Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/734fcad0-c770-461b-9f8f-6d059fbc03ee.roa
File: 734fcad0-c770-461b-9f8f-6d059fbc03ee.roa (raw, json)
Hash identifier: G7dnW8MBEXsLhhWAoVlLvGqOb3ZJYHUGpSQq6+/P/IA=
Subject key identifier: F2:CF:9F:FD:3B:1F:DB:50:4A:48:46:51:83:3C:E8:C6:9C:91:6E:49
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E17A4B0CFC71EDA3AD4D9DA4DF1CE10D95BD9D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/734fcad0-c770-461b-9f8f-6d059fbc03ee.roa
Signing time: Wed 19 Aug 2026 01:10:05 +0000
ROA not before: Wed 19 Aug 2026 01:10:05 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:17:a4:b0:cf:c7:1e:da:3a:d4:d9:da:4d:f1:ce:10:d9:5b:d9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:05 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=be4ae9af0faccac5dfa97ca8d3834e95fd58d0784bbfef3021f29abc0518ddd7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:7a:ce:34:ed:da:7f:2a:1e:cb:0e:2c:c6:
41:58:43:ff:45:83:93:d6:11:54:c3:e6:c2:f7:23:
ed:d5:85:a9:cb:9d:ee:75:1e:8c:70:5e:c2:90:64:
d3:cd:bb:bc:08:37:06:d6:87:a5:eb:b2:a3:87:3b:
b5:ff:40:42:48:61:78:8d:53:2e:e6:33:eb:97:41:
89:66:36:06:2b:57:4e:d0:2e:72:a6:73:9f:ec:e1:
e9:aa:c2:b6:64:09:b8:cc:12:aa:f6:28:5f:a7:1c:
13:06:ce:3b:1e:8d:c3:8a:89:ce:e3:65:0c:1a:87:
f2:90:df:77:99:28:7a:c3:69:15:62:cd:09:5a:cb:
6d:32:c5:d5:4b:39:04:aa:e4:3c:b1:af:07:d8:d2:
ed:09:6b:d3:56:56:e4:16:d0:57:f6:f1:6c:55:b9:
39:93:db:2c:ab:b2:d0:08:4d:f7:06:c9:fd:b0:a5:
b5:3f:3a:eb:0d:39:e5:a2:66:2d:f9:02:00:28:9f:
6d:90:01:a2:29:c6:b1:03:af:e9:8d:f8:59:99:1c:
71:3f:3f:40:5c:f7:21:a9:bf:bf:2c:cf:0f:6d:bb:
15:ea:e7:40:d5:86:31:84:94:66:4a:19:d7:f5:5d:
21:cd:f7:5e:a0:8b:47:cd:cf:37:6d:de:84:c3:6e:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:9F:FD:3B:1F:DB:50:4A:48:46:51:83:3C:E8:C6:9C:91:6E:49
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/734fcad0-c770-461b-9f8f-6d059fbc03ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:a040::/48
Signature Algorithm: sha256WithRSAEncryption
60:4d:5f:a1:40:0a:89:43:ed:27:d2:ba:ff:c8:63:1d:85:c0:
95:1c:97:0a:1f:f9:7c:64:7a:33:f1:43:52:b6:eb:6a:d5:68:
4e:09:93:9e:36:b5:8d:cf:10:4d:24:bd:73:00:6c:b0:e1:49:
4c:f9:73:b7:de:7f:7b:20:29:99:98:97:b3:2f:35:21:0f:b1:
7c:3c:0e:7c:6e:18:bd:ce:3d:a1:da:7c:2d:ba:d2:fc:ff:0e:
bd:2b:64:96:43:e1:65:8e:15:c8:0f:8a:e9:63:8d:09:9c:2c:
d2:cc:4f:43:19:31:17:4c:42:a9:91:1c:dc:2b:38:cc:47:38:
cd:33:83:1b:b4:f0:aa:74:a0:65:36:29:0e:bc:1f:15:50:65:
3e:06:14:78:c7:89:01:38:d0:8e:66:e6:05:fe:7e:d6:c3:a7:
74:5c:e3:7e:d9:2e:fc:76:51:52:73:ad:eb:02:25:0f:cd:62:
9b:b6:bc:3a:ab:19:9f:88:bd:62:82:15:da:ac:be:b4:ea:ad:
47:10:92:52:e5:00:b3:b4:60:4b:d3:21:e5:b8:b4:a0:a1:b3:
1a:82:55:6d:a0:fa:54:1d:78:8d:bf:09:c3:63:f2:a8:ec:70:
d1:ca:d2:19:fa:9a:04:b2:84:0b:69:59:83:65:8f:43:11:58:
60:5e:e9:1c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfheksM/HHto61NnaTfHOENlb2dQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTEwMDVaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGJlNGFlOWFmMGZhY2NhYzVkZmE5N2NhOGQzODM0ZTk1ZmQ1OGQwNzg0YmJm
ZWYzMDIxZjI5YWJjMDUxOGRkZDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOEDes407dp/Kh7LDizGQVhD/0WDk9YRVMPmwvcj7dWFqcud7nUejHBewpBk
0827vAg3BtaHpeuyo4c7tf9AQkhheI1TLuYz65dBiWY2BitXTtAucqZzn+zh6arC
tmQJuMwSqvYoX6ccEwbOOx6Nw4qJzuNlDBqH8pDfd5koesNpFWLNCVrLbTLF1Us5
BKrkPLGvB9jS7Qlr01ZW5BbQV/bxbFW5OZPbLKuy0AhN9wbJ/bCltT866w055aJm
LfkCACifbZABoinGsQOv6Y34WZkccT8/QFz3Iam/vyzPD227FernQNWGMYSUZkoZ
1/VdIc33XqCLR83PN23ehMNuPh8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTyz5/9
Ox/bUEpIRlGDPOjGnJFuSTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzM0ZmNhZDAtYzc3MC00NjFiLTlmOGYtNmQwNTlmYmMwM2VlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fqg
QDANBgkqhkiG9w0BAQsFAAOCAQEAYE1foUAKiUPtJ9K6/8hjHYXAlRyXCh/5fGR6
M/FDUrbratVoTgmTnja1jc8QTSS9cwBssOFJTPlzt95/eyApmZiXsy81IQ+xfDwO
fG4Yvc49odp8LbrS/P8OvStklkPhZY4VyA+K6WONCZws0sxPQxkxF0xCqZEc3Cs4
zEc4zTODG7TwqnSgZTYpDrwfFVBlPgYUeMeJATjQjmbmBf5+1sOndFzjftku/HZR
UnOt6wIlD81im7a8OqsZn4i9YoIV2qy+tOqtRxCSUuUAs7RgS9Mh5bi0oKGzGoJV
baD6VB14jb8Jw2PyqOxw0crSGfqaBLKEC2lZg2WPQxFYYF7pHA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:27 2026 by rpki-client