Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4304a130-e9d1-47a4-8ecf-5d755740a478.roa
File: 4304a130-e9d1-47a4-8ecf-5d755740a478.roa (raw, json)
Hash identifier: jXHrDObANsNCeu7dzQtlTdgnsjd6sUFzlQWAj3Pm9+U=
Subject key identifier: 15:90:00:28:C1:63:CC:AA:92:90:9D:7D:57:51:39:95:72:4F:21:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78E24E401B56312DFF6590F0678926E86C68F49E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4304a130-e9d1-47a4-8ecf-5d755740a478.roa
Signing time: Fri 07 Aug 2026 05:20:24 +0000
ROA not before: Fri 07 Aug 2026 05:20:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e2:4e:40:1b:56:31:2d:ff:65:90:f0:67:89:26:e8:6c:68:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=12822f2ce72be867c9a963d6521981359ab43a327fb05be8a61e98c2c3aedf32, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:3e:43:73:cc:9e:61:08:cf:39:0f:2e:a3:
36:3d:d0:03:c4:d2:46:9c:63:00:49:1d:62:7b:06:
41:70:8d:1a:a0:56:b9:c2:cb:c1:5a:93:9a:a3:90:
8d:5f:97:9b:c5:bd:5f:3b:a1:3e:5a:f8:20:02:b0:
c3:be:67:2b:5a:24:14:ed:1f:d3:9a:83:6f:32:8f:
9f:66:b8:24:44:a1:9d:b7:76:a9:f7:7d:37:78:ab:
47:b0:c1:6a:e9:8c:c3:15:06:3d:68:2e:5b:fd:01:
e8:c0:b3:bf:e6:40:66:dc:d2:8c:d5:31:ec:40:73:
85:0d:db:52:32:98:67:5e:23:a9:36:e3:f2:e6:c6:
42:c1:7c:12:cc:af:3f:37:33:b3:90:b1:30:d6:4f:
7a:e4:45:87:64:15:32:d7:f2:d6:19:20:22:cf:4a:
90:b7:2f:ff:c3:38:32:71:33:74:0e:42:e7:da:a8:
9a:6b:4f:cf:c7:08:cd:8d:09:4d:0c:0b:9c:f9:4c:
cc:1c:6c:49:7f:92:bf:69:6d:b4:85:20:e9:b5:ff:
ea:a3:a1:e5:ec:ab:71:72:25:e7:9b:34:7c:9a:42:
44:63:7b:d9:6a:f3:df:c0:12:44:c9:02:6e:19:63:
4c:28:10:98:dd:14:96:db:76:cf:c7:9b:1a:2c:b7:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:00:28:C1:63:CC:AA:92:90:9D:7D:57:51:39:95:72:4F:21:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4304a130-e9d1-47a4-8ecf-5d755740a478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:67:e4:e7:00:44:2e:c1:86:bb:a4:3a:af:a5:bc:b3:ef:be:
48:25:42:bb:75:3e:6a:a2:2a:63:30:59:d5:16:66:f4:c3:ef:
6f:37:23:24:2e:fe:84:cc:8b:80:e3:b5:b2:35:4c:06:5d:ee:
3e:62:0e:9b:22:41:a1:b9:73:73:b5:cf:c9:01:da:77:c7:b4:
a6:b5:b5:3b:dd:bc:e6:d8:66:c6:5d:47:d9:79:61:00:a9:c1:
06:b1:34:f1:48:14:6a:a6:03:44:99:18:4b:a7:18:bd:c6:5a:
ab:9b:30:8b:b6:bf:6b:18:b0:90:57:5c:b1:eb:65:71:b1:e6:
be:51:fd:6e:63:39:bb:1c:25:2c:35:a3:62:26:a2:6c:c7:89:
18:0d:cb:9f:c6:84:e3:84:62:97:84:4a:4d:fa:4d:7f:a3:ca:
44:5c:7a:8c:22:4a:a8:87:23:f6:48:fb:8e:48:d4:9c:68:5f:
b0:32:de:72:31:db:49:85:95:dd:00:a3:69:97:09:bf:b0:87:
7b:3f:ef:47:d9:ee:a8:3d:a1:6f:c1:2c:6c:86:38:52:cf:07:
8d:78:4d:ac:62:37:43:fc:f8:a6:e3:64:6a:34:71:46:cb:de:
74:4c:21:17:9c:b1:cf:4c:9b:a1:af:f6:4a:d7:be:e7:f5:c3:
32:b9:4b:9b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUeOJOQBtWMS3/ZZDwZ4km6Gxo9J4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTIwMjRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDEyODIyZjJjZTcyYmU4NjdjOWE5NjNkNjUyMTk4MTM1OWFiNDNhMzI3ZmIw
NWJlOGE2MWU5OGMyYzNhZWRmMzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIT1PkNzzJ5hCM85Dy6jNj3QA8TSRpxjAEkdYnsGQXCNGqBWucLLwVqTmqOQ
jV+Xm8W9XzuhPlr4IAKww75nK1okFO0f05qDbzKPn2a4JEShnbd2qfd9N3irR7DB
aumMwxUGPWguW/0B6MCzv+ZAZtzSjNUx7EBzhQ3bUjKYZ14jqTbj8ubGQsF8Esyv
Pzczs5CxMNZPeuRFh2QVMtfy1hkgIs9KkLcv/8M4MnEzdA5C59qommtPz8cIzY0J
TQwLnPlMzBxsSX+Sv2lttIUg6bX/6qOh5eyrcXIl55s0fJpCRGN72Wrz38ASRMkC
bhljTCgQmN0Ultt2z8ebGiy3o18CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQVkAAo
wWPMqpKQnX1XUTmVck8hkDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDMwNGExMzAtZTlkMS00N2E0LThlY2YtNWQ3NTU3NDBhNDc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
4DANBgkqhkiG9w0BAQsFAAOCAQEAyGfk5wBELsGGu6Q6r6W8s+++SCVCu3U+aqIq
YzBZ1RZm9MPvbzcjJC7+hMyLgOO1sjVMBl3uPmIOmyJBoblzc7XPyQHad8e0prW1
O9285thmxl1H2XlhAKnBBrE08UgUaqYDRJkYS6cYvcZaq5swi7a/axiwkFdcsetl
cbHmvlH9bmM5uxwlLDWjYiaibMeJGA3Ln8aE44Ril4RKTfpNf6PKRFx6jCJKqIcj
9kj7jkjUnGhfsDLecjHbSYWV3QCjaZcJv7CHez/vR9nuqD2hb8EsbIY4Us8HjXhN
rGI3Q/z4puNkajRxRsvedEwhF5yxz0yboa/2Ste+5/XDMrlLmw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:23 2026 by rpki-client