59:9f:46:d4:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:CE:BE:5A:2B:F2:C2:9B:3B:3D:C6:84:58:F2:64:F9:67:7B:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a51b4f8-b1c3-444a-8ff9-d1cda2fa924f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:4800::/40
Signature Algorithm: sha256WithRSAEncryption
97:cf:43:8a:22:ec:05:00:e3:9c:b5:ac:cb:8e:b4:1d:02:f6:
2d:44:69:f6:7f:24:f9:18:b8:58:64:40:c9:15:27:0e:7e:8e:
2e:d3:da:1e:8a:e9:5e:0d:db:e3:87:ff:02:2e:5e:ad:4e:cf:
35:7d:4a:30:10:78:8c:5a:b9:ff:b3:7a:30:50:d3:d3:26:ab:
e5:53:5b:0c:c0:59:96:63:3a:17:b7:fc:05:67:7d:d0:dc:c8:
33:90:25:85:af:dd:12:33:f5:d2:1f:be:91:e8:66:0e:11:09:
9c:d5:fc:f6:5a:b0:1f:93:a5:38:83:71:8e:96:0b:ca:bf:ab:
82:bb:af:81:64:c0:92:aa:46:aa:96:c0:a4:55:c2:6f:36:04:
ec:9c:e5:72:38:be:34:26:44:e4:8c:7c:89:94:41:94:60:f2:
a8:5d:8f:ee:28:c7:98:31:74:58:ca:ae:4e:e0:6d:7c:3a:68:
d4:28:95:5a:da:b5:f0:53:88:bb:37:18:0d:16:0d:9a:f6:dc:
4a:05:2c:44:81:60:36:f2:01:ff:5d:64:a6:e5:5c:d6:5b:00:
f0:d7:86:e8:5a:1f:5d:eb:29:32:2e:d4:76:33:92:70:dc:06:
ee:b5:f2:6e:04:08:d8:a8:de:6f:f3:e3:38:36:6d:1f:2f:d4:
b5:15:60:de
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJsZm3b9vOp0UvDOYha7sFai+Yv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE0MDdaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGI0Yjc5M2VkZDY3M2M2YTE5Yzk3NTYyMGQyMGI2ODQ2NGVmMTUzOWEyZTE2
Yzc4MmMzNTY5Zjg0OTM2Y2MyNGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKac/kycrdeb3ry8vjiLok00QDtRb4bGdeA8w+RzSxCjWtBuureRfA3voKJH
dS3z82q7gjJ1lGPzniU0HVu9/fHcpFXmwNRQ9MhzTlKYwGJI4dAupYGYfnamqw+Q
t+NgSuLtzAQR+lEDWg5FRFOJu4kuP9jSOR2IBqaEoXSMj8/Z2pvU5uGgk2eO5wYi
eX7hOvz17HwECYAj/HtoWmaSm3XrwOBNSkoqwe+/39mU30kUyYLvaLG3Q6iangAz
ztC0ZmIyUCG7McSN2raXLgbL9QIc3Usa7IYUCBEhMPHBusHBE0tjwG+FV290TI/v
GkIScRd/vkLM81lAaBRZn0bUdP8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ96M6+
Wivywps7PcaEWPJk+Wd76zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWE1MWI0ZjgtYjFjMy00NDRhLThmZjktZDFjZGEyZmE5MjRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HpI
MA0GCSqGSIb3DQEBCwUAA4IBAQCXz0OKIuwFAOOctazLjrQdAvYtRGn2fyT5GLhY
ZEDJFScOfo4u09oeiuleDdvjh/8CLl6tTs81fUowEHiMWrn/s3owUNPTJqvlU1sM
wFmWYzoXt/wFZ33Q3MgzkCWFr90SM/XSH76R6GYOEQmc1fz2WrAfk6U4g3GOlgvK
v6uCu6+BZMCSqkaqlsCkVcJvNgTsnOVyOL40JkTkjHyJlEGUYPKoXY/uKMeYMXRY
yq5O4G18OmjUKJVa2rXwU4i7NxgNFg2a9txKBSxEgWA28gH/XWSm5VzWWwDw14bo
Wh9d6ykyLtR2M5Jw3AbutfJuBAjYqN5v8+M4Nm0fL9S1FWDe
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:44 2026 by rpki-client