Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa
File: 4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa (raw, json)
Hash identifier: 6ry9sEoDzMvSUj9Fjs+l/YzWVv08CF49SyrtbB9zBbs=
Subject key identifier: A8:73:81:F9:0B:1C:7B:AF:A9:C5:F8:04:C2:E4:5B:1F:42:9E:BF:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B9EBDCDA836F36640EA34B9710923843D848516
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa
Signing time: Mon 03 Aug 2026 02:00:08 +0000
ROA not before: Mon 03 Aug 2026 02:00:08 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9e:bd:cd:a8:36:f3:66:40:ea:34:b9:71:09:23:84:3d:84:85:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:08 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=b21af25d9528d8d3af4885805b43d465fcd4168a0292d5227b2a3f6b1de6658b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:f0:a0:92:3e:03:cb:18:d6:8c:cf:ed:98:
a3:7c:f2:a8:fb:ce:c8:08:47:5c:19:3b:d2:9c:b3:
d9:02:51:3a:32:4c:3f:54:b6:b5:74:9b:f7:8e:d3:
c0:65:2f:74:36:99:04:99:45:bf:d2:58:95:f7:39:
4f:59:0e:3a:da:59:e3:43:87:39:59:11:cc:ad:5f:
70:88:72:74:07:45:2c:82:e1:84:c8:e2:8d:01:10:
c8:b6:b8:ab:bb:18:85:e1:c7:e8:c6:14:a4:44:9a:
f8:b0:ea:3d:6b:9a:d2:21:96:3e:a7:cc:ce:65:07:
02:3c:dc:68:30:bd:fa:6b:88:b5:39:cf:74:1a:76:
9a:05:0d:dc:b6:af:38:7a:d1:92:20:b8:32:d8:35:
c1:be:dc:24:40:8f:13:c4:e4:32:ce:2f:b8:b7:67:
ea:9b:e0:b7:ba:d9:be:e1:1b:f4:10:2a:ea:08:91:
7b:57:c0:09:a6:28:b9:30:5e:a7:45:37:23:aa:7e:
19:37:97:08:46:a0:83:24:a0:d6:3b:cf:30:4c:d1:
b6:5d:8b:bc:d1:8b:40:94:c4:ea:cd:ae:7e:75:e6:
3a:7a:34:e6:cd:f3:45:c6:0c:01:c8:a7:c5:b1:7f:
46:3a:21:df:09:27:17:b7:98:27:b0:ea:cb:10:a1:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:81:F9:0B:1C:7B:AF:A9:C5:F8:04:C2:E4:5B:1F:42:9E:BF:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:800::/40
Signature Algorithm: sha256WithRSAEncryption
bb:c6:bf:39:39:34:41:d1:c2:a0:5f:41:32:2a:e3:84:bb:f0:
04:6e:e6:e3:3e:e4:fd:87:78:5b:ad:8c:77:cf:e3:ff:da:ea:
f4:78:3e:08:64:05:27:48:de:83:a5:87:19:d5:4a:72:67:92:
71:d1:26:c8:ba:07:60:fb:51:22:a6:db:a5:cf:24:a7:f4:8d:
25:0b:38:fd:20:84:59:6d:bf:0a:1f:c4:57:d0:76:fd:a7:ce:
a6:2c:49:e7:7e:21:c8:52:c6:6c:27:b0:07:4e:aa:a8:7b:87:
c6:8f:c3:5c:d0:ca:33:3a:9d:30:3c:c3:eb:19:de:20:52:7c:
6f:35:60:e4:e0:47:ae:61:2c:c7:4a:c7:b7:9b:fb:e6:d7:ee:
84:81:49:be:a3:8e:c1:09:47:6d:16:d6:19:91:cc:85:08:1d:
e4:bb:f9:1d:cd:f3:52:11:e4:5d:0f:74:9b:c0:00:5d:1a:eb:
de:54:19:3f:77:9e:80:83:3b:4d:c1:42:93:ae:c0:34:a3:50:
e8:9c:76:b9:05:bf:94:92:33:7f:fd:b3:59:60:97:d8:45:24:
bd:97:63:16:ba:42:26:48:42:2b:6c:32:1d:42:48:c3:66:fa:
01:d5:4c:99:66:ad:f5:52:09:c2:ac:96:c7:cf:62:a2:9c:f9:
5e:32:f6:e9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUe569zag282ZA6jS5cQkjhD2EhRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDMwMjAwMDhaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyMWFmMjVkOTUyOGQ4ZDNhZjQ4ODU4MDViNDNkNDY1ZmNkNDE2OGEwMjky
ZDUyMjdiMmEzZjZiMWRlNjY1OGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANPl8KCSPgPLGNaMz+2Yo3zyqPvOyAhHXBk70pyz2QJROjJMP1S2tXSb947T
wGUvdDaZBJlFv9JYlfc5T1kOOtpZ40OHOVkRzK1fcIhydAdFLILhhMjijQEQyLa4
q7sYheHH6MYUpESa+LDqPWua0iGWPqfMzmUHAjzcaDC9+muItTnPdBp2mgUN3Lav
OHrRkiC4Mtg1wb7cJECPE8TkMs4vuLdn6pvgt7rZvuEb9BAq6giRe1fACaYouTBe
p0U3I6p+GTeXCEaggySg1jvPMEzRtl2LvNGLQJTE6s2ufnXmOno05s3zRcYMAcin
xbF/Rjoh3wknF7eYJ7DqyxCh/W8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSoc4H5
Cxx7r6nF+ATC5FsfQp6/ejAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGY1YmVlZWItOWQ5Mi00ZjA2LWJkMjAtM2U5MDI3MjdlNDRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HsI
MA0GCSqGSIb3DQEBCwUAA4IBAQC7xr85OTRB0cKgX0EyKuOEu/AEbubjPuT9h3hb
rYx3z+P/2ur0eD4IZAUnSN6DpYcZ1UpyZ5Jx0SbIugdg+1EiptulzySn9I0lCzj9
IIRZbb8KH8RX0Hb9p86mLEnnfiHIUsZsJ7AHTqqoe4fGj8Nc0MozOp0wPMPrGd4g
UnxvNWDk4EeuYSzHSse3m/vm1+6EgUm+o47BCUdtFtYZkcyFCB3ku/kdzfNSEeRd
D3SbwABdGuveVBk/d56AgztNwUKTrsA0o1DonHa5Bb+UkjN//bNZYJfYRSS9l2MW
ukImSEIrbDIdQkjDZvoB1UyZZq31UgnCrJbHz2KinPleMvbp
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:49 2026 by rpki-client