Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27f25b17-9a59-4695-ace4-e0e69e692481.roa
File: 27f25b17-9a59-4695-ace4-e0e69e692481.roa (raw, json)
Hash identifier: UlytSLKhczV5QqnFBrtfgic7XllNDMiRky18QF94Nko=
Subject key identifier: 81:D4:51:56:0F:B5:15:54:52:FC:D6:E8:01:71:7A:A6:BE:EF:D1:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5431DF3FC0A167C88D547A9BB14BF7BDF8A4B512
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27f25b17-9a59-4695-ace4-e0e69e692481.roa
Signing time: Mon 10 Aug 2026 01:00:14 +0000
ROA not before: Mon 10 Aug 2026 01:00:14 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:31:df:3f:c0:a1:67:c8:8d:54:7a:9b:b1:4b:f7:bd:f8:a4:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:14 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=f7b66b58b66500aa501d30a106557c20f5a347b83ca03129f16d8131858b8227, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:cb:f0:58:72:24:b7:21:88:60:66:65:d8:
81:5f:61:9c:4c:ed:1d:79:51:c8:d4:98:50:34:a0:
7d:26:e9:fb:df:30:ab:4a:3d:82:16:25:f3:ce:64:
d5:9c:d9:d8:12:04:71:cc:d3:1d:22:f2:be:17:75:
50:18:bf:90:7f:99:3f:e4:51:0b:87:ff:ad:80:1f:
07:e0:1f:e8:46:fe:aa:0e:03:92:fc:ee:a7:ed:8a:
d5:7d:d8:38:bf:21:6e:03:cf:49:8f:97:aa:8f:66:
a3:94:90:b4:b5:ab:a1:75:24:7d:c7:e7:93:ec:a5:
2d:24:fc:9d:f6:89:39:3a:ed:c1:be:4f:31:37:79:
4b:ab:ec:01:2d:77:4d:1a:e0:07:c9:61:c4:22:d1:
5f:9b:53:77:f3:1e:33:89:9f:9f:1e:52:51:2f:9d:
6f:d5:22:c1:6b:05:a3:ff:17:f5:cc:80:39:e1:70:
25:f0:52:f4:cd:71:85:e8:c2:88:13:3e:7d:d3:b3:
7f:36:99:5b:a1:03:70:67:51:9f:47:8b:4f:f8:f1:
79:3d:4e:d8:e7:a7:30:30:23:44:f9:c1:a4:e9:54:
fd:09:99:7a:c9:a8:18:22:b7:66:37:e0:d5:f2:6d:
69:e1:37:41:64:18:74:33:ab:1c:8d:6c:30:ed:e9:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D4:51:56:0F:B5:15:54:52:FC:D6:E8:01:71:7A:A6:BE:EF:D1:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27f25b17-9a59-4695-ace4-e0e69e692481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:e000::/40
Signature Algorithm: sha256WithRSAEncryption
20:14:69:75:7a:59:01:5f:96:fe:6b:a0:8e:02:db:ef:b4:ee:
ea:6c:f8:95:bb:44:d3:ac:5e:2c:08:73:cf:97:45:ca:a8:6f:
b5:7b:21:b2:07:b5:41:61:ce:04:25:b0:25:6b:22:c8:c4:23:
bf:43:ee:d3:80:9b:38:8e:77:a5:b8:aa:aa:84:45:e6:d4:f2:
ca:02:b5:d4:e3:12:84:23:09:a1:ea:ba:46:d2:ac:7f:07:0e:
81:13:03:c3:d4:c5:68:21:5e:c9:8f:c8:7c:e0:2e:a6:cd:d1:
e6:77:a0:bc:57:a6:d7:1e:ab:cb:18:b4:bb:e5:1d:73:53:8f:
53:eb:d8:d7:8e:08:8f:23:d6:2b:37:1c:63:ad:e6:e8:ba:3d:
b4:4c:c9:32:7e:14:4c:87:7e:f9:4e:52:b4:0b:fc:76:9b:29:
43:66:2d:a2:28:2d:f2:a1:ba:07:5d:eb:8e:e8:93:81:15:1f:
0a:2a:5c:62:e8:3d:3e:5c:3e:d1:be:61:0a:13:08:31:71:8f:
d3:fd:aa:b7:19:b0:d4:f6:0e:ce:21:02:53:2c:40:b4:1f:e3:
16:71:4a:86:8b:24:95:22:bb:6f:de:3f:9f:6d:59:da:40:6d:
44:49:96:54:d1:af:c5:89:e2:83:25:45:6e:5d:ee:64:60:7f:
d2:0a:46:51
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVDHfP8ChZ8iNVHqbsUv3vfiktRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMTAwMTRaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGY3YjY2YjU4YjY2NTAwYWE1MDFkMzBhMTA2NTU3YzIwZjVhMzQ3YjgzY2Ew
MzEyOWYxNmQ4MTMxODU4YjgyMjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANe+y/BYciS3IYhgZmXYgV9hnEztHXlRyNSYUDSgfSbp+98wq0o9ghYl885k
1ZzZ2BIEcczTHSLyvhd1UBi/kH+ZP+RRC4f/rYAfB+Af6Eb+qg4Dkvzup+2K1X3Y
OL8hbgPPSY+Xqo9mo5SQtLWroXUkfcfnk+ylLST8nfaJOTrtwb5PMTd5S6vsAS13
TRrgB8lhxCLRX5tTd/MeM4mfnx5SUS+db9UiwWsFo/8X9cyAOeFwJfBS9M1xhejC
iBM+fdOzfzaZW6EDcGdRn0eLT/jxeT1O2OenMDAjRPnBpOlU/QmZesmoGCK3Zjfg
1fJtaeE3QWQYdDOrHI1sMO3pSw0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSB1FFW
D7UVVFL81ugBcXqmvu/RgzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjdmMjViMTctOWE1OS00Njk1LWFjZTQtZTBlNjllNjkyNDgxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gjg
MA0GCSqGSIb3DQEBCwUAA4IBAQAgFGl1elkBX5b+a6COAtvvtO7qbPiVu0TTrF4s
CHPPl0XKqG+1eyGyB7VBYc4EJbAlayLIxCO/Q+7TgJs4jneluKqqhEXm1PLKArXU
4xKEIwmh6rpG0qx/Bw6BEwPD1MVoIV7Jj8h84C6mzdHmd6C8V6bXHqvLGLS75R1z
U49T69jXjgiPI9YrNxxjrebouj20TMkyfhRMh375TlK0C/x2mylDZi2iKC3yoboH
XeuO6JOBFR8KKlxi6D0+XD7RvmEKEwgxcY/T/aq3GbDU9g7OIQJTLEC0H+MWcUqG
iySVIrtv3j+fbVnaQG1ESZZU0a/FieKDJUVuXe5kYH/SCkZR
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:35 2026 by rpki-client