Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d51360a-5e3b-435c-9222-35aa3a38d0de.roa
File: 5d51360a-5e3b-435c-9222-35aa3a38d0de.roa (raw, json)
Hash identifier: PN/jaLKSrXVNuzI9kzptxEIIJQI0h44oyTYRiWUdflY=
Subject key identifier: D2:73:99:79:BC:5B:D0:0E:CA:47:7D:CB:FF:82:BD:7B:43:D4:05:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4865FD09218083E1D08BBD1C7C6AACAFA323B21B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d51360a-5e3b-435c-9222-35aa3a38d0de.roa
Signing time: Wed 09 Sep 2026 15:12:31 +0000
ROA not before: Wed 09 Sep 2026 15:12:31 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:4800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:65:fd:09:21:80:83:e1:d0:8b:bd:1c:7c:6a:ac:af:a3:23:b2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:31 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=c520e08e03db7732a332c912d8b34898c2c9cdf32f9155920240a328e299d072, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:a5:20:35:a2:7d:8c:47:f9:7f:38:59:a0:
3d:60:19:b8:f9:82:ff:74:cf:75:ae:e3:95:68:cf:
60:85:60:19:e1:42:e9:4a:33:7e:d7:ef:f3:ea:ba:
d6:77:e2:11:63:71:74:bf:84:77:4c:b7:d3:b3:8e:
16:31:29:a4:34:54:98:58:24:09:0a:ad:07:ae:66:
ec:f1:e0:18:60:df:f9:0e:c2:7e:1c:f0:20:50:60:
e4:0c:c9:97:98:00:da:78:e1:ed:56:1f:5c:2c:a7:
ff:2a:43:2c:76:93:dc:78:06:89:3c:ae:73:0d:10:
93:66:c5:9f:7b:43:bb:a2:fa:be:ca:68:a0:8f:24:
af:dc:74:22:65:9d:2c:09:6a:5f:c1:8f:2d:f8:9c:
94:06:44:71:e9:20:0d:cf:7d:29:6b:7f:23:e1:ae:
26:d8:fd:98:57:72:c8:12:f4:10:bf:92:3d:ea:52:
c2:f0:07:cb:7b:5a:db:1e:1d:79:c6:6a:c0:00:c1:
41:41:37:81:21:b0:f6:46:90:68:e7:c3:f7:a4:ac:
00:89:2b:32:dd:29:21:a3:de:2c:52:47:d1:b5:c9:
34:7e:62:cf:e5:15:8c:f4:15:cf:9c:a3:00:8b:4d:
c3:dd:d4:25:8f:96:6c:43:a7:12:36:f5:ac:06:6f:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:99:79:BC:5B:D0:0E:CA:47:7D:CB:FF:82:BD:7B:43:D4:05:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d51360a-5e3b-435c-9222-35aa3a38d0de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:4800::/48
Signature Algorithm: sha256WithRSAEncryption
94:78:5e:a9:3e:00:be:c7:e4:ed:05:8e:86:b2:03:a4:c4:27:
2f:7c:16:44:b8:af:9f:4b:24:0e:92:78:72:16:f1:f9:06:0c:
ba:9f:4b:7b:6b:70:13:20:c2:b8:8d:0c:04:e6:46:c4:fa:a5:
75:f8:88:eb:42:8e:b1:2c:dc:b0:ef:d6:b4:41:72:18:5d:92:
45:b8:1b:42:97:3b:83:5a:6f:24:8c:a7:51:54:70:24:e3:f8:
26:3d:d2:43:eb:45:64:b8:1f:e1:8f:ad:0e:c2:37:40:f4:38:
14:fa:35:c6:b0:19:06:da:73:a6:e9:5f:a5:cb:ac:5b:12:b1:
ff:9b:39:d7:37:f2:a8:96:44:7b:ff:b1:55:cf:97:87:05:d8:
9c:05:7d:77:0a:55:d8:eb:d6:89:c8:f4:92:72:a9:a0:62:87:
b5:b3:f3:c6:da:cb:08:bf:16:40:da:cb:47:a1:af:53:12:e7:
a8:17:8f:e2:0b:44:19:76:89:7e:04:e9:e6:b3:23:5b:44:e0:
0b:76:71:ca:ce:3f:89:f4:76:aa:94:73:02:e0:70:1f:2b:72:
1a:75:d2:94:e8:a0:1f:a6:5d:54:6f:e7:e5:b7:66:c6:f0:ab:
48:82:2d:ca:53:6c:5d:1c:3c:46:55:e2:c7:ab:06:30:df:f3:
2d:2c:21:63
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSGX9CSGAg+HQi70cfGqsr6MjshswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNTEyMzFaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGM1MjBlMDhlMDNkYjc3MzJhMzMyYzkxMmQ4YjM0ODk4YzJjOWNkZjMyZjkx
NTU5MjAyNDBhMzI4ZTI5OWQwNzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKD7pSA1on2MR/l/OFmgPWAZuPmC/3TPda7jlWjPYIVgGeFC6Uozftfv8+q6
1nfiEWNxdL+Ed0y307OOFjEppDRUmFgkCQqtB65m7PHgGGDf+Q7CfhzwIFBg5AzJ
l5gA2njh7VYfXCyn/ypDLHaT3HgGiTyucw0Qk2bFn3tDu6L6vspooI8kr9x0ImWd
LAlqX8GPLficlAZEcekgDc99KWt/I+GuJtj9mFdyyBL0EL+SPepSwvAHy3ta2x4d
ecZqwADBQUE3gSGw9kaQaOfD96SsAIkrMt0pIaPeLFJH0bXJNH5iz+UVjPQVz5yj
AItNw93UJY+WbEOnEjb1rAZvNScCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTSc5l5
vFvQDspHfcv/gr17Q9QFXTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWQ1MTM2MGEtNWUzYi00MzVjLTkyMjItMzVhYTNhMzhkMGRlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GxI
ADANBgkqhkiG9w0BAQsFAAOCAQEAlHheqT4Avsfk7QWOhrIDpMQnL3wWRLivn0sk
DpJ4chbx+QYMup9Le2twEyDCuI0MBOZGxPqldfiI60KOsSzcsO/WtEFyGF2SRbgb
Qpc7g1pvJIynUVRwJOP4Jj3SQ+tFZLgf4Y+tDsI3QPQ4FPo1xrAZBtpzpulfpcus
WxKx/5s51zfyqJZEe/+xVc+XhwXYnAV9dwpV2OvWicj0knKpoGKHtbPzxtrLCL8W
QNrLR6GvUxLnqBeP4gtEGXaJfgTp5rMjW0TgC3Zxys4/ifR2qpRzAuBwHytyGnXS
lOigH6ZdVG/n5bdmxvCrSIItylNsXRw8RlXix6sGMN/zLSwhYw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:23 2026 by rpki-client