Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455182aa-6d74-4447-81a6-6be09732e55d.roa
File: 455182aa-6d74-4447-81a6-6be09732e55d.roa (raw, json)
Hash identifier: pbCIJxfJarp63/iJCsHDNvTtnWN9lv63dXro3+jS0vY=
Subject key identifier: 86:EA:E5:96:6A:56:3E:EF:13:B0:E1:60:F4:D1:BB:C3:CB:A1:92:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4ADF1DE2C6AC45057551EF82AE706F88BFB2EC2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455182aa-6d74-4447-81a6-6be09732e55d.roa
Signing time: Fri 07 Aug 2026 04:50:24 +0000
ROA not before: Fri 07 Aug 2026 04:50:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:df:1d:e2:c6:ac:45:05:75:51:ef:82:ae:70:6f:88:bf:b2:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e8feb71b16d7f49cbc32012f85725664bcac206f5097533c02070c14fd06067f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:87:c8:11:33:35:d7:5a:90:77:93:69:10:
b6:93:bf:f8:fe:41:4b:44:e6:ba:b9:1a:5e:49:cd:
08:1f:ef:d2:6c:5a:98:f2:f3:77:9c:2a:07:00:32:
00:59:77:1a:cc:68:9a:92:48:07:c4:ff:68:82:bb:
bb:d3:79:93:43:ef:28:ad:83:7f:67:b8:05:c7:2a:
1f:67:a2:20:6d:0b:38:98:22:3a:d5:9d:5c:a6:79:
5a:ba:11:53:4f:bb:5d:86:5f:f9:e1:48:6b:9a:c0:
63:7a:3c:1c:79:ef:09:9a:88:ba:d0:4f:aa:63:0f:
67:a1:c3:7a:9d:59:39:78:17:b8:57:65:32:b6:e2:
92:57:74:2c:98:c1:f4:0d:31:75:1f:d9:3e:46:33:
0b:50:0a:bb:b4:d1:9f:38:2f:2b:59:d7:3e:86:f4:
f7:82:03:1b:da:2e:20:a9:df:8f:b9:3a:ba:0a:61:
e9:1c:df:dc:0c:95:c8:11:89:66:66:63:51:ba:9d:
ab:c2:ae:97:56:34:60:e1:d2:f3:de:e3:64:2d:ff:
d1:a7:9d:b0:eb:b5:12:c5:34:23:7c:e8:7a:71:aa:
c1:4d:db:52:24:86:01:62:52:67:1a:ae:46:16:6e:
25:b8:52:ba:d4:da:1d:be:46:a9:a3:61:d8:20:25:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:E5:96:6A:56:3E:EF:13:B0:E1:60:F4:D1:BB:C3:CB:A1:92:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455182aa-6d74-4447-81a6-6be09732e55d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e:c00::/38
Signature Algorithm: sha256WithRSAEncryption
9a:c3:2c:40:df:9c:4e:d6:4c:fa:44:e6:ae:7f:de:f1:3c:dd:
5a:18:95:85:ef:f2:2d:46:d0:ec:5c:5e:2a:ed:95:6e:48:57:
3c:b4:05:63:eb:e2:6a:81:51:44:82:a7:2c:5f:5e:c8:78:83:
99:30:d6:e5:d0:54:99:c0:80:6b:1e:55:bb:4b:a1:25:df:a0:
08:4c:e1:b6:0b:b4:43:2c:aa:dc:a6:9e:0d:90:12:f1:67:87:
b8:dc:e2:77:61:97:4c:ef:bd:1e:64:ac:ef:c4:6f:7f:0e:2e:
be:65:eb:44:81:02:cc:1b:bb:f7:f5:82:e6:87:9e:b1:77:5f:
48:d1:61:2b:dd:f7:06:13:56:37:cc:0d:fd:70:41:f1:0b:4b:
2e:8c:89:4c:97:6f:a3:a5:32:21:c9:96:1d:8e:45:12:59:a9:
9b:fd:a6:9c:af:2c:d5:59:ea:87:95:49:87:d1:74:f2:cb:83:
bb:2b:cb:45:08:1f:bd:a2:9c:ec:57:e3:c0:72:86:f7:3a:01:
11:14:bb:77:ed:69:04:76:1b:04:c1:93:41:13:21:6b:b9:d5:
74:55:16:82:53:1d:90:80:5b:54:a6:73:e3:df:df:dc:8c:bc:
7c:08:f3:be:9b:8a:71:80:87:b0:a2:dd:d8:46:d3:01:63:96:
e2:25:79:d0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSt8d4sasRQV1Ue+CrnBviL+y7C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMjRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGU4ZmViNzFiMTZkN2Y0OWNiYzMyMDEyZjg1NzI1NjY0YmNhYzIwNmY1MDk3
NTMzYzAyMDcwYzE0ZmQwNjA2N2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKw6h8gRMzXXWpB3k2kQtpO/+P5BS0TmurkaXknNCB/v0mxamPLzd5wqBwAy
AFl3GsxompJIB8T/aIK7u9N5k0PvKK2Df2e4BccqH2eiIG0LOJgiOtWdXKZ5WroR
U0+7XYZf+eFIa5rAY3o8HHnvCZqIutBPqmMPZ6HDep1ZOXgXuFdlMrbikld0LJjB
9A0xdR/ZPkYzC1AKu7TRnzgvK1nXPob094IDG9ouIKnfj7k6ugph6Rzf3AyVyBGJ
ZmZjUbqdq8Kul1Y0YOHS897jZC3/0aedsOu1EsU0I3zoenGqwU3bUiSGAWJSZxqu
RhZuJbhSutTaHb5GqaNh2CAla4sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSG6uWW
alY+7xOw4WD00bvDy6GSLjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDU1MTgyYWEtNmQ3NC00NDQ3LTgxYTYtNmJlMDk3MzJlNTVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0B4M
MA0GCSqGSIb3DQEBCwUAA4IBAQCawyxA35xO1kz6ROauf97xPN1aGJWF7/ItRtDs
XF4q7ZVuSFc8tAVj6+JqgVFEgqcsX17IeIOZMNbl0FSZwIBrHlW7S6El36AITOG2
C7RDLKrcpp4NkBLxZ4e43OJ3YZdM770eZKzvxG9/Di6+ZetEgQLMG7v39YLmh56x
d19I0WEr3fcGE1Y3zA39cEHxC0sujIlMl2+jpTIhyZYdjkUSWamb/aacryzVWeqH
lUmH0XTyy4O7K8tFCB+9opzsV+PAcob3OgERFLt37WkEdhsEwZNBEyFrudV0VRaC
Ux2QgFtUpnPj39/cjLx8CPO+m4pxgIewot3YRtMBY5biJXnQ
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:08 2026 by rpki-client