Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cee858e-c572-427b-8123-23b2e05abc40.roa
File: 2cee858e-c572-427b-8123-23b2e05abc40.roa (raw, json)
Hash identifier: eUNJ9GPJ2jmRsXR2y1G9L/T0+GNmldK087qjPOoSX3Y=
Subject key identifier: 53:70:A7:74:14:68:06:43:21:7C:36:15:FC:37:45:D6:91:6A:D6:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 396C6FA926E9BB693F85C32BF6583A88327E7EA9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cee858e-c572-427b-8123-23b2e05abc40.roa
Signing time: Fri 07 Aug 2026 04:31:00 +0000
ROA not before: Fri 07 Aug 2026 04:31:00 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6c:6f:a9:26:e9:bb:69:3f:85:c3:2b:f6:58:3a:88:32:7e:7e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:31:00 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=72fd4517247d086aef87eef6a8b21ed60d7178c0c25f2235b59879be706461be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:70:d6:5c:89:a3:8d:88:02:4c:5b:3c:0d:
b3:a5:bf:ea:ce:33:8d:91:03:eb:8e:91:5e:40:0b:
9c:2d:83:ae:6a:92:91:50:49:3e:77:d8:9e:d6:77:
b8:d7:13:5f:f3:d8:1a:d0:5c:69:b4:4c:41:d2:60:
26:71:e6:66:87:2b:9e:43:28:d3:1c:36:d1:53:24:
9e:3e:39:05:71:0c:f3:ad:03:bf:c7:94:86:ac:56:
2e:84:c9:30:12:2a:31:ad:55:88:29:fd:73:e9:bb:
c9:0b:98:aa:95:e0:3e:d3:36:81:d5:e0:58:33:96:
40:cf:cf:ac:2a:aa:8e:56:ad:0d:0b:64:d7:fe:e2:
40:d0:df:8a:c5:2d:a3:1c:88:50:0c:09:fb:f2:0e:
c8:be:b3:13:00:ca:1d:d2:e4:60:c1:73:71:13:59:
dc:ba:84:98:8a:62:07:80:63:ff:f0:30:2a:82:79:
48:14:45:c8:b8:d4:60:4c:79:9e:f6:e9:07:d6:52:
ab:39:b8:e4:f4:ea:00:3e:86:01:e1:c2:ab:dd:b1:
16:89:d4:99:89:5f:e6:2d:53:9a:b9:0a:06:a8:f2:
a2:cd:e5:68:fa:15:fc:16:3b:77:ed:85:81:b8:d4:
ab:c6:18:a4:98:73:94:60:0e:b3:fe:45:88:f5:3e:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:70:A7:74:14:68:06:43:21:7C:36:15:FC:37:45:D6:91:6A:D6:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cee858e-c572-427b-8123-23b2e05abc40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c080::/48
Signature Algorithm: sha256WithRSAEncryption
0c:97:90:04:d4:92:cf:61:62:3d:13:32:0f:86:c4:5b:76:b7:
db:67:bd:b2:1a:09:3c:38:01:a3:96:4d:32:4a:a6:18:48:32:
65:0e:45:01:c3:a6:61:2d:e9:b6:9a:ac:9c:42:44:e3:c7:38:
55:67:23:da:7d:f8:1d:8e:2a:e1:b3:1b:73:a8:fd:01:96:62:
d9:35:61:af:2f:e2:39:61:e7:e2:a1:26:a2:a3:be:c6:e5:12:
9e:3a:f7:e4:7c:f2:84:b7:59:9b:81:75:d4:37:b0:e6:62:b0:
83:66:06:46:63:9d:7e:69:16:7f:4e:a8:bf:8d:9d:ea:a7:39:
38:34:93:83:5f:5b:3f:56:2f:5e:22:26:f9:a1:90:5c:44:74:
33:3b:cb:2e:eb:a3:49:3b:6c:fb:c3:1f:9f:c3:81:ff:72:39:
ba:51:a1:8e:e2:d8:33:91:21:3b:53:ab:f2:e0:45:0a:3a:05:
29:52:47:e6:29:8b:24:1d:09:72:1d:8e:95:ff:cc:02:10:87:
9f:45:96:25:c0:0c:d2:f0:cc:c8:7b:05:2b:c5:4f:b8:9e:69:
45:b1:92:88:cf:22:28:22:9d:95:e2:1e:4b:01:e5:f8:4f:83:
3e:88:69:53:f1:85:6c:83:71:1b:d0:11:63:b8:33:1b:26:4b:
03:c1:0b:f0
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOWxvqSbpu2k/hcMr9lg6iDJ+fqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMxMDBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDcyZmQ0NTE3MjQ3ZDA4NmFlZjg3ZWVmNmE4YjIxZWQ2MGQ3MTc4YzBjMjVm
MjIzNWI1OTg3OWJlNzA2NDYxYmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWEcNZciaONiAJMWzwNs6W/6s4zjZED646RXkALnC2DrmqSkVBJPnfYntZ3
uNcTX/PYGtBcabRMQdJgJnHmZocrnkMo0xw20VMknj45BXEM860Dv8eUhqxWLoTJ
MBIqMa1ViCn9c+m7yQuYqpXgPtM2gdXgWDOWQM/PrCqqjlatDQtk1/7iQNDfisUt
oxyIUAwJ+/IOyL6zEwDKHdLkYMFzcRNZ3LqEmIpiB4Bj//AwKoJ5SBRFyLjUYEx5
nvbpB9ZSqzm45PTqAD6GAeHCq92xFonUmYlf5i1TmrkKBqjyos3laPoV/BY7d+2F
gbjUq8YYpJhzlGAOs/5FiPU+sRMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRTcKd0
FGgGQyF8NhX8N0XWkWrWojAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmNlZTg1OGUtYzU3Mi00MjdiLTgxMjMtMjNiMmUwNWFiYzQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HLA
gDANBgkqhkiG9w0BAQsFAAOCAQEADJeQBNSSz2FiPRMyD4bEW3a322e9shoJPDgB
o5ZNMkqmGEgyZQ5FAcOmYS3ptpqsnEJE48c4VWcj2n34HY4q4bMbc6j9AZZi2TVh
ry/iOWHn4qEmoqO+xuUSnjr35HzyhLdZm4F11Dew5mKwg2YGRmOdfmkWf06ov42d
6qc5ODSTg19bP1YvXiIm+aGQXER0MzvLLuujSTts+8Mfn8OB/3I5ulGhjuLYM5Eh
O1Or8uBFCjoFKVJH5imLJB0Jch2Olf/MAhCHn0WWJcAM0vDMyHsFK8VPuJ5pRbGS
iM8iKCKdleIeSwHl+E+DPohpU/GFbINxG9ARY7gzGyZLA8EL8A==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:22 2026 by rpki-client