Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
File: 248ea861-facc-4167-976d-1e65c556b074.roa (raw, json)
Hash identifier: rZNTUBHIaZrn2iUuPcOyvYvw3caPqp0+U5VO7Avg+ng=
Subject key identifier: EA:78:48:26:5D:AF:47:B9:2E:C3:A7:59:4C:67:34:08:E7:EE:81:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B55D6AE974EDE24489EBBB8FBD8FCE3FE80F1D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
Signing time: Fri 07 Aug 2026 05:30:33 +0000
ROA not before: Fri 07 Aug 2026 05:30:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:55:d6:ae:97:4e:de:24:48:9e:bb:b8:fb:d8:fc:e3:fe:80:f1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=97c19d8b76a1f94da71133b13995c1c349376e78239854a9075780c397e15fb9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:9f:8a:ac:e7:09:f8:6b:60:13:e5:b8:12:
be:22:0b:a5:cd:a2:70:ed:48:93:74:a1:10:c3:7d:
0a:f8:8d:17:84:35:f2:ca:71:b7:b3:6f:cd:31:ec:
d6:9e:8e:d3:e5:03:60:ef:07:ae:90:99:80:82:6d:
68:2e:8b:77:ca:82:da:ec:21:6a:f5:26:5f:7e:09:
be:4f:5d:8f:4f:3d:84:7c:83:d8:e2:89:5a:4c:88:
7f:3c:65:aa:d0:51:61:2c:f3:fd:c8:92:ef:56:1a:
f3:22:4d:6e:ea:c1:1b:86:58:19:1c:bd:ae:38:c5:
bf:0b:d1:8b:96:08:78:cc:27:86:f3:ac:76:b6:c3:
dd:e7:96:9a:c0:9f:b6:94:f4:ab:2e:db:d4:77:24:
d5:c0:39:fd:6c:74:4a:d7:b9:b8:31:ad:d5:8d:c4:
89:22:54:cf:9d:0c:6c:dd:73:c3:11:08:68:7f:07:
39:d7:ab:b7:43:96:56:a1:6b:51:b1:e0:c0:77:75:
74:52:5b:47:b4:f0:64:25:48:3f:2b:b0:59:38:38:
0c:2f:fc:6b:d4:bc:24:ab:90:67:83:2c:1b:8a:a4:
ae:b2:45:0d:98:a0:99:26:f6:3d:ec:96:7b:61:0e:
9b:e9:28:2d:e0:ea:54:c2:d6:e5:fc:ee:a9:26:39:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:48:26:5D:AF:47:B9:2E:C3:A7:59:4C:67:34:08:E7:EE:81:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:1000::/40
Signature Algorithm: sha256WithRSAEncryption
10:c3:f2:3b:87:79:8b:8f:77:64:28:56:22:2f:8b:eb:3f:c0:
df:06:d0:c5:9b:35:83:1a:cf:4a:ef:de:e8:38:c4:82:f5:0a:
e6:bc:78:a5:f0:08:82:68:ef:f3:4e:41:f5:ac:ff:f0:7d:15:
4e:f1:2b:12:c7:9d:56:17:bb:f5:cb:0d:27:6f:1c:72:5b:80:
a9:2a:ab:4c:d8:86:30:62:89:af:d9:9b:88:bf:e6:71:f6:44:
a6:8d:fc:ae:00:75:49:b3:67:d9:b9:82:17:86:b5:7a:8e:2f:
e1:8c:cd:3f:1b:cd:b7:5b:ef:13:c6:06:3d:00:d2:17:a3:5f:
ae:d9:cd:83:e2:c8:f2:d9:ac:1d:57:01:2b:9b:a4:0c:92:b3:
15:7b:70:67:ae:7e:3a:90:79:32:dd:4c:0e:40:dc:0b:70:38:
b0:a5:6e:7c:dd:8e:2d:b0:50:90:c8:54:3c:9c:76:c6:8d:e3:
17:e1:e8:56:26:0a:fd:15:56:6a:b9:db:49:d0:f7:2c:08:fa:
22:54:7a:47:d2:3b:23:7f:d5:a9:2b:09:8f:07:44:36:be:88:
87:65:b6:ab:33:a5:ce:9e:a4:5e:39:0d:50:98:f0:97:06:b4:
12:61:00:6c:8c:97:e5:77:5a:e8:27:81:8b:9e:be:54:7f:38:
e9:9f:fa:b2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUO1XWrpdO3iRInru4+9j84/6A8dcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMzNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk3YzE5ZDhiNzZhMWY5NGRhNzExMzNiMTM5OTVjMWMzNDkzNzZlNzgyMzk4
NTRhOTA3NTc4MGMzOTdlMTVmYjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1En4qs5wn4a2AT5bgSviILpc2icO1Ik3ShEMN9CviNF4Q18spxt7NvzTHs
1p6O0+UDYO8HrpCZgIJtaC6Ld8qC2uwhavUmX34Jvk9dj089hHyD2OKJWkyIfzxl
qtBRYSzz/ciS71Ya8yJNburBG4ZYGRy9rjjFvwvRi5YIeMwnhvOsdrbD3eeWmsCf
tpT0qy7b1Hck1cA5/Wx0Ste5uDGt1Y3EiSJUz50MbN1zwxEIaH8HOdert0OWVqFr
UbHgwHd1dFJbR7TwZCVIPyuwWTg4DC/8a9S8JKuQZ4MsG4qkrrJFDZigmSb2PeyW
e2EOm+koLeDqVMLW5fzuqSY5LNsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTqeEgm
Xa9HuS7Dp1lMZzQI5+6BvzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjQ4ZWE4NjEtZmFjYy00MTY3LTk3NmQtMWU2NWM1NTZiMDc0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DYQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAQw/I7h3mLj3dkKFYiL4vrP8DfBtDFmzWDGs9K
797oOMSC9QrmvHil8AiCaO/zTkH1rP/wfRVO8SsSx51WF7v1yw0nbxxyW4CpKqtM
2IYwYomv2ZuIv+Zx9kSmjfyuAHVJs2fZuYIXhrV6ji/hjM0/G823W+8TxgY9ANIX
o1+u2c2D4sjy2awdVwErm6QMkrMVe3Bnrn46kHky3UwOQNwLcDiwpW583Y4tsFCQ
yFQ8nHbGjeMX4ehWJgr9FVZqudtJ0PcsCPoiVHpH0jsjf9WpKwmPB0Q2voiHZbar
M6XOnqReOQ1QmPCXBrQSYQBsjJfld1roJ4GLnr5Ufzjpn/qy
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:43 2026 by rpki-client