Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76aba510-da97-4c2e-ad61-1ca0628deb91.roa
File: 76aba510-da97-4c2e-ad61-1ca0628deb91.roa (raw, json)
Hash identifier: CkUxnuXAx2jP8cvEZE4F6bmhW8hmBvSigRuEzwco89M=
Subject key identifier: E0:16:E1:9D:8C:54:95:29:49:02:E1:84:34:C7:F1:34:5D:AC:73:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DC5D0A43EFE7F8CB9B97CECB01AA1CF1E271153
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76aba510-da97-4c2e-ad61-1ca0628deb91.roa
Signing time: Mon 10 Aug 2026 00:50:33 +0000
ROA not before: Mon 10 Aug 2026 00:50:33 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c5:d0:a4:3e:fe:7f:8c:b9:b9:7c:ec:b0:1a:a1:cf:1e:27:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:33 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=f06ab819edbe10096ae163db2348cdfbf599305ee585200a3a98f038f7eb2695, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:3c:7f:9d:05:2f:3a:33:62:30:50:d1:c4:
a9:29:1a:62:63:51:d0:29:42:3c:85:3e:fa:94:b8:
84:12:56:46:26:d5:29:ad:37:83:50:a3:7f:63:24:
13:79:92:75:1a:32:8a:27:1d:c7:5f:e1:45:c5:0e:
f3:99:51:79:60:0a:9d:5f:5f:36:9a:94:a5:dd:6d:
8d:ec:4c:09:02:29:cd:57:93:92:99:3a:64:6e:42:
14:af:4c:cb:40:d6:04:4e:16:c4:57:52:0a:97:c0:
91:2d:46:1a:7e:9a:32:b6:0c:75:03:3b:35:b9:dd:
c0:fa:3a:26:ce:ad:09:59:14:9b:e0:f7:34:35:16:
59:97:67:14:eb:78:01:91:c7:b7:6a:c6:63:34:30:
55:36:c1:51:4a:8f:e6:ea:8c:e3:fc:ab:1f:0f:3f:
4d:49:eb:7e:76:b2:eb:cd:4d:3c:e5:ef:3d:35:d1:
6d:46:9a:90:eb:78:fd:5f:37:57:66:da:7d:26:fd:
5b:6d:ad:04:97:8c:ef:4f:ba:45:0a:d8:29:d3:a4:
81:be:c4:8e:1d:5a:4c:93:28:e9:a8:0b:90:bf:54:
4c:fb:69:12:d0:35:91:fe:7b:ad:91:7f:69:f5:d1:
32:0d:31:c7:91:f8:e7:b5:bd:94:f4:47:6d:fe:eb:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:E1:9D:8C:54:95:29:49:02:E1:84:34:C7:F1:34:5D:AC:73:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76aba510-da97-4c2e-ad61-1ca0628deb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8000::/40
Signature Algorithm: sha256WithRSAEncryption
34:12:d4:f4:90:ad:87:b6:04:e9:dc:04:ae:dc:3e:4a:32:bc:
28:4b:0b:97:83:89:3e:c4:7b:f9:9c:fb:99:4a:e2:36:2b:64:
ba:41:92:64:76:84:fd:6d:df:d6:22:92:64:a7:79:af:cb:e7:
9d:48:bd:38:26:5c:0a:6e:cb:44:d5:01:43:ca:e5:49:df:4e:
c9:56:43:60:80:74:a5:1d:ed:4b:96:0a:a3:4a:c6:0c:f9:cc:
86:d9:0b:43:19:c7:90:86:45:c5:3a:18:a5:47:f0:7b:58:5f:
59:db:15:bc:4d:c3:6d:05:5c:fb:66:a3:3f:86:7f:7a:70:f2:
e3:9e:93:61:e5:ce:4b:1b:8d:85:9b:59:ff:71:8e:fd:18:95:
a7:5a:a4:8a:41:bf:32:a0:d5:f7:f2:25:6a:1c:8e:a7:8d:7c:
d2:7e:35:7e:63:92:ca:b5:a4:3b:cc:ae:e0:0c:cd:a3:97:77:
f9:d2:62:5c:03:78:75:65:19:f3:69:70:d0:03:89:a1:bb:59:
97:ba:ce:5d:c4:0e:15:09:53:7a:10:0f:41:f4:8d:20:7c:8f:
55:13:3b:a4:b3:1d:f8:99:28:2f:bf:c0:a8:db:f3:1a:5f:a3:
dd:6c:e1:6c:61:d0:76:69:06:fc:41:8f:c6:46:b4:a4:79:91:
4b:df:9a:a5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXcXQpD7+f4y5uXzssBqhzx4nEVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMDUwMzNaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwNmFiODE5ZWRiZTEwMDk2YWUxNjNkYjIzNDhjZGZiZjU5OTMwNWVlNTg1
MjAwYTNhOThmMDM4ZjdlYjI2OTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLRPH+dBS86M2IwUNHEqSkaYmNR0ClCPIU++pS4hBJWRibVKa03g1Cjf2Mk
E3mSdRoyiicdx1/hRcUO85lReWAKnV9fNpqUpd1tjexMCQIpzVeTkpk6ZG5CFK9M
y0DWBE4WxFdSCpfAkS1GGn6aMrYMdQM7NbndwPo6Js6tCVkUm+D3NDUWWZdnFOt4
AZHHt2rGYzQwVTbBUUqP5uqM4/yrHw8/TUnrfnay681NPOXvPTXRbUaakOt4/V83
V2bafSb9W22tBJeM70+6RQrYKdOkgb7Ejh1aTJMo6agLkL9UTPtpEtA1kf57rZF/
afXRMg0xx5H457W9lPRHbf7rElUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTgFuGd
jFSVKUkC4YQ0x/E0XaxztDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzZhYmE1MTAtZGE5Ny00YzJlLWFkNjEtMWNhMDYyOGRlYjkxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GiA
MA0GCSqGSIb3DQEBCwUAA4IBAQA0EtT0kK2HtgTp3ASu3D5KMrwoSwuXg4k+xHv5
nPuZSuI2K2S6QZJkdoT9bd/WIpJkp3mvy+edSL04JlwKbstE1QFDyuVJ307JVkNg
gHSlHe1LlgqjSsYM+cyG2QtDGceQhkXFOhilR/B7WF9Z2xW8TcNtBVz7ZqM/hn96
cPLjnpNh5c5LG42Fm1n/cY79GJWnWqSKQb8yoNX38iVqHI6njXzSfjV+Y5LKtaQ7
zK7gDM2jl3f50mJcA3h1ZRnzaXDQA4mhu1mXus5dxA4VCVN6EA9B9I0gfI9VEzuk
sx34mSgvv8Co2/MaX6PdbOFsYdB2aQb8QY/GRrSkeZFL35ql
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:55 2026 by rpki-client