Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52cdf958-64cb-496a-aeda-f4f9a07b440e.roa
File: 52cdf958-64cb-496a-aeda-f4f9a07b440e.roa (raw, json)
Hash identifier: 5W7Kvf3u7mG4NcZdUg5IIAobYnmXZ8rlpR16v7/ao/A=
Subject key identifier: 0B:3F:01:86:80:66:79:08:F2:41:FD:4C:4C:06:B2:30:8E:6D:6F:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14EDFED42E6CAD04347B021612DD79B7F1A996BE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52cdf958-64cb-496a-aeda-f4f9a07b440e.roa
Signing time: Thu 22 Oct 2026 03:50:14 +0000
ROA not before: Thu 22 Oct 2026 03:50:14 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ed:fe:d4:2e:6c:ad:04:34:7b:02:16:12:dd:79:b7:f1:a9:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:14 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=9c0846683905723093b7b31f9f6a427234144a4e573bcbe6ed710e920eb5b134, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:b4:6e:64:60:43:bd:17:c1:66:53:f3:44:
72:3a:40:1b:b8:72:2d:a3:d5:bf:4f:7e:db:13:99:
21:82:aa:6f:a5:98:23:3e:ca:2a:94:0e:c2:26:3c:
9c:be:40:a4:8d:2a:af:99:e9:4c:bf:2e:e8:7d:d8:
57:ca:5a:43:ba:0e:2f:85:83:dd:88:a1:36:22:5a:
90:8e:56:ec:d0:bf:56:f3:e6:2a:8c:a3:ee:f8:46:
8c:8f:fe:28:fe:c6:ef:65:41:02:30:b7:29:4c:4f:
3b:03:85:7c:ff:9f:28:f2:8f:4e:c6:71:14:c8:e9:
fe:a0:f7:c4:3d:39:fb:af:71:4e:d7:61:88:c2:89:
1d:6c:9f:36:33:a0:48:ee:06:20:44:5b:82:0a:4d:
a4:87:00:59:3b:a0:8e:2a:c6:4b:ad:d2:e6:9d:99:
17:0f:a9:3e:19:bc:6c:8c:a5:de:ac:5a:6d:76:58:
66:00:c0:8a:e9:95:6d:af:2a:8b:d5:cb:f1:f2:f8:
45:86:7a:59:98:96:21:2a:4e:d2:e0:3a:d1:ac:3e:
ef:ae:81:af:39:f4:d4:5d:d1:fe:eb:14:b1:b4:5e:
3a:1b:63:70:95:5a:65:00:b8:33:57:60:6a:48:a0:
5a:a0:e7:60:6c:24:89:57:f9:d4:c5:32:b8:a0:f2:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:01:86:80:66:79:08:F2:41:FD:4C:4C:06:B2:30:8E:6D:6F:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52cdf958-64cb-496a-aeda-f4f9a07b440e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:d6:6a:d4:f6:67:98:43:48:92:a7:a5:1b:f3:f7:05:80:7c:
7b:41:ce:8f:fa:81:10:cd:49:68:c9:56:f7:de:1e:2f:fb:4e:
8e:7a:3d:87:9f:34:14:f3:8e:c2:cd:f8:f5:a5:d3:b8:55:12:
7c:12:6b:f1:34:4d:9e:8d:ef:bf:45:e7:92:b8:4f:cc:55:de:
c4:57:b2:61:b9:f5:5d:ad:1a:8c:64:3b:f7:e0:92:9b:a1:4f:
49:31:db:02:be:0f:68:92:d4:c2:72:df:57:ec:26:5a:ad:e7:
7b:b2:27:b1:ad:02:a7:e0:aa:92:c9:34:c2:43:a4:b5:9b:b2:
f7:50:1f:6d:ee:4b:06:ce:38:08:9e:25:c7:75:7e:20:12:6f:
09:00:0b:52:4b:05:54:96:d4:a7:c9:6e:27:1d:3e:18:16:ae:
56:71:cd:db:f9:f1:96:1f:a2:f6:be:7d:d0:f8:6b:50:2a:04:
76:53:20:e6:a8:54:69:5d:19:24:93:54:42:20:cf:96:86:73:
1b:7f:ab:c0:39:57:db:74:05:1b:4a:25:29:4e:3c:a5:93:ba:
73:bb:28:4a:ad:28:ef:c8:ad:df:2b:36:5d:49:89:37:01:9b:
26:d7:6f:e0:16:7e:69:3b:f9:a7:ed:fc:7a:af:46:07:e7:46:
09:82:55:79
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFO3+1C5srQQ0ewIWEt15t/Gplr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjIwMzUwMTRaFw0yNzAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDljMDg0NjY4MzkwNTcyMzA5M2I3YjMxZjlmNmE0MjcyMzQxNDRhNGU1NzNi
Y2JlNmVkNzEwZTkyMGViNWIxMzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKvStG5kYEO9F8FmU/NEcjpAG7hyLaPVv09+2xOZIYKqb6WYIz7KKpQOwiY8
nL5ApI0qr5npTL8u6H3YV8paQ7oOL4WD3YihNiJakI5W7NC/VvPmKoyj7vhGjI/+
KP7G72VBAjC3KUxPOwOFfP+fKPKPTsZxFMjp/qD3xD05+69xTtdhiMKJHWyfNjOg
SO4GIERbggpNpIcAWTugjirGS63S5p2ZFw+pPhm8bIyl3qxabXZYZgDAiumVba8q
i9XL8fL4RYZ6WZiWISpO0uA60aw+766Brzn01F3R/usUsbReOhtjcJVaZQC4M1dg
akigWqDnYGwkiVf51MUyuKDy19kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQLPwGG
gGZ5CPJB/UxMBrIwjm1vDTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTJjZGY5NTgtNjRjYi00OTZhLWFlZGEtZjRmOWEwN2I0NDBlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DUg
MA0GCSqGSIb3DQEBCwUAA4IBAQDD1mrU9meYQ0iSp6Ub8/cFgHx7Qc6P+oEQzUlo
yVb33h4v+06Oej2HnzQU847Czfj1pdO4VRJ8EmvxNE2eje+/ReeSuE/MVd7EV7Jh
ufVdrRqMZDv34JKboU9JMdsCvg9oktTCct9X7CZared7siexrQKn4KqSyTTCQ6S1
m7L3UB9t7ksGzjgIniXHdX4gEm8JAAtSSwVUltSnyW4nHT4YFq5Wcc3b+fGWH6L2
vn3Q+GtQKgR2UyDmqFRpXRkkk1RCIM+WhnMbf6vAOVfbdAUbSiUpTjylk7pzuyhK
rSjvyK3fKzZdSYk3AZsm12/gFn5pO/mn7fx6r0YH50YJglV5
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:50 2026 by rpki-client