Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2245f74f-570c-4150-860f-512ca546f4cf.roa
File: 2245f74f-570c-4150-860f-512ca546f4cf.roa (raw, json)
Hash identifier: g0UGiD4xAzEb21cn8ceZohrGc6EfdutBNxkA5c+O4VA=
Subject key identifier: 7E:88:7C:3A:58:8C:B0:D2:5A:8C:25:DD:12:32:3D:67:A5:5D:82:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1870C02822CBA42E09B8A8D15DD5CEAA50D38796
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2245f74f-570c-4150-860f-512ca546f4cf.roa
Signing time: Wed 19 Aug 2026 01:00:40 +0000
ROA not before: Wed 19 Aug 2026 01:00:40 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:70:c0:28:22:cb:a4:2e:09:b8:a8:d1:5d:d5:ce:aa:50:d3:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:40 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=8757249029c1930d3a30fbc067e24c39e9dd3a083b70059c6fd5e08610221fd8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:59:7a:41:05:97:4d:2a:0f:6f:74:95:25:
d0:63:5c:ab:b9:5c:43:2d:3a:63:1c:b5:cd:fb:81:
be:d7:54:58:f1:df:cf:91:44:8c:f2:2f:9f:87:46:
37:fe:8b:c0:1e:2f:bb:e8:ba:45:e3:ae:98:b8:34:
40:c2:37:e8:d7:98:76:7f:6f:6b:f7:0c:43:82:e9:
bf:91:55:58:49:68:59:8e:33:7d:96:2b:72:25:f0:
0c:fc:c0:fb:5b:d6:9f:73:49:c6:7c:cc:df:58:0e:
d5:2d:a0:79:3a:85:08:1b:5a:b3:e1:bd:b2:9b:17:
ba:f2:37:ac:93:cd:b9:31:ef:51:38:b9:f0:75:75:
92:0b:c8:73:6d:72:c2:ac:dc:cb:6d:f3:9b:15:d7:
f1:da:ec:9a:4c:8b:18:d1:08:bf:b0:c8:f0:05:50:
69:6d:c0:99:aa:18:25:2f:4c:81:a3:de:83:d1:b8:
3b:4a:b3:a4:6a:86:cb:2d:d6:0b:79:02:3b:ab:5e:
30:63:63:4e:2f:61:78:f6:89:6b:07:28:56:76:19:
ee:78:ea:ea:13:26:c0:33:1f:f6:1a:37:f2:77:34:
bc:ab:44:df:83:e3:30:23:03:0e:09:63:3b:35:c8:
19:d5:7c:49:2d:90:19:36:45:4d:1f:00:65:f5:f6:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:7C:3A:58:8C:B0:D2:5A:8C:25:DD:12:32:3D:67:A5:5D:82:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2245f74f-570c-4150-860f-512ca546f4cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:a080::/48
Signature Algorithm: sha256WithRSAEncryption
53:09:11:7b:4b:78:72:4c:23:b2:d8:27:9f:09:a0:13:14:05:
6e:57:08:54:11:e5:ec:b1:93:54:2a:a2:9f:31:28:0b:e7:24:
35:77:7c:43:a9:89:e5:3c:87:5d:be:51:3a:90:60:a4:5b:5d:
63:ab:05:77:de:16:ee:8a:9d:5a:ee:09:45:96:c3:29:1a:c0:
1d:30:1a:29:61:89:cf:a2:df:2d:49:45:a1:b6:86:28:9e:76:
73:3b:a0:4f:2e:7e:f4:20:aa:b9:97:32:84:10:5b:3f:25:47:
4f:cc:ff:8e:e5:91:ea:07:ed:6b:c0:22:77:9b:3f:7f:8c:64:
78:a9:98:91:34:d7:39:9d:86:95:5d:22:ec:30:64:dc:54:e6:
4d:68:d1:b5:30:3a:15:5c:2f:78:fd:87:8b:c7:fa:11:3c:53:
39:f9:75:3f:fd:fe:62:04:7e:39:6d:30:a8:2d:58:72:b3:cb:
0d:79:37:c9:b5:de:e9:9a:1b:11:b1:a4:f0:01:50:d5:9e:ca:
58:7f:76:8d:72:63:0a:08:9e:23:bb:ca:96:c6:6c:32:70:7f:
46:34:5e:3f:eb:6b:99:ea:5e:5f:ff:df:52:79:15:8c:ed:8c:
91:93:ee:2c:74:9d:32:cf:b5:6d:7a:f0:66:b6:2b:cd:00:d2:
b5:71:8b:72
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGHDAKCLLpC4JuKjRXdXOqlDTh5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwNDBaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDg3NTcyNDkwMjljMTkzMGQzYTMwZmJjMDY3ZTI0YzM5ZTlkZDNhMDgzYjcw
MDU5YzZmZDVlMDg2MTAyMjFmZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpgWXpBBZdNKg9vdJUl0GNcq7lcQy06Yxy1zfuBvtdUWPHfz5FEjPIvn4dG
N/6LwB4vu+i6ReOumLg0QMI36NeYdn9va/cMQ4Lpv5FVWEloWY4zfZYrciXwDPzA
+1vWn3NJxnzM31gO1S2geTqFCBtas+G9spsXuvI3rJPNuTHvUTi58HV1kgvIc21y
wqzcy23zmxXX8drsmkyLGNEIv7DI8AVQaW3AmaoYJS9MgaPeg9G4O0qzpGqGyy3W
C3kCO6teMGNjTi9hePaJawcoVnYZ7njq6hMmwDMf9ho38nc0vKtE34PjMCMDDglj
OzXIGdV8SS2QGTZFTR8AZfX2wpcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR+iHw6
WIyw0lqMJd0SMj1npV2CFzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjI0NWY3NGYtNTcwYy00MTUwLTg2MGYtNTEyY2E1NDZmNGNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fqg
gDANBgkqhkiG9w0BAQsFAAOCAQEAUwkRe0t4ckwjstgnnwmgExQFblcIVBHl7LGT
VCqinzEoC+ckNXd8Q6mJ5TyHXb5ROpBgpFtdY6sFd94W7oqdWu4JRZbDKRrAHTAa
KWGJz6LfLUlFobaGKJ52czugTy5+9CCquZcyhBBbPyVHT8z/juWR6gfta8Aid5s/
f4xkeKmYkTTXOZ2GlV0i7DBk3FTmTWjRtTA6FVwveP2Hi8f6ETxTOfl1P/3+YgR+
OW0wqC1YcrPLDXk3ybXe6ZobEbGk8AFQ1Z7KWH92jXJjCgieI7vKlsZsMnB/RjRe
P+trmepeX//fUnkVjO2MkZPuLHSdMs+1bXrwZrYrzQDStXGLcg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:26 2026 by rpki-client