Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa
File: 4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa (raw, json)
Hash identifier: ysvp+UgdDLAtN5dQxlLrkFbkRxprdMBOmDIwGmR0MH8=
Subject key identifier: 9C:29:03:C2:1D:14:78:77:75:F7:56:30:FA:62:4F:84:A6:26:AB:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29735570D3F29375AA318F7054D23BBBC20027A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa
Signing time: Mon 03 Aug 2026 02:00:10 +0000
ROA not before: Mon 03 Aug 2026 02:00:10 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:73:55:70:d3:f2:93:75:aa:31:8f:70:54:d2:3b:bb:c2:00:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:10 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=4364036433213f34678e26975ca2f4eb498f964cdf92e9fed48329b0d33644ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:55:36:fb:5e:66:bd:0d:cf:ec:95:36:6c:
11:a9:e3:4f:00:ad:bb:23:94:d2:aa:15:ea:e4:ec:
87:26:3f:8c:63:00:bb:e2:7b:52:a8:d9:bb:cf:66:
07:a8:13:da:ad:bb:9b:95:5b:34:e7:12:54:e9:63:
51:0b:8a:99:e2:91:a2:73:55:ae:c6:29:01:57:6f:
5a:47:45:d8:cf:1b:e7:95:bb:43:bf:22:f5:55:02:
95:48:55:3a:6b:ea:cf:ee:db:f5:86:7d:74:39:37:
df:78:a5:65:0a:ca:19:3d:3d:7c:3a:3d:a2:f5:1e:
5f:25:47:9f:0b:8d:28:3b:70:2e:70:65:90:c3:73:
bf:fc:7e:e5:58:94:5c:55:0b:bb:ae:e7:d8:cf:b9:
ab:f0:dc:b9:c4:13:3f:7b:d2:8b:a0:0c:6e:04:9e:
14:71:33:ee:db:a9:63:91:a3:0b:c5:4d:c1:6d:c1:
bb:f1:ba:48:c9:d8:5b:2a:26:1f:d5:9d:63:3d:9c:
7b:8a:96:13:d5:ca:ee:da:90:57:e4:bf:d7:2a:bd:
06:fb:0c:b0:39:48:f8:f4:db:e9:d1:ee:b6:4b:32:
08:96:ed:a7:6d:87:93:fd:e9:2c:58:35:07:35:fb:
6f:f2:c2:9e:47:f9:8f:63:b5:0c:b6:fc:ec:07:0d:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:03:C2:1D:14:78:77:75:F7:56:30:FA:62:4F:84:A6:26:AB:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:9000::/48
Signature Algorithm: sha256WithRSAEncryption
49:77:3e:f2:67:00:7c:d8:58:20:03:ff:ca:a1:9d:c2:9c:c6:
38:20:b3:a2:78:f3:39:4b:f4:14:b0:04:69:37:06:78:3a:ac:
87:4e:35:0a:37:3d:b1:be:21:2d:ba:ea:61:2f:d4:83:b5:e7:
41:5e:5d:be:d7:57:40:30:cc:88:3b:73:f9:08:83:ce:22:d8:
36:c3:99:48:40:be:77:42:c1:92:71:13:7c:c5:ce:12:60:b0:
78:49:65:8b:95:5c:db:06:7c:53:3a:34:64:4d:e3:58:f5:16:
52:01:2b:e3:23:76:6a:cb:dd:a6:b7:0e:6e:fe:0b:1b:55:3b:
86:a6:0a:a6:35:ea:2e:d9:1d:f5:23:ae:b1:05:ef:d0:34:85:
5b:f2:0a:6d:57:f8:ff:18:cb:fc:3c:da:c2:c8:17:cd:28:4a:
b6:d9:fe:84:46:be:03:e2:ca:e9:96:c7:76:45:53:0e:b0:25:
46:29:aa:cb:da:cc:33:7a:4a:00:80:e1:98:21:da:25:4e:fc:
23:c7:5e:b1:ee:d4:f6:0b:aa:e1:09:9d:28:4a:7e:7d:24:a2:
1d:e0:7b:a7:01:e0:15:cf:ea:5e:a9:c0:75:ad:50:74:96:7c:
90:2a:e1:5d:bd:13:6c:72:d2:9d:9b:fb:ff:6b:8c:d6:43:e4:
23:62:89:3e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKXNVcNPyk3WqMY9wVNI7u8IAJ6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDMwMjAwMTBaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDQzNjQwMzY0MzMyMTNmMzQ2NzhlMjY5NzVjYTJmNGViNDk4Zjk2NGNkZjky
ZTlmZWQ0ODMyOWIwZDMzNjQ0YWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXvVTb7Xma9Dc/slTZsEanjTwCtuyOU0qoV6uTshyY/jGMAu+J7UqjZu89m
B6gT2q27m5VbNOcSVOljUQuKmeKRonNVrsYpAVdvWkdF2M8b55W7Q78i9VUClUhV
Omvqz+7b9YZ9dDk333ilZQrKGT09fDo9ovUeXyVHnwuNKDtwLnBlkMNzv/x+5ViU
XFULu67n2M+5q/DcucQTP3vSi6AMbgSeFHEz7tupY5GjC8VNwW3Bu/G6SMnYWyom
H9WdYz2ce4qWE9XK7tqQV+S/1yq9BvsMsDlI+PTb6dHutksyCJbtp22Hk/3pLFg1
BzX7b/LCnkf5j2O1DLb87AcNZqUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBScKQPC
HRR4d3X3VjD6Yk+EpiarejAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGM0MGQxMTYtM2I1ZC00ZTc5LWE3MzUtYTE3YjM3ZjhkZWQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GyQ
ADANBgkqhkiG9w0BAQsFAAOCAQEASXc+8mcAfNhYIAP/yqGdwpzGOCCzonjzOUv0
FLAEaTcGeDqsh041Cjc9sb4hLbrqYS/Ug7XnQV5dvtdXQDDMiDtz+QiDziLYNsOZ
SEC+d0LBknETfMXOEmCweElli5Vc2wZ8Uzo0ZE3jWPUWUgEr4yN2asvdprcObv4L
G1U7hqYKpjXqLtkd9SOusQXv0DSFW/IKbVf4/xjL/DzawsgXzShKttn+hEa+A+LK
6ZbHdkVTDrAlRimqy9rMM3pKAIDhmCHaJU78I8dese7U9guq4QmdKEp+fSSiHeB7
pwHgFc/qXqnAda1QdJZ8kCrhXb0TbHLSnZv7/2uM1kPkI2KJPg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:13 2026 by rpki-client