Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
File: 2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa (raw, json)
Hash identifier: Iji2ARMl2Sk34gYczLKlpZqhrf03Hoevikt+igNCdLY=
Subject key identifier: F5:49:AF:90:40:30:50:AC:A2:3B:C8:2B:68:A6:87:28:50:3C:8B:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72EFF32680109EFB31AD68FCDDC281D75249DFD3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
Signing time: Sat 08 Aug 2026 00:00:05 +0000
ROA not before: Sat 08 Aug 2026 00:00:05 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ef:f3:26:80:10:9e:fb:31:ad:68:fc:dd:c2:81:d7:52:49:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:05 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=37c2a0ab6197d62448f7061d33cf5523f4926f6e46da68e686b3d60868a852c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:be:62:75:b6:88:41:c5:9e:50:76:1a:30:
4c:27:9b:94:ba:8d:30:bb:91:0f:5e:7f:cd:a9:f8:
5e:6c:f3:49:c0:19:59:17:34:9c:72:57:59:76:0c:
41:13:d7:54:1d:e9:1b:be:dd:73:ce:6a:38:01:36:
b8:54:67:d5:5c:21:a4:b2:9d:fc:75:71:ef:49:7f:
ec:ad:5c:05:c3:ec:a6:15:36:c2:5b:da:be:c4:1b:
f7:e6:e3:05:8c:d6:f1:13:91:c2:4c:e8:47:51:90:
d2:9c:f5:46:3a:8d:11:2e:76:ae:4c:00:c6:08:60:
23:1c:a9:c6:3f:92:f2:53:5d:12:a5:aa:b4:c2:bf:
39:fc:5a:c5:e6:31:19:d8:cc:d0:9d:90:63:8d:6a:
40:17:03:19:89:17:94:7b:a9:7d:7e:64:8b:30:1d:
9b:be:10:2a:f9:1a:4e:1f:2c:bd:83:06:e7:7a:ef:
0c:a1:dd:a5:53:4a:4f:b8:3e:d7:db:81:32:ee:cd:
c8:51:d7:14:95:fa:41:b1:05:df:9d:7e:29:04:9a:
ad:48:0e:a1:84:24:a5:0b:96:60:06:ee:9f:7f:27:
11:e3:48:f8:69:ab:7f:01:28:ca:3f:2e:f0:85:52:
e2:a5:51:28:3e:00:23:de:51:a3:74:62:23:67:9b:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:AF:90:40:30:50:AC:A2:3B:C8:2B:68:A6:87:28:50:3C:8B:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/35
Signature Algorithm: sha256WithRSAEncryption
47:29:54:d5:b8:a6:cd:de:a7:e0:48:11:fd:55:dd:d6:4a:16:
98:3b:71:dc:68:61:2a:8a:f7:b1:53:ca:07:43:c2:b1:62:a0:
f4:b7:7d:a3:d1:62:17:36:3a:6b:94:36:0c:b6:f3:2c:b4:12:
ad:64:cc:85:29:6c:b6:5b:b1:30:23:da:66:71:a6:7b:f3:ce:
a8:80:fd:96:cb:c1:ef:c3:6e:65:a7:5a:25:8c:10:68:07:04:
99:de:5e:6f:50:d1:67:7a:87:9b:90:03:19:af:bc:0f:cf:20:
d3:48:65:28:a3:99:ca:70:5d:39:78:4a:8a:89:e6:85:16:f2:
3c:dc:c1:2f:da:5a:34:e1:73:5f:76:90:02:65:33:59:47:58:
a4:0e:76:2c:d4:d0:d8:55:bc:59:b0:c9:62:47:07:b4:ef:92:
b6:10:1b:5d:c5:46:53:34:81:7b:d5:32:ae:26:20:0d:7b:5b:
4e:e1:e9:06:af:69:cd:3f:0b:db:ad:1d:cf:20:97:4b:21:0c:
bc:8a:b7:74:54:8d:8c:fd:ce:31:13:8f:c5:86:9f:8c:83:1b:
9e:65:0c:7b:85:8c:e9:37:4a:b8:3c:1c:43:49:ae:06:03:7a:
6d:6c:de:55:75:19:19:6c:1d:f2:63:0a:2e:86:bd:fc:10:e7:
77:21:13:2d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcu/zJoAQnvsxrWj83cKB11JJ39MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDgwMDAwMDVaFw0yNjExMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDM3YzJhMGFiNjE5N2Q2MjQ0OGY3MDYxZDMzY2Y1NTIzZjQ5MjZmNmU0NmRh
NjhlNjg2YjNkNjA4NjhhODUyYzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMqpvmJ1tohBxZ5QdhowTCeblLqNMLuRD15/zan4XmzzScAZWRc0nHJXWXYM
QRPXVB3pG77dc85qOAE2uFRn1VwhpLKd/HVx70l/7K1cBcPsphU2wlvavsQb9+bj
BYzW8RORwkzoR1GQ0pz1RjqNES52rkwAxghgIxypxj+S8lNdEqWqtMK/OfxaxeYx
GdjM0J2QY41qQBcDGYkXlHupfX5kizAdm74QKvkaTh8svYMG53rvDKHdpVNKT7g+
19uBMu7NyFHXFJX6QbEF351+KQSarUgOoYQkpQuWYAbun38nEeNI+GmrfwEoyj8u
8IVS4qVRKD4AI95Ro3RiI2ebGx0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT1Sa+Q
QDBQrKI7yCtopocoUDyLqTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmM1YmE2NzMtNmQ5YS00ZWYyLWI4YTAtMTFkMGRkYmYzMDJjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoF0BQA
MA0GCSqGSIb3DQEBCwUAA4IBAQBHKVTVuKbN3qfgSBH9Vd3WShaYO3HcaGEqivex
U8oHQ8KxYqD0t32j0WIXNjprlDYMtvMstBKtZMyFKWy2W7EwI9pmcaZ7886ogP2W
y8Hvw25lp1oljBBoBwSZ3l5vUNFneoebkAMZr7wPzyDTSGUoo5nKcF05eEqKieaF
FvI83MEv2lo04XNfdpACZTNZR1ikDnYs1NDYVbxZsMliRwe075K2EBtdxUZTNIF7
1TKuJiANe1tO4ekGr2nNPwvbrR3PIJdLIQy8ird0VI2M/c4xE4/Fhp+MgxueZQx7
hYzpN0q4PBxDSa4GA3ptbN5VdRkZbB3yYwouhr38EOd3IRMt
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:20 2026 by rpki-client