Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: v8Qng+IzD3Ww8Ope7CN1TKz2pZDM8jrirNsqKJ6BSH8=
Subject key identifier: E1:9F:09:68:67:E0:10:53:EC:81:A0:BE:D8:B2:EA:05:6C:F0:6B:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49E232162A996EBA036C86D684531BCAB3C6D188
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Fri 07 Aug 2026 05:00:10 +0000
ROA not before: Fri 07 Aug 2026 05:00:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e2:32:16:2a:99:6e:ba:03:6c:86:d6:84:53:1b:ca:b3:c6:d1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8aee3f93beee6ad685643f7a0a713143eee5f32f1dfed22a323b3cc396c2f26b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:fa:5b:d1:b2:c2:93:cb:42:ad:d0:c2:cb:
f7:6f:51:95:cf:28:78:2a:16:8b:40:0c:9a:55:49:
e2:23:bd:99:80:0f:63:f3:79:93:9f:f4:9c:eb:4c:
3d:bc:4a:d4:60:3c:48:27:41:bf:97:8e:2f:9e:3a:
01:f6:41:3b:17:b0:cf:73:6c:93:9c:f6:35:2b:83:
2f:ec:9d:0a:2d:46:20:15:5c:2d:52:a0:46:1d:10:
c6:01:70:f5:d3:62:53:7d:d3:91:f6:a7:ea:2a:0a:
e4:c7:22:bb:6e:2a:10:cb:a6:75:51:8d:13:ad:88:
c3:32:ef:d2:5b:9d:a7:f8:43:58:0d:2a:0d:78:8d:
3b:29:e9:bd:ac:8f:03:9c:bf:ae:1f:be:5b:ba:b3:
6c:34:14:cf:f9:72:bf:fc:ae:e8:28:df:48:87:63:
f3:eb:29:2b:cd:c3:e7:14:ee:b9:6d:10:8f:6b:d0:
d8:d0:78:4b:c4:f3:97:78:de:f3:8a:b2:ab:c9:14:
58:84:aa:19:b9:dc:d2:7e:c2:49:2f:cc:d5:6d:77:
b5:3e:ae:52:35:1f:c0:7d:9a:20:37:5b:67:84:41:
d9:f0:95:02:de:3c:8a:cb:a1:6e:36:1f:12:f3:ae:
25:65:f2:02:8d:28:cb:20:e5:c4:69:4e:47:3d:22:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:09:68:67:E0:10:53:EC:81:A0:BE:D8:B2:EA:05:6C:F0:6B:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
06:de:f0:45:b9:4b:fc:e3:09:27:73:bd:14:60:93:b2:2c:39:
de:52:3a:fe:f9:86:f3:e4:50:59:7c:fa:76:dd:8a:33:98:9f:
c9:f9:6f:09:f6:00:b6:31:16:01:e9:91:ee:cc:8b:f8:c0:f0:
80:3a:fe:38:3f:2a:e4:b7:24:16:45:42:87:a4:25:d4:13:15:
f1:70:ab:ac:a6:0a:60:fc:7d:64:0f:2f:04:a3:bf:13:e9:15:
1e:28:d7:33:85:b7:09:5b:db:b9:7f:e1:a5:9b:5a:f3:1a:9a:
e5:29:9c:9d:05:d2:72:98:3e:07:4b:d4:8a:86:89:6c:f3:13:
79:f6:ff:d0:b7:ae:13:6f:00:51:11:ad:fb:2f:44:8a:52:29:
54:77:34:44:af:94:22:f9:d4:bb:be:80:84:97:59:9e:a2:82:
21:0d:2a:39:55:69:f0:22:b4:a9:b0:15:75:89:b1:86:93:49:
51:ca:4e:49:53:e7:0e:5d:f4:0c:43:15:51:e6:38:a9:f6:1c:
77:6d:e0:d7:47:ac:33:c8:7e:52:76:46:9a:27:ff:ad:6a:d4:
7b:c1:0b:c0:13:50:5a:f5:25:b8:08:e0:b5:bc:31:d9:e5:ae:
11:ae:a2:9e:15:7d:fe:cc:70:79:f0:a7:42:5b:ec:81:9b:63:
26:1d:cb:8f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSeIyFiqZbroDbIbWhFMbyrPG0YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTAwMTBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDhhZWUzZjkzYmVlZTZhZDY4NTY0M2Y3YTBhNzEzMTQzZWVlNWYzMmYxZGZl
ZDIyYTMyM2IzY2MzOTZjMmYyNmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL62+lvRssKTy0Kt0MLL929Rlc8oeCoWi0AMmlVJ4iO9mYAPY/N5k5/0nOtM
PbxK1GA8SCdBv5eOL546AfZBOxewz3Nsk5z2NSuDL+ydCi1GIBVcLVKgRh0QxgFw
9dNiU33Tkfan6ioK5Mciu24qEMumdVGNE62IwzLv0ludp/hDWA0qDXiNOynpvayP
A5y/rh++W7qzbDQUz/lyv/yu6CjfSIdj8+spK83D5xTuuW0Qj2vQ2NB4S8Tzl3je
84qyq8kUWISqGbnc0n7CSS/M1W13tT6uUjUfwH2aIDdbZ4RB2fCVAt48isuhbjYf
EvOuJWXyAo0oyyDlxGlORz0iXYUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBThnwlo
Z+AQU+yBoL7YsuoFbPBrzTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTA3YzUzNGQtMTg5Yi00M2IzLTk0NWEtZGQwNDBlZTIwMGQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAG3vBFuUv84wknc70UYJOyLDneUjr++Ybz5FBZ
fPp23YozmJ/J+W8J9gC2MRYB6ZHuzIv4wPCAOv44PyrktyQWRUKHpCXUExXxcKus
pgpg/H1kDy8Eo78T6RUeKNczhbcJW9u5f+Glm1rzGprlKZydBdJymD4HS9SKhols
8xN59v/Qt64TbwBREa37L0SKUilUdzREr5Qi+dS7voCEl1meooIhDSo5VWnwIrSp
sBV1ibGGk0lRyk5JU+cOXfQMQxVR5jip9hx3beDXR6wzyH5SdkaaJ/+tatR7wQvA
E1Ba9SW4COC1vDHZ5a4RrqKeFX3+zHB58KdCW+yBm2MmHcuP
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:39 2026 by rpki-client