Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
File: 68ece0e7-075e-4bcd-873e-0c74882a8546.roa (raw, json)
Hash identifier: if6Bf9wTTaQIHYB7xWHiMcIwitbw+Bu8OnYn2MdWpow=
Subject key identifier: 9F:E6:30:99:55:F9:F4:A2:56:13:1E:05:39:FD:54:D7:F6:C4:5E:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ED67534556B86EB1C1A9C84C68F102D493D6476
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
Signing time: Fri 07 Aug 2026 05:30:31 +0000
ROA not before: Fri 07 Aug 2026 05:30:31 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d6:75:34:55:6b:86:eb:1c:1a:9c:84:c6:8f:10:2d:49:3d:64:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:31 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f0b99a4918f7e27db81b933978bd7307cc26238294746b14cfedbbb81e2d429a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:ff:86:53:32:37:46:15:05:eb:dc:f8:b4:
e3:51:a7:b1:62:0e:79:07:63:85:f5:2e:0a:b2:54:
1b:da:b2:c9:a1:fe:7b:2c:31:fb:52:f3:61:05:87:
40:81:fa:ef:06:06:96:8d:a9:67:f2:75:d5:0a:4d:
72:28:b2:ee:0a:34:74:91:06:fd:43:cb:9e:3b:a1:
bb:28:62:2a:d6:76:64:8d:4a:1b:f0:63:b3:79:55:
c1:62:28:e9:f7:c7:dc:38:b2:65:6c:4a:05:18:bb:
a5:b4:d7:1f:21:0d:fa:40:02:39:78:71:ac:62:df:
6d:e4:60:35:52:b4:29:6c:4a:6a:7f:86:fc:49:67:
f4:e1:bd:29:a2:e9:1b:1a:d8:e3:cb:88:9e:f5:40:
e7:c1:62:f6:18:3d:6b:8f:63:91:f4:e7:7d:62:2b:
5a:d1:7d:cb:ae:01:5c:6f:9c:22:f8:72:7f:77:81:
bd:08:3b:b7:16:ae:ad:ca:92:87:81:66:13:c1:69:
1b:4e:b9:f9:69:92:55:a1:7c:d3:27:c7:02:63:f7:
ab:11:4b:73:83:b5:b6:9b:e6:b2:6c:6a:2a:f5:d0:
01:7f:e8:71:a1:6c:69:db:fc:9b:e4:45:32:84:ae:
29:05:9f:0d:cf:1a:7f:0d:59:ad:89:1d:dc:36:09:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E6:30:99:55:F9:F4:A2:56:13:1E:05:39:FD:54:D7:F6:C4:5E:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8080::/48
Signature Algorithm: sha256WithRSAEncryption
40:0e:38:8a:1b:6b:f9:1d:3d:01:3e:a3:9b:95:f9:d4:12:58:
64:66:31:3b:e5:e4:60:e6:7f:35:e8:85:0a:21:c5:1b:bf:5c:
eb:3f:8b:28:9c:1e:ef:7a:c1:8c:63:14:79:9e:ba:90:ed:41:
6e:74:f5:74:dc:16:1f:b6:f8:03:22:a1:91:31:1c:a8:49:8e:
7d:86:d2:d3:3c:6c:93:50:82:d8:8d:30:3d:77:fb:2d:f4:1c:
41:33:95:c5:5f:01:e7:e9:16:dd:d5:2c:ec:68:f6:29:6f:a6:
44:3b:d9:ff:65:db:43:da:e2:bc:27:ba:82:f3:52:86:29:14:
52:f0:65:80:79:d7:b1:2a:d1:66:14:83:d0:fb:bf:13:3d:be:
fb:f2:b9:ed:0e:7e:b5:2b:2b:1b:f9:d5:33:3f:2a:64:13:64:
c9:70:6d:ea:63:42:1f:ff:8e:9a:d5:51:4d:1d:07:1d:b2:55:
34:87:02:7e:24:d1:e4:9a:13:c0:b8:c2:d2:b9:9b:96:7d:e0:
14:71:4a:ce:06:c4:fb:bc:61:83:78:1d:33:7d:a0:e1:f9:19:
0d:a7:68:82:4e:21:42:cc:14:87:de:47:1e:de:46:d8:41:9e:
26:44:67:c9:0e:fc:b8:e6:73:8a:77:5f:26:73:d5:02:8f:ac:
c3:ea:ef:f4
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUXtZ1NFVrhuscGpyExo8QLUk9ZHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMzFaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwYjk5YTQ5MThmN2UyN2RiODFiOTMzOTc4YmQ3MzA3Y2MyNjIzODI5NDc0
NmIxNGNmZWRiYmI4MWUyZDQyOWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4k/4ZTMjdGFQXr3Pi041GnsWIOeQdjhfUuCrJUG9qyyaH+eywx+1LzYQWH
QIH67wYGlo2pZ/J11QpNciiy7go0dJEG/UPLnjuhuyhiKtZ2ZI1KG/Bjs3lVwWIo
6ffH3DiyZWxKBRi7pbTXHyEN+kACOXhxrGLfbeRgNVK0KWxKan+G/Eln9OG9KaLp
GxrY48uInvVA58Fi9hg9a49jkfTnfWIrWtF9y64BXG+cIvhyf3eBvQg7txaurcqS
h4FmE8FpG065+WmSVaF80yfHAmP3qxFLc4O1tpvmsmxqKvXQAX/ocaFsadv8m+RF
MoSuKQWfDc8afw1ZrYkd3DYJ+08CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSf5jCZ
Vfn0olYTHgU5/VTX9sRejzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjhlY2UwZTctMDc1ZS00YmNkLTg3M2UtMGM3NDg4MmE4NTQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A
gDANBgkqhkiG9w0BAQsFAAOCAQEAQA44ihtr+R09AT6jm5X51BJYZGYxO+XkYOZ/
NeiFCiHFG79c6z+LKJwe73rBjGMUeZ66kO1BbnT1dNwWH7b4AyKhkTEcqEmOfYbS
0zxsk1CC2I0wPXf7LfQcQTOVxV8B5+kW3dUs7Gj2KW+mRDvZ/2XbQ9rivCe6gvNS
hikUUvBlgHnXsSrRZhSD0Pu/Ez2++/K57Q5+tSsrG/nVMz8qZBNkyXBt6mNCH/+O
mtVRTR0HHbJVNIcCfiTR5JoTwLjC0rmbln3gFHFKzgbE+7xhg3gdM32g4fkZDado
gk4hQswUh95HHt5G2EGeJkRnyQ78uOZzindfJnPVAo+sw+rv9A==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:38 2026 by rpki-client