Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/809bad48-7fcf-4c3f-ba02-08289ae445d4.roa
File: 809bad48-7fcf-4c3f-ba02-08289ae445d4.roa (raw, json)
Hash identifier: 5hSaofwBwcrdx5Fo6/VgiJncQlYyWb5xAq7E186K67Y=
Subject key identifier: 37:20:DC:56:8B:B7:F8:F3:04:12:14:F5:FD:62:38:35:58:33:B5:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08B3389E3E26855EEBAF17C69EEE435127540B32
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/809bad48-7fcf-4c3f-ba02-08289ae445d4.roa
Signing time: Wed 19 Aug 2026 01:00:43 +0000
ROA not before: Wed 19 Aug 2026 01:00:43 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b3:38:9e:3e:26:85:5e:eb:af:17:c6:9e:ee:43:51:27:54:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:43 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=ed4eeed59491c34358a9008abe571587569e874c31b91ce7ff71800e740daa3b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:73:05:ef:db:03:0d:e1:83:87:fe:6a:d8:
29:e6:65:91:6d:e4:27:b1:6b:aa:95:fb:d7:c2:b7:
6c:1b:e8:11:9f:19:fc:66:ed:29:48:47:9c:1b:55:
a6:0f:ef:b1:52:1c:28:43:98:38:d2:2e:f5:6b:ef:
d0:97:00:4d:7b:f2:9a:0d:40:45:b1:0f:e1:5f:c9:
ed:8e:51:8e:d3:a2:15:07:e7:cd:05:64:c9:8b:e0:
75:64:5d:be:d1:73:ee:22:92:03:b2:7b:70:0e:2c:
0a:2d:5d:2a:99:fa:e2:20:52:3a:27:08:ad:73:0f:
53:ed:aa:31:52:9b:8b:2e:5b:ee:2b:0d:b8:e8:af:
b9:d3:d6:78:a4:67:b6:21:b8:a3:e1:20:4b:19:c2:
a6:a3:1b:62:6c:e6:7f:05:ac:19:aa:eb:1e:c1:59:
93:05:17:61:56:5b:1a:f9:7e:82:77:fe:63:95:9d:
39:29:df:ea:38:32:cd:99:6b:63:a8:91:cb:29:2c:
14:59:eb:65:7d:0e:61:50:8e:85:14:86:be:a1:48:
36:c5:cd:ee:f2:91:f6:c8:4a:c9:2c:00:cb:19:ee:
f6:e6:ae:2d:7e:ce:95:d0:fb:23:b0:bb:dc:d3:ee:
5c:08:35:fc:67:d7:93:49:ce:d8:47:86:7e:07:fd:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:DC:56:8B:B7:F8:F3:04:12:14:F5:FD:62:38:35:58:33:B5:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/809bad48-7fcf-4c3f-ba02-08289ae445d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8020::/48
Signature Algorithm: sha256WithRSAEncryption
c9:b3:eb:82:21:ad:a4:fa:9e:fd:9c:69:d2:16:94:65:ce:49:
51:16:2b:be:d0:30:82:bd:da:35:e7:d8:32:74:5f:51:53:f8:
71:b1:26:f7:c4:06:79:b7:c8:72:67:3f:bf:78:5c:a9:01:c3:
df:92:f7:84:75:3b:d0:1a:82:2d:ce:95:35:20:0f:90:c2:9b:
13:77:d0:a4:92:e2:74:9a:d6:d0:52:10:43:b6:bd:ad:ae:be:
d8:63:d1:eb:8c:d8:fc:17:b4:1d:c6:87:b0:55:c2:52:47:fc:
5c:fc:d0:74:fe:1e:7f:67:2d:3c:d0:84:89:d8:78:a1:77:63:
bb:39:0d:59:f4:84:74:fa:da:30:50:9e:d0:21:b6:18:a2:88:
21:ec:3d:a3:f4:d8:f1:44:0a:9e:93:a7:ce:d3:06:d7:af:6a:
7e:61:43:eb:5d:2c:df:21:7c:51:0e:6f:b1:de:ac:54:2a:64:
66:7a:c6:66:d3:ff:eb:fd:8b:41:bf:cd:cc:c2:d2:40:1a:59:
4b:fb:b9:d8:ea:cf:e6:c0:e6:a6:9b:a0:35:5a:ec:e4:fd:9b:
e2:3b:bb:78:36:a3:ae:e7:a4:32:61:16:4c:a6:3d:b5:9d:a0:
00:5a:ff:9c:6e:b5:aa:23:cb:e6:44:b5:76:c7:eb:a4:cf:9a:
96:ab:e4:5e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCLM4nj4mhV7rrxfGnu5DUSdUCzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwNDNaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGVkNGVlZWQ1OTQ5MWMzNDM1OGE5MDA4YWJlNTcxNTg3NTY5ZTg3NGMzMWI5
MWNlN2ZmNzE4MDBlNzQwZGFhM2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQ3cwXv2wMN4YOH/mrYKeZlkW3kJ7FrqpX718K3bBvoEZ8Z/GbtKUhHnBtV
pg/vsVIcKEOYONIu9Wvv0JcATXvymg1ARbEP4V/J7Y5RjtOiFQfnzQVkyYvgdWRd
vtFz7iKSA7J7cA4sCi1dKpn64iBSOicIrXMPU+2qMVKbiy5b7isNuOivudPWeKRn
tiG4o+EgSxnCpqMbYmzmfwWsGarrHsFZkwUXYVZbGvl+gnf+Y5WdOSnf6jgyzZlr
Y6iRyyksFFnrZX0OYVCOhRSGvqFINsXN7vKR9shKySwAyxnu9uauLX7OldD7I7C7
3NPuXAg1/GfXk0nO2EeGfgf9qsUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ3INxW
i7f48wQSFPX9Yjg1WDO1SDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODA5YmFkNDgtN2ZjZi00YzNmLWJhMDItMDgyODlhZTQ0NWQ0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H2A
IDANBgkqhkiG9w0BAQsFAAOCAQEAybPrgiGtpPqe/Zxp0haUZc5JURYrvtAwgr3a
NefYMnRfUVP4cbEm98QGebfIcmc/v3hcqQHD35L3hHU70BqCLc6VNSAPkMKbE3fQ
pJLidJrW0FIQQ7a9ra6+2GPR64zY/Be0HcaHsFXCUkf8XPzQdP4ef2ctPNCEidh4
oXdjuzkNWfSEdPraMFCe0CG2GKKIIew9o/TY8UQKnpOnztMG169qfmFD610s3yF8
UQ5vsd6sVCpkZnrGZtP/6/2LQb/NzMLSQBpZS/u52OrP5sDmppugNVrs5P2b4ju7
eDajruekMmEWTKY9tZ2gAFr/nG61qiPL5kS1dsfrpM+alqvkXg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:55 2026 by rpki-client