Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/320960c3-3213-4443-9826-01e96c82f143.roa
File: 320960c3-3213-4443-9826-01e96c82f143.roa (raw, json)
Hash identifier: UzwzKoedN5BYmwZmfBm7708FJVvUqhhIJeifNCIqrJI=
Subject key identifier: 1E:93:EF:E7:BE:7C:37:9D:F6:A1:A6:59:9D:18:E2:B4:B3:92:11:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D15B6BEB37B3EAB36C3DE751C5629CBC6212428
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/320960c3-3213-4443-9826-01e96c82f143.roa
Signing time: Tue 18 Aug 2026 18:12:55 +0000
ROA not before: Tue 18 Aug 2026 18:12:55 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:15:b6:be:b3:7b:3e:ab:36:c3:de:75:1c:56:29:cb:c6:21:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:12:55 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=8723d84865cbcd5632649f2baed10967a4cccc365e5c46f2334cbc8ebfa3c6df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8e:21:d4:35:f4:6b:0b:cf:50:bb:ab:2f:32:
b6:60:79:4f:92:6e:7d:e4:15:31:75:29:0c:f4:2c:
97:e4:20:a7:1c:e3:25:d7:30:64:2a:c5:06:c7:6e:
d0:66:ba:b8:df:16:7a:02:d0:27:75:f6:fc:e1:6d:
6b:fb:89:da:a5:a4:88:cd:fb:22:c2:a6:00:6f:ad:
cc:c2:70:ec:c7:b7:85:dc:ab:eb:c1:18:49:5e:1f:
21:c2:52:24:62:84:4c:ec:fa:bc:7d:51:c0:46:62:
c7:26:84:a8:39:9a:94:d6:ce:ef:0f:e1:f3:eb:3f:
a0:e3:25:0b:51:17:57:af:79:a5:f2:00:3b:fa:f2:
5d:cb:53:b0:c9:31:62:57:1b:46:dc:e2:af:3d:3d:
88:90:26:24:d2:54:3c:06:9c:6d:24:b8:67:f0:74:
07:6a:20:38:49:eb:de:4d:40:da:97:89:c7:64:35:
cf:9f:4f:97:c9:eb:c4:99:33:a8:d1:f0:cd:55:16:
30:74:18:b9:c7:3f:e7:76:c9:4f:ac:53:b1:68:49:
73:60:f8:92:f8:f1:5f:87:01:da:44:bc:9a:7c:dc:
33:08:77:f6:ab:58:be:1c:8a:17:d9:41:e6:82:38:
97:6d:e5:79:54:f5:ee:4e:2b:d2:d1:8e:cd:db:53:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:93:EF:E7:BE:7C:37:9D:F6:A1:A6:59:9D:18:E2:B4:B3:92:11:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/320960c3-3213-4443-9826-01e96c82f143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:5000::/40
Signature Algorithm: sha256WithRSAEncryption
89:62:ea:18:45:8d:f7:a0:30:64:e5:72:78:9b:f8:47:bf:db:
0b:ad:00:01:7e:55:9f:81:61:51:ff:b4:71:08:cf:d0:b1:88:
64:ad:ef:ad:53:47:ab:fe:bc:b8:a8:74:ce:9f:73:78:04:6a:
8b:f9:15:3a:37:46:70:5b:ec:1e:87:78:b2:0f:99:27:0c:3d:
84:f6:59:9f:3e:96:aa:55:2e:7e:71:13:06:91:52:1d:1a:46:
f9:87:d7:a9:c8:4f:31:f3:ca:ff:60:f7:24:99:69:a4:ae:76:
d2:ec:bc:c0:a8:4f:ad:48:fd:ea:d5:93:76:94:b8:9f:cb:b9:
e0:14:c5:f1:c8:bd:54:72:ec:c7:64:61:7a:d4:c7:c2:9c:19:
9a:7b:59:7d:5c:1b:d7:31:c6:00:7b:59:40:d3:bd:50:01:64:
de:39:aa:41:bf:87:db:11:b4:32:89:10:bc:0f:bd:d8:b7:7d:
31:94:53:51:48:27:95:83:f4:b6:c5:2c:97:a6:64:aa:a7:d1:
19:ca:48:d1:bf:44:7b:35:aa:4b:51:a7:bc:f8:01:f6:d0:9f:
1f:42:c6:8a:b5:92:5d:76:30:f0:ee:5e:a5:e7:bd:4d:66:d7:
c1:22:45:42:bf:75:f5:8c:eb:76:7b:54:09:10:3f:64:17:d0:
4d:8c:54:d0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTRW2vrN7Pqs2w951HFYpy8YhJCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTgxODEyNTVaFw0yNjExMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDg3MjNkODQ4NjVjYmNkNTYzMjY0OWYyYmFlZDEwOTY3YTRjY2NjMzY1ZTVj
NDZmMjMzNGNiYzhlYmZhM2M2ZGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPmOIdQ19GsLz1C7qy8ytmB5T5JufeQVMXUpDPQsl+QgpxzjJdcwZCrFBsdu
0Ga6uN8WegLQJ3X2/OFta/uJ2qWkiM37IsKmAG+tzMJw7Me3hdyr68EYSV4fIcJS
JGKETOz6vH1RwEZixyaEqDmalNbO7w/h8+s/oOMlC1EXV695pfIAO/ryXctTsMkx
YlcbRtzirz09iJAmJNJUPAacbSS4Z/B0B2ogOEnr3k1A2peJx2Q1z59Pl8nrxJkz
qNHwzVUWMHQYucc/53bJT6xTsWhJc2D4kvjxX4cB2kS8mnzcMwh39qtYvhyKF9lB
5oI4l23leVT17k4r0tGOzdtTIokCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQek+/n
vnw3nfahplmdGOK0s5IR5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzIwOTYwYzMtMzIxMy00NDQzLTk4MjYtMDFlOTZjODJmMTQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DNQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCJYuoYRY33oDBk5XJ4m/hHv9sLrQABflWfgWFR
/7RxCM/QsYhkre+tU0er/ry4qHTOn3N4BGqL+RU6N0ZwW+weh3iyD5knDD2E9lmf
PpaqVS5+cRMGkVIdGkb5h9epyE8x88r/YPckmWmkrnbS7LzAqE+tSP3q1ZN2lLif
y7ngFMXxyL1UcuzHZGF61MfCnBmae1l9XBvXMcYAe1lA071QAWTeOapBv4fbEbQy
iRC8D73Yt30xlFNRSCeVg/S2xSyXpmSqp9EZykjRv0R7NapLUae8+AH20J8fQsaK
tZJddjDw7l6l571NZtfBIkVCv3X1jOt2e1QJED9kF9BNjFTQ
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:44 2026 by rpki-client