Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/545f4591-9634-4a7d-a014-1c98c0cee552.roa
File: 545f4591-9634-4a7d-a014-1c98c0cee552.roa (raw, json)
Hash identifier: siZeE4S4IbtMrAUj6JEvEBOt81URtJ3eNfH+Llji434=
Subject key identifier: 48:06:02:48:FA:AF:26:C2:E2:1F:20:83:BB:6E:51:D7:BE:53:C9:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C292D79735A5B088563C148200AAF647D8E25E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/545f4591-9634-4a7d-a014-1c98c0cee552.roa
Signing time: Wed 19 Aug 2026 01:00:38 +0000
ROA not before: Wed 19 Aug 2026 01:00:38 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:29:2d:79:73:5a:5b:08:85:63:c1:48:20:0a:af:64:7d:8e:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:38 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=8d3c0c0c39875cabb918e9b3c82144146ae530f1476e984547a3c2b1ad48cd9b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:c6:bf:70:0a:c5:b1:50:41:76:42:12:08:
ba:df:ae:3f:db:1e:e1:3e:19:d3:e3:ad:02:b5:ee:
3a:49:76:63:71:b5:ad:8b:91:7e:2b:ea:21:8a:cb:
a8:2a:5e:84:12:73:8b:dd:c2:e1:6f:3e:47:d0:7e:
b3:79:49:ee:9c:39:70:5f:36:2b:95:e3:47:74:bb:
2b:5f:bd:4d:09:c3:f9:b1:9e:eb:4d:3b:ec:ec:f3:
78:28:e9:a9:90:75:67:2a:18:b0:b8:ef:e3:92:18:
f3:7f:b4:7a:ed:6b:69:bc:6d:02:f5:19:da:c7:5b:
75:80:e8:9e:82:5b:70:93:15:6e:34:12:9f:4c:78:
03:c6:e8:39:ce:8a:28:7e:e9:e3:dc:e5:1e:97:e8:
ad:f4:32:dd:4f:6d:27:cd:f5:52:8c:f7:8a:3a:d1:
23:c1:de:8a:08:a8:35:2f:40:9a:0e:aa:ce:fc:aa:
f3:33:a3:4a:82:ef:9e:8d:25:84:6b:c4:ce:1f:45:
aa:6c:db:ae:b8:3c:3c:f9:73:55:63:80:2a:72:97:
3a:8b:ad:52:65:0c:aa:81:0a:61:d0:5e:9d:4d:cd:
93:dc:68:53:26:05:38:39:56:d6:76:54:39:10:36:
ab:6a:f1:e2:a3:8a:9d:0c:15:10:b0:bd:1f:3d:f8:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:06:02:48:FA:AF:26:C2:E2:1F:20:83:BB:6E:51:D7:BE:53:C9:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/545f4591-9634-4a7d-a014-1c98c0cee552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c020::/48
Signature Algorithm: sha256WithRSAEncryption
20:a3:97:da:4a:17:95:2f:0a:64:c2:9e:40:04:6a:01:11:cf:
bb:52:65:60:5d:e0:7e:44:89:3a:51:ce:26:ac:f0:b8:26:6e:
b1:f4:a3:db:29:cf:a0:fc:44:ab:6c:69:d2:32:d3:9d:20:c9:
f4:5c:e7:73:3f:64:3d:50:a6:b1:cd:5e:b9:40:f1:73:f0:fa:
4b:25:db:14:76:7b:d1:19:4d:70:f7:f5:27:0a:71:6b:b0:ed:
0e:04:ce:ac:fd:00:13:eb:c3:1e:17:ea:e0:0c:ca:51:b5:c2:
34:74:47:6b:6c:ec:0f:21:3c:fb:f6:a5:79:61:57:f9:c2:16:
e7:24:a5:89:25:69:97:6e:7a:b1:1e:5d:b9:e8:99:cf:73:a9:
4e:be:8e:d4:f6:d5:be:dd:d8:89:d6:71:74:bf:45:cd:01:e1:
33:c0:70:bc:f2:fa:7b:de:33:93:74:98:af:15:76:bd:5b:aa:
51:c8:b2:c1:6d:d3:fc:9e:22:b1:7c:a1:ef:03:72:94:25:35:
ca:56:38:3b:f7:42:0d:96:89:e6:e7:e9:f3:9f:e2:c9:00:fe:
60:c8:97:4f:8e:a7:5b:b7:0a:dc:85:10:b2:35:e7:f1:c1:32:
ae:b4:dd:0e:32:e5:4c:e1:a0:96:ec:50:e9:b4:bf:10:97:88:
63:e1:64:8a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfCkteXNaWwiFY8FIIAqvZH2OJeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwMzhaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDhkM2MwYzBjMzk4NzVjYWJiOTE4ZTliM2M4MjE0NDE0NmFlNTMwZjE0NzZl
OTg0NTQ3YTNjMmIxYWQ0OGNkOWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3Sxr9wCsWxUEF2QhIIut+uP9se4T4Z0+OtArXuOkl2Y3G1rYuRfivqIYrL
qCpehBJzi93C4W8+R9B+s3lJ7pw5cF82K5XjR3S7K1+9TQnD+bGe60077OzzeCjp
qZB1ZyoYsLjv45IY83+0eu1rabxtAvUZ2sdbdYDonoJbcJMVbjQSn0x4A8boOc6K
KH7p49zlHpforfQy3U9tJ831Uoz3ijrRI8HeigioNS9Amg6qzvyq8zOjSoLvno0l
hGvEzh9Fqmzbrrg8PPlzVWOAKnKXOoutUmUMqoEKYdBenU3Nk9xoUyYFODlW1nZU
ORA2q2rx4qOKnQwVELC9Hz34vZ0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRIBgJI
+q8mwuIfIIO7blHXvlPJVDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQ1ZjQ1OTEtOTYzNC00YTdkLWEwMTQtMWM5OGMwY2VlNTUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H3A
IDANBgkqhkiG9w0BAQsFAAOCAQEAIKOX2koXlS8KZMKeQARqARHPu1JlYF3gfkSJ
OlHOJqzwuCZusfSj2ynPoPxEq2xp0jLTnSDJ9Fzncz9kPVCmsc1euUDxc/D6SyXb
FHZ70RlNcPf1Jwpxa7DtDgTOrP0AE+vDHhfq4AzKUbXCNHRHa2zsDyE8+/aleWFX
+cIW5ySliSVpl256sR5dueiZz3OpTr6O1PbVvt3YidZxdL9FzQHhM8BwvPL6e94z
k3SYrxV2vVuqUciywW3T/J4isXyh7wNylCU1ylY4O/dCDZaJ5ufp85/iyQD+YMiX
T46nW7cK3IUQsjXn8cEyrrTdDjLlTOGgluxQ6bS/EJeIY+Fkig==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:04 2026 by rpki-client