Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
File: 4dc2c958-c749-4f2f-a83c-b419f7f45487.roa (raw, json)
Hash identifier: P/ram4rfspWMf2FlJeQkvKPzOiT1uNdY/P4O+nybbGg=
Subject key identifier: 7D:48:C2:B5:71:02:9C:0B:ED:71:E2:15:A6:EA:A2:47:4D:69:CE:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BD0F208A7BC5496B942ECB5EF0975BF3291B22C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
Signing time: Fri 07 Aug 2026 05:20:43 +0000
ROA not before: Fri 07 Aug 2026 05:20:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d0:f2:08:a7:bc:54:96:b9:42:ec:b5:ef:09:75:bf:32:91:b2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8a30cf46c058b66f1472b7706b7c19409fc6c5cff184435ce6b0723263baa1dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:e3:c4:8f:3a:fd:34:2b:7c:dc:6f:9c:bb:
e9:a0:2d:d5:c7:f4:ea:f7:ee:8d:a8:d2:fd:40:21:
a0:8b:9b:37:e6:05:9c:a8:bb:2c:56:55:13:3e:c2:
0d:da:10:de:89:da:c9:61:8a:22:2d:60:7b:86:91:
38:34:f9:f0:45:08:85:04:a8:5c:53:52:05:f1:8f:
42:64:93:a5:3c:65:95:63:ce:c2:a0:e8:34:e4:72:
6a:8d:5e:8c:9d:2f:98:a2:62:25:6a:21:40:dd:ba:
f8:68:39:e3:2b:2f:f4:f2:e6:9b:56:42:26:e0:ae:
6f:34:d1:95:c2:f0:e7:27:fb:02:a7:57:15:d1:1e:
85:3a:d8:08:4a:f9:92:6e:b9:28:b4:f8:d2:3e:f8:
ff:dc:ab:91:a8:96:89:aa:94:52:de:bd:d6:3f:5b:
4c:3b:0c:28:db:c8:0a:15:56:55:82:64:69:3f:87:
6f:41:6e:67:d8:8e:1d:5b:5f:fc:e2:4f:6b:b0:a5:
59:73:4a:fe:e2:77:48:12:df:2b:85:3b:aa:7a:b6:
54:fb:22:14:fc:88:f4:1c:dc:06:e7:30:5f:67:71:
7a:b3:2c:39:9c:76:77:36:f9:78:c2:29:6a:cc:e1:
43:63:63:a3:e4:13:e7:da:28:68:3b:d2:3b:34:67:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:C2:B5:71:02:9C:0B:ED:71:E2:15:A6:EA:A2:47:4D:69:CE:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
08:26:40:56:e1:76:a1:cf:91:3e:f1:ee:fa:e0:78:f1:f4:25:
c2:40:c3:c8:d0:3b:b0:70:ad:67:85:b8:78:58:59:43:1d:d3:
bd:13:86:35:9b:82:13:41:60:e7:48:a8:01:17:4c:1d:d2:d6:
76:46:dc:4c:96:70:4c:03:21:84:7a:64:7b:31:22:f3:c4:67:
37:1b:68:00:f5:fe:32:2f:99:80:b5:83:cc:c3:38:1d:42:1b:
9d:85:30:58:ac:78:5d:95:bd:1f:0b:b4:64:3b:98:d0:21:fb:
76:ee:af:47:c9:00:8c:d2:bb:ab:88:ae:76:b3:0d:7f:d2:c4:
ce:0f:07:c5:f3:6d:c8:ff:1c:72:ba:29:ef:89:10:d3:d4:10:
08:d4:26:04:0e:32:47:e5:e3:e7:53:82:e1:63:bd:67:3a:a9:
45:61:21:07:21:7c:73:08:87:2e:4a:d3:09:83:fd:d8:5f:da:
75:f7:3a:40:40:30:f1:9b:9e:39:6a:d2:79:52:71:30:fc:eb:
34:8f:f2:9a:66:72:ff:73:66:fc:33:dd:bd:69:50:a2:07:f3:
0e:a4:c9:54:60:fd:41:53:fd:90:4f:03:53:0d:f7:a3:31:a8:
02:c5:9f:00:dd:3a:a3:b3:5b:63:59:f3:87:56:a3:4e:2f:6b:
bb:80:4a:af
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUG9DyCKe8VJa5Quy17wl1vzKRsiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTIwNDNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDhhMzBjZjQ2YzA1OGI2NmYxNDcyYjc3MDZiN2MxOTQwOWZjNmM1Y2ZmMTg0
NDM1Y2U2YjA3MjMyNjNiYWExZGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN3048SPOv00K3zcb5y76aAt1cf06vfujajS/UAhoIubN+YFnKi7LFZVEz7C
DdoQ3onayWGKIi1ge4aRODT58EUIhQSoXFNSBfGPQmSTpTxllWPOwqDoNORyao1e
jJ0vmKJiJWohQN26+Gg54ysv9PLmm1ZCJuCubzTRlcLw5yf7AqdXFdEehTrYCEr5
km65KLT40j74/9yrkaiWiaqUUt691j9bTDsMKNvIChVWVYJkaT+Hb0FuZ9iOHVtf
/OJPa7ClWXNK/uJ3SBLfK4U7qnq2VPsiFPyI9BzcBucwX2dxerMsOZx2dzb5eMIp
aszhQ2Njo+QT59ooaDvSOzRnoVECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR9SMK1
cQKcC+1x4hWm6qJHTWnOwzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGRjMmM5NTgtYzc0OS00ZjJmLWE4M2MtYjQxOWY3ZjQ1NDg3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hrg
MA0GCSqGSIb3DQEBCwUAA4IBAQAIJkBW4Xahz5E+8e764Hjx9CXCQMPI0DuwcK1n
hbh4WFlDHdO9E4Y1m4ITQWDnSKgBF0wd0tZ2RtxMlnBMAyGEemR7MSLzxGc3G2gA
9f4yL5mAtYPMwzgdQhudhTBYrHhdlb0fC7RkO5jQIft27q9HyQCM0ruriK52sw1/
0sTODwfF823I/xxyuinviRDT1BAI1CYEDjJH5ePnU4LhY71nOqlFYSEHIXxzCIcu
StMJg/3YX9p19zpAQDDxm545atJ5UnEw/Os0j/KaZnL/c2b8M929aVCiB/MOpMlU
YP1BU/2QTwNTDfejMagCxZ8A3Tqjs1tjWfOHVqNOL2u7gEqv
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:20 2026 by rpki-client