Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1f2a3923-9e13-4410-95de-11acb160d532.roa
File: 1f2a3923-9e13-4410-95de-11acb160d532.roa (raw, json)
Hash identifier: Rmw3CN8VUzfNCWCbAdc7ppddqX1rw8q9xqEUqgc1yxQ=
Subject key identifier: F1:02:25:63:56:55:64:5B:BF:C2:9A:6E:92:94:6B:5A:5F:8A:F8:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CE0F74806EC5A74CDA5DA21EADDFB997375A327
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1f2a3923-9e13-4410-95de-11acb160d532.roa
Signing time: Thu 10 Sep 2026 02:30:14 +0000
ROA not before: Thu 10 Sep 2026 02:30:14 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e0:f7:48:06:ec:5a:74:cd:a5:da:21:ea:dd:fb:99:73:75:a3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:14 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=5927d0a25ee4e8fbc3634143709544a58096dcc8871bf9021af9a9ac4b452311, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:42:cb:92:bc:80:10:8d:79:2d:e1:36:98:
5e:c9:84:10:32:ba:9b:71:04:6f:5f:6a:86:31:c2:
5a:96:8f:ec:80:d2:9a:56:ae:36:dd:0e:33:f5:94:
41:44:5e:8d:7c:be:bc:5f:43:12:ba:4c:0a:fc:82:
9c:1e:0c:8a:6e:a3:5c:82:1b:a8:3b:13:a6:e0:e7:
25:5c:e8:27:ab:ae:62:7c:12:d7:57:f5:29:5d:b3:
5f:94:88:d1:0e:de:22:6b:b5:71:47:8e:2f:3d:af:
40:42:3c:d2:ae:e8:a0:d2:6e:09:68:55:cf:28:7d:
4f:cc:94:a5:a7:99:38:f9:e7:09:8a:84:c0:13:5f:
f5:10:3c:33:cf:43:d2:d3:b8:ca:d0:19:00:6f:74:
10:56:bb:7c:6d:42:83:8f:f5:8f:e8:e5:cd:80:c0:
00:1c:e3:cd:70:da:f1:9b:73:98:23:60:e7:95:4e:
1b:bd:73:ae:96:79:10:08:dd:d4:42:76:34:38:06:
fd:f1:0c:42:32:25:80:73:38:77:ca:b7:0a:ca:2a:
fd:44:f5:19:92:b4:29:9e:ed:d7:49:b6:b9:c8:38:
34:4c:59:ee:17:72:62:46:f6:8e:a9:49:49:cb:d8:
81:98:46:1d:f3:be:02:4c:fe:36:a9:7f:32:90:3f:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:25:63:56:55:64:5B:BF:C2:9A:6E:92:94:6B:5A:5F:8A:F8:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1f2a3923-9e13-4410-95de-11acb160d532.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:6080::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cf:d3:bd:77:8b:3f:f6:8b:a7:fd:5d:7f:d8:ba:6a:1f:2d:
62:b1:bf:22:ea:9c:00:97:b0:1c:dc:86:ba:9a:df:60:de:27:
96:99:c8:31:35:4b:30:23:b3:fd:ee:2d:1e:16:1e:30:56:44:
c6:49:30:d4:c4:8a:fb:46:6a:83:32:dd:a5:e8:39:64:60:82:
0f:28:1b:d9:42:84:9f:59:e1:79:c9:fe:af:59:84:7f:2a:42:
32:ab:d4:6c:dc:80:62:e5:e2:63:d3:2a:33:a7:35:36:17:1b:
89:3d:47:19:7f:0b:e0:df:12:f9:1c:8f:a9:3d:c5:da:41:39:
86:43:cc:60:9c:7c:0e:db:c4:79:46:a7:4a:ec:57:33:8f:0e:
48:55:c0:e2:8b:db:7f:5b:53:ad:8b:3e:2c:51:04:08:2b:bf:
58:86:5a:32:a4:bb:d2:fc:f0:7b:6c:05:a6:99:f5:5f:95:3a:
c3:e5:e5:c3:2e:b2:2d:61:c4:8c:fe:07:ba:04:99:de:84:0b:
a6:ce:12:d1:6a:00:12:8a:64:38:10:d7:a2:91:fb:f8:94:95:
c6:12:fb:cf:e3:69:f2:d7:b5:5f:13:b7:af:ee:2e:d9:5c:31:
38:42:ea:92:cb:ed:1b:2d:f7:ef:e3:6b:09:dc:ff:e6:2e:0d:
70:0e:df:6c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTOD3SAbsWnTNpdoh6t37mXN1oycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjMwMTRaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDU5MjdkMGEyNWVlNGU4ZmJjMzYzNDE0MzcwOTU0NGE1ODA5NmRjYzg4NzFi
ZjkwMjFhZjlhOWFjNGI0NTIzMTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALqCQsuSvIAQjXkt4TaYXsmEEDK6m3EEb19qhjHCWpaP7IDSmlauNt0OM/WU
QURejXy+vF9DErpMCvyCnB4Mim6jXIIbqDsTpuDnJVzoJ6uuYnwS11f1KV2zX5SI
0Q7eImu1cUeOLz2vQEI80q7ooNJuCWhVzyh9T8yUpaeZOPnnCYqEwBNf9RA8M89D
0tO4ytAZAG90EFa7fG1Cg4/1j+jlzYDAABzjzXDa8ZtzmCNg55VOG71zrpZ5EAjd
1EJ2NDgG/fEMQjIlgHM4d8q3Csoq/UT1GZK0KZ7t10m2ucg4NExZ7hdyYkb2jqlJ
ScvYgZhGHfO+Akz+Nql/MpA/sekCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTxAiVj
VlVkW7/Cmm6SlGtaX4r4aDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWYyYTM5MjMtOWUxMy00NDEwLTk1ZGUtMTFhY2IxNjBkNTMyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gtg
gDANBgkqhkiG9w0BAQsFAAOCAQEAe8/TvXeLP/aLp/1df9i6ah8tYrG/IuqcAJew
HNyGuprfYN4nlpnIMTVLMCOz/e4tHhYeMFZExkkw1MSK+0ZqgzLdpeg5ZGCCDygb
2UKEn1nhecn+r1mEfypCMqvUbNyAYuXiY9MqM6c1NhcbiT1HGX8L4N8S+RyPqT3F
2kE5hkPMYJx8DtvEeUanSuxXM48OSFXA4ovbf1tTrYs+LFEECCu/WIZaMqS70vzw
e2wFppn1X5U6w+Xlwy6yLWHEjP4HugSZ3oQLps4S0WoAEopkOBDXopH7+JSVxhL7
z+Np8te1XxO3r+4u2VwxOELqksvtGy337+NrCdz/5i4NcA7fbA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:14 2026 by rpki-client