Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
File: 78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa (raw, json)
Hash identifier: n7sYryB8oge6HaMhZswV/fipRSqAfj6TULtuGtHAm1c=
Subject key identifier: A2:2F:98:D0:AE:E3:56:23:80:ED:15:BA:33:68:7C:E1:F1:49:67:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4034FC04D959763BBC421D0BCAE620FF5BEC8A94
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
Signing time: Thu 30 Jul 2026 01:40:04 +0000
ROA not before: Thu 30 Jul 2026 01:40:04 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:34:fc:04:d9:59:76:3b:bc:42:1d:0b:ca:e6:20:ff:5b:ec:8a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:04 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=9269dcab2677df7f100b67fa9b68c06d2b40ab2fa66cf2dc0e63cb48d0d424c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:51:99:c2:90:a0:e4:51:94:7c:fa:8d:e4:
36:d4:be:ba:f3:a2:9f:55:1c:22:a3:bb:b8:18:b1:
8a:88:8e:04:49:72:d8:69:2d:54:ec:80:85:c6:bc:
2f:0d:36:bd:78:de:29:2c:63:d1:0a:2f:24:9f:45:
af:87:64:42:76:23:e1:4a:2f:08:91:3b:a8:3a:62:
0a:83:a3:a6:b7:b9:76:fd:b2:ea:b8:d4:25:31:a6:
2c:b6:83:87:39:b8:0e:64:de:01:f5:9e:87:12:b9:
0b:e9:de:b2:a6:6e:03:20:4f:85:b1:10:57:88:16:
37:b5:0f:43:a5:35:cd:0a:9e:85:0b:cf:0e:b6:40:
be:d0:0c:cd:9e:c7:9a:13:f9:b1:6e:7c:62:d5:bb:
b1:81:9f:fd:51:12:c9:f4:c8:a2:f5:1d:98:65:ad:
d8:40:5b:d5:67:fb:80:86:c3:11:c6:cf:16:a9:ce:
0c:b7:d7:ba:d3:77:9f:52:69:62:a3:88:e9:3c:dc:
c9:fc:69:71:92:f4:b7:ab:ab:d0:37:45:67:78:91:
bc:55:db:e0:58:8a:d7:62:c6:a3:ec:71:46:7d:28:
da:8f:0c:7e:d8:37:9e:2b:32:91:c8:07:6b:48:bf:
aa:f4:d5:79:7f:8f:b5:e5:37:2a:72:23:1c:09:f9:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:98:D0:AE:E3:56:23:80:ED:15:BA:33:68:7C:E1:F1:49:67:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:c000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:ed:80:bb:c9:8e:5c:fe:ef:25:68:eb:19:d5:05:7e:84:ce:
3f:3f:93:05:1f:28:04:24:5f:ef:92:ee:4e:40:38:dc:70:5d:
f2:f7:cc:76:39:53:41:78:2f:0b:8e:98:16:7e:c5:57:ad:11:
3f:7e:27:59:6d:1a:cc:d3:68:0e:3d:20:13:f2:71:9b:3f:cb:
65:89:9f:28:00:c0:a0:02:bc:c5:ba:14:96:79:54:52:95:56:
24:24:23:b4:8f:79:22:88:1c:51:2e:f8:13:c7:1c:90:d5:95:
cb:59:56:82:2e:b8:05:7b:c7:87:09:7a:dc:35:bf:0e:6d:86:
a5:2b:0e:5d:de:94:57:52:fd:fa:fd:83:3c:25:5a:51:63:7a:
94:b9:bc:55:e7:53:25:32:53:58:58:38:b3:ce:8e:c2:45:80:
e3:4c:36:ce:88:51:d0:ce:44:e3:9d:0e:49:dc:00:1f:d6:e7:
0c:63:6c:0f:5d:4f:76:93:92:a0:20:59:6c:43:0c:21:ac:ee:
11:47:10:a8:f9:10:dc:79:c5:be:c3:9e:a2:81:3b:e8:9e:19:
3c:4e:85:e6:0f:e1:f9:2e:62:82:fa:52:ce:64:0e:03:5a:5f:
b3:e9:8f:b4:6e:09:0a:67:27:f3:a3:66:d3:70:f5:95:ed:2f:
a0:f4:da:4b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQDT8BNlZdju8Qh0LyuYg/1vsipQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQwMDRaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyNjlkY2FiMjY3N2RmN2YxMDBiNjdmYTliNjhjMDZkMmI0MGFiMmZhNjZj
ZjJkYzBlNjNjYjQ4ZDBkNDI0YzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8UUZnCkKDkUZR8+o3kNtS+uvOin1UcIqO7uBixioiOBEly2GktVOyAhca8
Lw02vXjeKSxj0QovJJ9Fr4dkQnYj4UovCJE7qDpiCoOjpre5dv2y6rjUJTGmLLaD
hzm4DmTeAfWehxK5C+nesqZuAyBPhbEQV4gWN7UPQ6U1zQqehQvPDrZAvtAMzZ7H
mhP5sW58YtW7sYGf/VESyfTIovUdmGWt2EBb1Wf7gIbDEcbPFqnODLfXutN3n1Jp
YqOI6TzcyfxpcZL0t6ur0DdFZ3iRvFXb4FiK12LGo+xxRn0o2o8Mftg3nisykcgH
a0i/qvTVeX+PteU3KnIjHAn5iJcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSiL5jQ
ruNWI4DtFbozaHzh8UlnfTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzgwODVkMGEtZjFhYy00M2I3LWFjNmItYThhZmNmOTc4MmY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DDA
MA0GCSqGSIb3DQEBCwUAA4IBAQBq7YC7yY5c/u8laOsZ1QV+hM4/P5MFHygEJF/v
ku5OQDjccF3y98x2OVNBeC8LjpgWfsVXrRE/fidZbRrM02gOPSAT8nGbP8tliZ8o
AMCgArzFuhSWeVRSlVYkJCO0j3kiiBxRLvgTxxyQ1ZXLWVaCLrgFe8eHCXrcNb8O
bYalKw5d3pRXUv36/YM8JVpRY3qUubxV51MlMlNYWDizzo7CRYDjTDbOiFHQzkTj
nQ5J3AAf1ucMY2wPXU92k5KgIFlsQwwhrO4RRxCo+RDcecW+w56igTvonhk8ToXm
D+H5LmKC+lLOZA4DWl+z6Y+0bgkKZyfzo2bTcPWV7S+g9NpL
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:32 2026 by rpki-client