Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa
File: 255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa (raw, json)
Hash identifier: ACGsS5NNzFY3BW3PqVXOoVPykpYHbaCFLv5NJHLIyAY=
Subject key identifier: DD:39:35:F7:12:F4:7A:F3:C1:72:BF:81:BD:91:1D:5D:79:6C:FE:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B79D68EA766C527AB32850B435D320D1B5BB786
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa
Signing time: Thu 10 Sep 2026 02:40:11 +0000
ROA not before: Thu 10 Sep 2026 02:40:11 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:79:d6:8e:a7:66:c5:27:ab:32:85:0b:43:5d:32:0d:1b:5b:b7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:11 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=ad45af027fcb0df579d80f574c3cb5e4003dbd208be6145834ddaaa04ba953d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:8c:de:ff:30:3c:9f:7f:c1:b5:5c:67:fb:
2c:84:9a:83:86:d7:3f:ee:66:53:4a:66:0b:8a:5f:
8a:c0:3f:5c:97:23:30:ee:bd:3f:97:ef:24:c5:6d:
57:9b:bf:2f:f6:a5:4d:23:be:8d:7b:94:1a:7b:69:
d8:22:1c:62:6f:b5:63:0c:09:2a:4c:3a:2a:70:cf:
79:67:97:6e:91:d5:be:60:b0:bc:1a:25:f9:d2:d0:
f2:e2:b1:82:29:e1:4d:c5:1e:e6:54:4a:50:00:d6:
0d:59:5d:00:90:52:a6:d7:7f:6e:bf:7d:c9:b1:ff:
59:6a:4e:4c:bb:fc:35:57:e9:d0:79:ec:75:ac:9c:
7e:1b:0e:8f:09:3a:da:f4:7d:a4:46:7e:fe:c1:ad:
62:f2:4b:58:ff:9b:e1:39:18:41:06:33:9c:cf:cf:
ef:23:57:4b:0b:9d:4a:44:95:f3:26:6a:7b:92:3a:
c4:12:23:24:07:d0:df:d3:31:3a:75:93:84:1e:73:
45:bf:1c:08:dc:84:90:c9:fc:80:d3:df:22:0b:98:
a6:e8:3b:df:de:94:5b:f8:ac:d3:b8:fe:b1:9a:2d:
f7:e6:79:95:71:55:bc:34:0b:59:74:e7:e9:0c:0b:
ee:41:47:60:c8:d1:82:0b:41:28:26:bd:71:1d:93:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:39:35:F7:12:F4:7A:F3:C1:72:BF:81:BD:91:1D:5D:79:6C:FE:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:e7:58:11:6b:59:d2:41:b9:8a:ab:13:36:43:c4:52:ee:37:
6e:6e:8a:8d:9f:b7:e5:c8:12:eb:58:b2:a8:49:59:36:fa:85:
36:96:8f:09:c3:c6:5c:06:5f:47:62:ea:72:96:54:1d:44:fc:
0b:7f:70:52:c0:f6:7f:91:21:06:ad:50:03:38:b8:fb:fa:48:
1a:ee:ee:a9:5a:d7:f4:d0:f0:80:b5:b2:af:84:bd:3d:37:5b:
dd:f4:bb:31:6d:7f:8f:74:39:fc:0b:0a:cf:ef:11:6a:cf:01:
1d:c1:ff:90:bc:b4:8c:19:c2:05:3c:6d:18:16:bb:dd:17:78:
cb:8e:70:27:e4:08:53:10:91:43:69:bb:de:a8:28:e8:2b:f7:
16:24:67:43:e6:6b:70:33:57:dd:5f:4f:06:b9:a4:6c:41:05:
84:28:e0:1b:3c:16:19:cb:32:41:67:ff:a3:3f:10:dc:34:0e:
52:4d:b4:81:ac:d1:80:0f:9b:ef:d0:55:97:31:72:a1:ff:bd:
29:87:f6:c4:0e:31:c6:b0:64:6f:39:4d:a3:f7:e5:b8:01:20:
12:1e:58:20:a8:69:36:32:c5:53:aa:98:8e:f4:ec:d3:74:70:
f1:fb:ee:83:d7:ff:6f:a0:f1:9f:d1:49:13:cb:3d:12:25:92:
13:5a:24:cc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUS3nWjqdmxSerMoULQ10yDRtbt4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjQwMTFaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkNDVhZjAyN2ZjYjBkZjU3OWQ4MGY1NzRjM2NiNWU0MDAzZGJkMjA4YmU2
MTQ1ODM0ZGRhYWEwNGJhOTUzZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPVdjN7/MDyff8G1XGf7LISag4bXP+5mU0pmC4pfisA/XJcjMO69P5fvJMVt
V5u/L/alTSO+jXuUGntp2CIcYm+1YwwJKkw6KnDPeWeXbpHVvmCwvBol+dLQ8uKx
ginhTcUe5lRKUADWDVldAJBSptd/br99ybH/WWpOTLv8NVfp0HnsdaycfhsOjwk6
2vR9pEZ+/sGtYvJLWP+b4TkYQQYznM/P7yNXSwudSkSV8yZqe5I6xBIjJAfQ39Mx
OnWThB5zRb8cCNyEkMn8gNPfIguYpug7396UW/is07j+sZot9+Z5lXFVvDQLWXTn
6QwL7kFHYMjRggtBKCa9cR2TgBECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTdOTX3
EvR688Fyv4G9kR1deWz+NDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjU1YTVhZjktZTAwOC00YzIxLTkyYjQtNWU3NmNhYmIyYTNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDC51gRa1nSQbmKqxM2Q8RS7jduboqNn7flyBLr
WLKoSVk2+oU2lo8Jw8ZcBl9HYupyllQdRPwLf3BSwPZ/kSEGrVADOLj7+kga7u6p
Wtf00PCAtbKvhL09N1vd9LsxbX+PdDn8CwrP7xFqzwEdwf+QvLSMGcIFPG0YFrvd
F3jLjnAn5AhTEJFDabveqCjoK/cWJGdD5mtwM1fdX08GuaRsQQWEKOAbPBYZyzJB
Z/+jPxDcNA5STbSBrNGAD5vv0FWXMXKh/70ph/bEDjHGsGRvOU2j9+W4ASASHlgg
qGk2MsVTqpiO9OzTdHDx++6D1/9voPGf0UkTyz0SJZITWiTM
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:52 2026 by rpki-client