Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
File: 546828d4-9f43-44c2-bff8-aafeddca4e25.roa (raw, json)
Hash identifier: EYchtUVi7YIoRcY4F6OYFkOdvceJjMwPtzEUxUWGcA0=
Subject key identifier: F5:6C:CF:A4:72:76:15:08:6F:17:F8:F1:C5:0F:AD:B6:9A:F4:0F:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 309ADF6FA7AEE69037B5FFE04CF4F8BB98EBE3C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
Signing time: Fri 07 Aug 2026 05:31:05 +0000
ROA not before: Fri 07 Aug 2026 05:31:05 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9a:df:6f:a7:ae:e6:90:37:b5:ff:e0:4c:f4:f8:bb:98:eb:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:05 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e6d0f22b19dc4baf9c7f11537af4a2b61b9ddbb8e184e6b4a9f27a15477104ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:f1:2f:a9:52:75:87:ee:67:73:ff:26:89:
0c:9f:1f:5d:93:62:34:75:1e:4c:4b:ea:69:9c:b0:
cd:bc:d7:13:4a:96:30:70:5f:f1:63:32:6f:5e:20:
93:1f:6e:e9:4a:6f:17:22:ed:45:3c:2d:3f:0b:1a:
ca:1e:12:ac:4b:4d:e8:b2:4f:2d:34:a7:e2:fe:16:
4c:be:e7:a1:b4:d8:94:9b:4f:51:cf:73:29:57:6f:
a6:5b:cc:61:81:a4:46:16:01:38:8f:0a:61:69:59:
2d:d7:42:55:d7:e4:8f:fa:7c:64:a4:7c:c5:07:53:
98:ed:3e:dd:31:1a:20:d0:3d:94:ab:7d:c3:a9:a4:
d6:49:2f:90:53:55:60:4d:ef:0b:1c:64:a8:59:ef:
21:d6:ec:cf:6d:e9:42:42:5e:50:6e:e1:d8:cc:8b:
d6:8d:91:c2:ca:5f:5d:bb:ea:80:27:3b:73:bf:18:
3a:04:2e:ef:f1:aa:32:48:84:c2:19:f2:42:a3:1a:
6f:d0:e3:24:71:e1:c1:0a:47:34:2f:eb:8b:55:c0:
67:3d:94:12:0b:a9:3a:84:03:49:f3:a3:91:85:6b:
94:48:1d:b0:95:6b:ff:99:35:58:8a:25:a0:d8:e0:
44:eb:74:7d:85:a3:ef:9c:14:9f:0b:a4:9d:4b:85:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:CF:A4:72:76:15:08:6F:17:F8:F1:C5:0F:AD:B6:9A:F4:0F:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e040::/48
Signature Algorithm: sha256WithRSAEncryption
63:44:17:85:1f:b8:fb:3c:bc:6e:16:06:38:5e:21:41:11:15:
6a:66:1a:26:c6:e9:9c:79:57:1f:62:49:b3:e4:c5:96:c3:7c:
92:ff:8e:fc:0f:f0:46:9c:e2:1d:55:c6:74:c2:18:2e:5e:fe:
71:e2:1b:6d:fa:91:3b:aa:f8:79:d6:57:05:62:65:9b:10:59:
58:fe:b7:e7:44:34:29:0e:71:39:19:af:84:35:5e:76:cf:bd:
e8:75:94:11:71:ca:59:e8:cc:41:be:1b:8e:d2:c6:f4:01:1e:
07:24:c0:bd:0f:56:6b:12:59:4b:05:30:14:24:4b:26:93:cc:
96:10:e4:e5:1c:0d:94:9f:bb:d7:1a:1f:5b:31:43:95:49:12:
e2:9b:8e:5d:2f:19:ff:f3:6e:6b:c5:64:b4:fa:b9:96:11:ee:
a5:a5:0a:cc:aa:89:41:d3:8a:61:d4:85:09:10:8b:e9:a5:18:
81:2a:f4:7e:21:c9:86:7c:b4:aa:82:f5:4f:67:92:da:54:f7:
32:76:9b:c6:0f:28:ed:a0:23:89:b7:94:a2:7b:0e:24:cc:85:
f4:06:e1:f6:39:6f:e0:2f:ca:10:ee:9b:e4:18:c2:1e:83:7b:
1c:9a:a0:85:40:2e:77:4f:88:7c:b2:1c:ac:a2:b9:9d:56:f8:
0b:ad:34:41
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMJrfb6eu5pA3tf/gTPT4u5jr48MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMxMDVaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGU2ZDBmMjJiMTlkYzRiYWY5YzdmMTE1MzdhZjRhMmI2MWI5ZGRiYjhlMTg0
ZTZiNGE5ZjI3YTE1NDc3MTA0ZWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8X8S+pUnWH7mdz/yaJDJ8fXZNiNHUeTEvqaZywzbzXE0qWMHBf8WMyb14g
kx9u6UpvFyLtRTwtPwsayh4SrEtN6LJPLTSn4v4WTL7nobTYlJtPUc9zKVdvplvM
YYGkRhYBOI8KYWlZLddCVdfkj/p8ZKR8xQdTmO0+3TEaINA9lKt9w6mk1kkvkFNV
YE3vCxxkqFnvIdbsz23pQkJeUG7h2MyL1o2RwspfXbvqgCc7c78YOgQu7/GqMkiE
whnyQqMab9DjJHHhwQpHNC/ri1XAZz2UEgupOoQDSfOjkYVrlEgdsJVr/5k1WIol
oNjgROt0fYWj75wUnwuknUuFS/0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT1bM+k
cnYVCG8X+PHFD622mvQPUTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQ2ODI4ZDQtOWY0My00NGMyLWJmZjgtYWFmZWRkY2E0ZTI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADg
QDANBgkqhkiG9w0BAQsFAAOCAQEAY0QXhR+4+zy8bhYGOF4hQREVamYaJsbpnHlX
H2JJs+TFlsN8kv+O/A/wRpziHVXGdMIYLl7+ceIbbfqRO6r4edZXBWJlmxBZWP63
50Q0KQ5xORmvhDVeds+96HWUEXHKWejMQb4bjtLG9AEeByTAvQ9WaxJZSwUwFCRL
JpPMlhDk5RwNlJ+71xofWzFDlUkS4puOXS8Z//Nua8VktPq5lhHupaUKzKqJQdOK
YdSFCRCL6aUYgSr0fiHJhny0qoL1T2eS2lT3Mnabxg8o7aAjibeUonsOJMyF9Abh
9jlv4C/KEO6b5BjCHoN7HJqghUAud0+IfLIcrKK5nVb4C600QQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:11 2026 by rpki-client