Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/289a89af-fcc7-4668-a99a-c396661bbb4b.roa
File: 289a89af-fcc7-4668-a99a-c396661bbb4b.roa (raw, json)
Hash identifier: 7d/Wi3TKx9OLGthSgbyrDeLc6V1G/TqZfYKfo2tOCFc=
Subject key identifier: F8:3F:1E:97:C2:4E:80:8D:53:78:F2:11:8D:55:FB:5A:B6:86:21:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E967BE66FDC1654AE2412AE766EC64D2AA7AD0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/289a89af-fcc7-4668-a99a-c396661bbb4b.roa
Signing time: Wed 19 Aug 2026 01:00:20 +0000
ROA not before: Wed 19 Aug 2026 01:00:20 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:96:7b:e6:6f:dc:16:54:ae:24:12:ae:76:6e:c6:4d:2a:a7:ad:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:20 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=3d2082fa5b461fff1cadf9ff105016c62ffbddbd1cfe18405a5529d3f3eb4b08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:13:84:54:24:b9:0d:13:f9:51:a7:25:52:
9f:c1:63:cb:e2:3c:04:07:1f:76:92:04:90:50:e7:
de:ae:7f:ad:b5:09:a9:79:77:e0:1b:33:f1:49:e6:
4f:e7:32:4b:0d:dc:b5:c8:97:d0:61:ee:a2:9d:81:
49:44:4e:b8:69:40:23:be:99:46:14:d6:ff:69:44:
89:8b:c7:f8:f1:fe:a9:94:a1:e1:92:b0:64:c6:bb:
54:d7:1e:16:70:a7:72:ed:e3:0d:ce:57:4f:02:af:
fe:19:0b:40:1f:60:6d:03:d8:43:26:f8:4f:8d:b9:
6f:b8:8b:31:87:6d:c9:0a:f7:a6:b5:b1:93:2b:4c:
9d:ad:5e:c1:68:66:d3:30:65:e2:f0:92:19:5e:4e:
97:fa:c9:b8:a4:a4:dd:a7:c2:0e:b4:ff:7f:c6:49:
fe:94:e3:2e:dd:d5:96:31:a0:67:57:37:a2:6f:7e:
1a:95:be:50:a7:36:1a:ee:49:fb:7b:c6:a5:76:a3:
57:a1:6b:10:90:d3:73:ee:c7:92:4d:c7:15:06:fe:
c1:8b:7e:ed:cb:85:29:45:11:1f:9c:f2:88:87:58:
fd:43:31:d4:3b:f8:d5:48:bd:42:56:d1:cb:17:bb:
20:6b:10:62:9a:ef:55:15:b8:52:a1:c7:f0:54:7a:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:1E:97:C2:4E:80:8D:53:78:F2:11:8D:55:FB:5A:B6:86:21:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/289a89af-fcc7-4668-a99a-c396661bbb4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:e080::/48
Signature Algorithm: sha256WithRSAEncryption
20:22:f9:cc:29:63:65:a6:b2:0c:49:ed:f5:17:e9:47:fc:9d:
d8:40:03:b3:a1:ef:56:51:9e:23:f0:e5:ca:ed:81:a7:7d:04:
60:85:c2:d9:c9:58:18:a7:1a:74:14:df:7c:77:e5:57:2f:11:
66:85:a7:87:44:c6:d9:08:40:2e:35:ff:e9:38:84:a3:23:23:
be:01:e0:9c:16:a6:f5:2a:24:b6:c6:54:65:cc:7b:b5:f3:53:
67:64:30:6b:09:d1:ce:c9:46:b4:42:4c:f0:4f:57:ab:c8:ae:
d9:a8:27:af:cc:62:cd:4d:1d:ce:56:e2:53:90:c2:ad:ad:a9:
a2:75:6f:a8:67:9d:c7:f7:58:b4:df:b3:be:35:2b:91:af:7c:
d2:f4:5d:0f:2f:21:ca:fd:0f:ce:f0:4f:e0:4a:02:71:9a:c2:
ba:2d:cd:bc:30:97:2f:df:be:15:1c:ea:48:d1:2c:4a:c4:1a:
c1:ae:65:db:ee:e2:1c:7a:20:64:eb:7b:be:da:c4:23:d6:86:
dc:12:f4:b2:ee:fa:80:ef:69:02:5f:f6:7f:e0:5b:de:b9:c3:
f7:7d:c2:9c:fb:7b:4c:f1:42:5b:db:91:9e:81:4f:9d:cf:ed:
29:fa:cd:d4:4d:d9:21:f6:d7:f5:86:b4:c1:b9:4c:23:76:47:
6b:b1:37:74
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbpZ75m/cFlSuJBKudm7GTSqnrQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwMjBaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkMjA4MmZhNWI0NjFmZmYxY2FkZjlmZjEwNTAxNmM2MmZmYmRkYmQxY2Zl
MTg0MDVhNTUyOWQzZjNlYjRiMDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpoE4RUJLkNE/lRpyVSn8Fjy+I8BAcfdpIEkFDn3q5/rbUJqXl34Bsz8Unm
T+cySw3ctciX0GHuop2BSUROuGlAI76ZRhTW/2lEiYvH+PH+qZSh4ZKwZMa7VNce
FnCncu3jDc5XTwKv/hkLQB9gbQPYQyb4T425b7iLMYdtyQr3prWxkytMna1ewWhm
0zBl4vCSGV5Ol/rJuKSk3afCDrT/f8ZJ/pTjLt3VljGgZ1c3om9+GpW+UKc2Gu5J
+3vGpXajV6FrEJDTc+7Hkk3HFQb+wYt+7cuFKUURH5zyiIdY/UMx1Dv41Ui9QlbR
yxe7IGsQYprvVRW4UqHH8FR6o4kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT4Px6X
wk6AjVN48hGNVftatoYhgTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mjg5YTg5YWYtZmNjNy00NjY4LWE5OWEtYzM5NjY2MWJiYjRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Frg
gDANBgkqhkiG9w0BAQsFAAOCAQEAICL5zCljZaayDEnt9RfpR/yd2EADs6HvVlGe
I/Dlyu2Bp30EYIXC2clYGKcadBTffHflVy8RZoWnh0TG2QhALjX/6TiEoyMjvgHg
nBam9SoktsZUZcx7tfNTZ2QwawnRzslGtEJM8E9Xq8iu2agnr8xizU0dzlbiU5DC
ra2ponVvqGedx/dYtN+zvjUrka980vRdDy8hyv0PzvBP4EoCcZrCui3NvDCXL9++
FRzqSNEsSsQawa5l2+7iHHogZOt7vtrEI9aG3BL0su76gO9pAl/2f+Bb3rnD933C
nPt7TPFCW9uRnoFPnc/tKfrN1E3ZIfbX9Ya0wblMI3ZHa7E3dA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:25 2026 by rpki-client