Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
File: 593bb6f2-1ee0-4352-97de-e329502838f7.roa (raw, json)
Hash identifier: 7taCM0tXFxOCAmFGtovYusaK9Jm8LuitMJ9O5LK+V/U=
Subject key identifier: C2:4C:E7:CE:B5:98:50:7E:08:25:90:FA:EE:90:F2:45:D2:20:4D:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15E10B839A5BB3134883803FB3E6DF97CCE70889
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
Signing time: Wed 05 Aug 2026 02:00:07 +0000
ROA not before: Wed 05 Aug 2026 02:00:07 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e1:0b:83:9a:5b:b3:13:48:83:80:3f:b3:e6:df:97:cc:e7:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:00:07 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=9b827333840bb4ff8a19025060ebfc8d704a35a6a806658d9f2cea6dcd59138b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:8b:0e:65:40:fe:74:80:8c:69:f6:6f:bc:
f4:66:27:41:ce:e4:aa:87:ea:57:4d:3c:37:44:c0:
bd:f2:3c:4f:14:a3:d6:e6:f3:86:5b:8d:9c:a3:75:
fb:f1:09:22:bf:95:d7:75:57:8f:80:0c:e4:18:02:
02:32:6f:70:03:5c:47:64:13:bc:9c:5d:2a:3e:cd:
52:df:d1:ad:80:fa:91:e3:64:b5:75:d3:f5:79:8b:
b8:92:39:f1:78:79:91:66:61:22:2e:db:2a:09:5f:
43:28:e5:66:0a:dc:6c:d7:aa:8b:9a:e3:87:47:ba:
47:82:7c:8d:4b:e8:18:4e:95:e7:75:87:83:f7:24:
09:14:26:f7:38:8c:d7:30:d5:06:94:b7:e9:8f:39:
8f:42:c3:ce:b6:a3:9e:e7:96:26:a2:8a:da:a4:80:
d8:d9:e3:b9:4f:76:85:3b:a1:fb:0c:3a:ce:45:c6:
aa:58:af:0f:8d:fb:b4:45:16:aa:07:ee:76:7b:c8:
3f:b6:bb:ba:21:84:b2:50:62:0a:33:ea:f1:b8:76:
7c:a4:25:19:8f:6f:5f:17:45:f4:69:29:61:f2:9b:
c8:8d:7f:ba:d1:7a:f4:81:5b:8b:b2:52:e1:e5:68:
e0:d4:e1:0d:14:51:e8:35:9b:3c:16:2a:dd:f2:56:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:E7:CE:B5:98:50:7E:08:25:90:FA:EE:90:F2:45:D2:20:4D:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:800::/40
Signature Algorithm: sha256WithRSAEncryption
53:1b:13:a7:23:c2:6f:a9:3c:ee:42:84:ec:86:8d:4c:d5:96:
3c:ed:be:cb:9a:14:a4:88:65:49:30:ec:a1:f6:57:dc:30:c2:
00:b6:68:7e:67:8d:2a:da:6b:02:07:a0:f3:60:df:aa:1e:b3:
d3:d1:6a:d2:11:e5:08:60:54:30:23:3b:8c:45:0b:fd:fb:81:
54:a1:4e:15:eb:09:81:70:63:b9:27:23:59:68:7e:ab:8a:14:
db:dd:19:4e:50:d3:46:04:69:a9:f0:48:cf:25:fa:0c:0f:aa:
82:37:74:eb:27:fa:05:64:b7:c2:e8:4f:8b:c5:40:2f:8c:d9:
ca:ae:61:16:62:5a:39:04:50:27:b3:c1:0a:92:bf:49:61:63:
46:79:82:fb:ef:9f:16:d8:6f:5f:d7:d4:a4:ae:10:d9:e3:59:
8d:b8:4e:c6:ab:01:b0:01:37:f8:8b:a9:2d:69:26:55:4a:da:
8d:43:d2:0e:e2:30:ec:09:e1:dc:8c:0f:ee:11:b2:bd:70:69:
5c:c5:cf:60:46:97:00:37:2a:25:6d:f8:16:37:6e:58:c8:d5:
3e:f3:92:39:ac:ed:ea:94:4c:d5:7d:30:ab:8a:2f:43:97:ca:
8e:22:cb:a5:75:2d:8b:b9:b4:b4:e0:73:66:28:08:f8:f8:d5:
a3:15:a2:a4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFeELg5pbsxNIg4A/s+bfl8znCIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDUwMjAwMDdaFw0yNjExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDliODI3MzMzODQwYmI0ZmY4YTE5MDI1MDYwZWJmYzhkNzA0YTM1YTZhODA2
NjU4ZDlmMmNlYTZkY2Q1OTEzOGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzsiw5lQP50gIxp9m+89GYnQc7kqofqV008N0TAvfI8TxSj1ubzhluNnKN1
+/EJIr+V13VXj4AM5BgCAjJvcANcR2QTvJxdKj7NUt/RrYD6keNktXXT9XmLuJI5
8Xh5kWZhIi7bKglfQyjlZgrcbNeqi5rjh0e6R4J8jUvoGE6V53WHg/ckCRQm9ziM
1zDVBpS36Y85j0LDzrajnueWJqKK2qSA2NnjuU92hTuh+ww6zkXGqlivD437tEUW
qgfudnvIP7a7uiGEslBiCjPq8bh2fKQlGY9vXxdF9GkpYfKbyI1/utF69IFbi7JS
4eVo4NThDRRR6DWbPBYq3fJW+Z8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTCTOfO
tZhQfgglkPrukPJF0iBNkDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTkzYmI2ZjItMWVlMC00MzUyLTk3ZGUtZTMyOTUwMjgzOGY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DQI
MA0GCSqGSIb3DQEBCwUAA4IBAQBTGxOnI8JvqTzuQoTsho1M1ZY87b7LmhSkiGVJ
MOyh9lfcMMIAtmh+Z40q2msCB6DzYN+qHrPT0WrSEeUIYFQwIzuMRQv9+4FUoU4V
6wmBcGO5JyNZaH6rihTb3RlOUNNGBGmp8EjPJfoMD6qCN3TrJ/oFZLfC6E+LxUAv
jNnKrmEWYlo5BFAns8EKkr9JYWNGeYL7758W2G9f19SkrhDZ41mNuE7GqwGwATf4
i6ktaSZVStqNQ9IO4jDsCeHcjA/uEbK9cGlcxc9gRpcANyolbfgWN25YyNU+85I5
rO3qlEzVfTCrii9Dl8qOIsuldS2LubS04HNmKAj4+NWjFaKk
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:13 2026 by rpki-client