Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
File: 7dbe70b9-8807-4382-b0db-753dfbe69012.roa (raw, json)
Hash identifier: 8bIpDV8qZ7T66WcMiE1SjFRUL9yqqnZjqIiwk1siOs8=
Subject key identifier: 9F:DD:61:8B:4E:5B:E0:F1:71:AB:9D:A3:37:B0:DE:81:EF:C2:AF:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AFAE854B3E66073F2579272020FE7A53A2351F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
Signing time: Fri 07 Aug 2026 05:40:24 +0000
ROA not before: Fri 07 Aug 2026 05:40:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fa:e8:54:b3:e6:60:73:f2:57:92:72:02:0f:e7:a5:3a:23:51:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5fde583d4faf9f8a48d24abf43584abc91050d9dfb3a74f5715bf79350a1efd1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:17:3a:4e:c4:de:87:b2:83:45:b9:0e:9f:
46:88:3e:86:9e:e3:59:58:a0:82:6f:49:63:50:3c:
9c:0b:c3:a8:26:11:b7:38:f4:98:e9:00:14:53:ed:
73:ec:13:6e:48:47:d5:49:fc:a9:2c:65:60:f4:c0:
f3:70:a6:22:ce:f0:b7:db:a5:81:77:6e:68:a4:14:
2d:ed:44:9a:2a:38:0f:53:0d:f5:f0:ea:2e:a7:ef:
14:28:25:5d:cd:4d:1e:d2:aa:ba:a6:67:8f:a2:a3:
2d:14:e7:15:ac:14:05:4f:2f:e2:fb:33:89:dd:d1:
a7:b7:8c:f0:90:ef:6c:41:fb:4c:8a:28:51:e2:ac:
29:11:9a:16:78:05:be:db:44:f3:ff:f0:64:ed:7b:
b1:2e:af:2e:09:33:9f:cd:43:6e:90:57:11:b3:38:
85:64:94:7c:12:1d:4e:7d:14:3c:5e:c6:a1:08:a0:
68:7a:2f:27:8b:ee:bf:61:70:a6:10:69:51:e6:c4:
f2:c3:1d:1a:f9:af:e2:83:cc:fa:f9:88:c6:6c:4e:
69:14:43:16:b1:e5:ec:ad:a1:6f:a6:26:5e:ef:30:
6e:33:19:84:05:49:b4:10:85:c1:81:4a:ac:e2:55:
20:75:43:ce:b7:78:54:8e:c3:c0:66:b7:6c:98:ca:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DD:61:8B:4E:5B:E0:F1:71:AB:9D:A3:37:B0:DE:81:EF:C2:AF:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/37
Signature Algorithm: sha256WithRSAEncryption
c8:f9:08:47:0a:a9:b2:39:d2:60:21:47:2d:9a:3f:f2:4e:92:
2b:f2:91:fa:61:16:41:0e:3d:0c:61:73:62:6d:fa:68:6b:73:
b2:70:ad:f0:3a:cc:69:2c:e5:72:58:e0:6c:2d:a2:4c:5e:6f:
b4:ca:3a:d3:d2:27:e0:9d:25:03:25:69:93:b3:dd:42:8b:67:
1b:42:cd:f8:77:56:a1:66:59:a7:68:c5:bc:9d:d6:09:6d:e4:
ab:bd:8e:0e:d4:40:a1:59:64:b0:95:f4:40:e9:b3:50:9b:97:
86:f3:5f:e2:6f:24:cb:a1:e6:d6:66:9e:17:7f:48:62:66:e2:
cb:e1:4a:f7:eb:16:d1:bc:a7:d2:f3:ce:4d:7a:27:0c:59:f8:
a6:84:e3:a8:18:9a:ca:99:7a:f4:e9:58:dc:6b:3b:1a:3c:3d:
22:77:57:7f:2f:13:14:6a:6b:6e:6a:25:c6:ac:03:aa:c2:60:
6a:7c:6c:22:9a:60:ec:d1:4e:d2:d3:13:01:e7:ac:dc:f8:a6:
b4:a6:83:a3:22:a0:2c:5c:a7:8b:c5:cd:66:62:3e:44:97:4a:
d8:b9:f9:6c:5b:a6:ec:e2:f0:27:79:3e:17:0c:b6:6d:69:59:
2f:74:34:5a:c0:c0:53:d8:04:25:82:f3:ac:97:e0:98:93:1e:
0e:48:16:aa
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUevroVLPmYHPyV5JyAg/npTojUfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTQwMjRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDVmZGU1ODNkNGZhZjlmOGE0OGQyNGFiZjQzNTg0YWJjOTEwNTBkOWRmYjNh
NzRmNTcxNWJmNzkzNTBhMWVmZDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN00FzpOxN6HsoNFuQ6fRog+hp7jWViggm9JY1A8nAvDqCYRtzj0mOkAFFPt
c+wTbkhH1Un8qSxlYPTA83CmIs7wt9ulgXduaKQULe1Emio4D1MN9fDqLqfvFCgl
Xc1NHtKquqZnj6KjLRTnFawUBU8v4vszid3Rp7eM8JDvbEH7TIooUeKsKRGaFngF
vttE8//wZO17sS6vLgkzn81DbpBXEbM4hWSUfBIdTn0UPF7GoQigaHovJ4vuv2Fw
phBpUebE8sMdGvmv4oPM+vmIxmxOaRRDFrHl7K2hb6YmXu8wbjMZhAVJtBCFwYFK
rOJVIHVDzrd4VI7DwGa3bJjK0M0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSf3WGL
Tlvg8XGrnaM3sN6B78KvKDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2RiZTcwYjktODgwNy00MzgyLWIwZGItNzUzZGZiZTY5MDEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0BsA
MA0GCSqGSIb3DQEBCwUAA4IBAQDI+QhHCqmyOdJgIUctmj/yTpIr8pH6YRZBDj0M
YXNibfpoa3OycK3wOsxpLOVyWOBsLaJMXm+0yjrT0ifgnSUDJWmTs91Ci2cbQs34
d1ahZlmnaMW8ndYJbeSrvY4O1EChWWSwlfRA6bNQm5eG81/ibyTLoebWZp4Xf0hi
ZuLL4Ur36xbRvKfS885NeicMWfimhOOoGJrKmXr06VjcazsaPD0id1d/LxMUamtu
aiXGrAOqwmBqfGwimmDs0U7S0xMB56zc+Ka0poOjIqAsXKeLxc1mYj5El0rYufls
W6bs4vAneT4XDLZtaVkvdDRawMBT2AQlgvOsl+CYkx4OSBaq
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:49 2026 by rpki-client