Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cb139da-3bae-47c6-982d-c36083d71801.roa
File: 8cb139da-3bae-47c6-982d-c36083d71801.roa (raw, json)
Hash identifier: IrR/n0BeJzuWP0lKDqJ1nql302qnRbgcnAlFx8L6si4=
Subject key identifier: A0:1A:A3:53:99:31:81:96:83:A3:B2:F5:11:E5:75:13:E7:06:21:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42A8830277FBD1373D61CA9E6DBECE7A0343FE21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cb139da-3bae-47c6-982d-c36083d71801.roa
Signing time: Mon 10 Aug 2026 01:00:51 +0000
ROA not before: Mon 10 Aug 2026 01:00:51 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a8:83:02:77:fb:d1:37:3d:61:ca:9e:6d:be:ce:7a:03:43:fe:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:51 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=ed5415192efd14b847306e7f66559bd2075b200220a6a38bf1dfc3b90f9b9f56, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:fd:8c:78:ad:c8:eb:ff:57:43:d5:5f:b8:
c1:6e:d3:62:63:94:f5:d9:62:58:a2:e6:c4:07:3c:
6d:8b:c2:c5:c6:e1:07:02:ee:c6:b4:e6:a8:43:08:
41:2d:4a:03:12:8c:76:b1:71:66:d0:60:09:43:fc:
2a:97:3d:14:9a:d9:3c:53:31:16:8b:15:e8:a6:e6:
5e:fc:a7:b5:61:a9:f9:69:ad:35:85:34:83:fb:b0:
0a:4e:c8:32:99:f4:8f:d3:22:f7:30:c8:f2:6d:8f:
28:d1:3a:33:65:6b:6d:7a:c2:e6:02:83:15:49:fc:
f8:b0:a9:47:83:14:90:27:70:63:a4:a9:0a:45:59:
b5:ba:17:19:e9:a6:fa:75:e0:66:b1:59:f8:ff:cd:
44:76:5d:41:a5:a0:25:81:a6:bc:17:bc:33:11:b2:
c6:c7:2d:dd:7a:fb:e9:fc:06:83:59:a0:66:a3:9f:
f3:b1:dc:dc:7e:bf:ee:30:fb:8e:ff:9c:81:62:40:
98:fe:20:c2:b1:53:2b:05:7b:40:f1:93:31:23:b6:
70:fb:2e:ff:7d:46:63:c6:40:77:43:68:48:1d:12:
33:42:6f:f2:d8:20:7a:f0:4e:d1:05:83:4b:38:00:
81:f2:55:4e:39:f8:45:7c:88:2a:2f:20:d0:13:6f:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:A3:53:99:31:81:96:83:A3:B2:F5:11:E5:75:13:E7:06:21:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cb139da-3bae-47c6-982d-c36083d71801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9000::/40
Signature Algorithm: sha256WithRSAEncryption
90:4d:b6:ea:e3:c8:14:cf:a8:c6:6c:ba:3f:e2:18:07:cf:ae:
0e:f1:65:76:14:b7:92:93:76:f9:e5:f1:0e:43:0c:a2:31:64:
91:fb:00:85:80:78:d4:8c:92:a1:f8:e4:67:a6:c0:57:b7:a3:
9e:ba:ab:ef:ac:13:32:63:91:e2:5c:10:d8:03:aa:6c:42:64:
15:6b:d9:e5:06:62:3b:cf:36:c9:3a:09:50:c5:2c:ae:20:c3:
81:85:69:88:fa:e8:37:19:37:37:24:1a:20:f5:a6:cc:05:b4:
53:3a:82:f7:20:ac:39:74:dd:f8:95:b7:4d:c6:70:b7:96:6e:
9d:57:7f:a0:89:41:04:54:16:14:96:1a:ac:0a:3e:98:7c:df:
04:b6:22:63:a0:0e:0c:59:8d:e9:14:ca:9b:bd:09:39:b8:a5:
d1:d1:32:c5:91:a1:64:b5:77:ed:86:b4:60:64:6f:23:dd:69:
35:94:e2:26:88:11:c4:49:e8:b2:6d:55:dd:23:a2:52:0f:68:
0b:b3:54:d6:09:e3:f2:ac:92:e8:a1:54:29:e6:b6:0a:7e:ec:
df:f1:c2:c4:47:f4:1d:21:bf:88:f9:31:86:e7:3d:6b:93:be:
92:3b:81:96:34:ad:78:e0:19:c6:7a:9f:b7:1b:a7:4c:04:cb:
88:28:63:fa
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQqiDAnf70Tc9Ycqebb7OegND/iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMTAwNTFaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGVkNTQxNTE5MmVmZDE0Yjg0NzMwNmU3ZjY2NTU5YmQyMDc1YjIwMDIyMGE2
YTM4YmYxZGZjM2I5MGY5YjlmNTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvG/Yx4rcjr/1dD1V+4wW7TYmOU9dliWKLmxAc8bYvCxcbhBwLuxrTmqEMI
QS1KAxKMdrFxZtBgCUP8Kpc9FJrZPFMxFosV6KbmXvyntWGp+WmtNYU0g/uwCk7I
Mpn0j9Mi9zDI8m2PKNE6M2VrbXrC5gKDFUn8+LCpR4MUkCdwY6SpCkVZtboXGemm
+nXgZrFZ+P/NRHZdQaWgJYGmvBe8MxGyxsct3Xr76fwGg1mgZqOf87Hc3H6/7jD7
jv+cgWJAmP4gwrFTKwV7QPGTMSO2cPsu/31GY8ZAd0NoSB0SM0Jv8tggevBO0QWD
SzgAgfJVTjn4RXyIKi8g0BNv5IUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSgGqNT
mTGBloOjsvUR5XUT5wYhYTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGNiMTM5ZGEtM2JhZS00N2M2LTk4MmQtYzM2MDgzZDcxODAxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DGQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCQTbbq48gUz6jGbLo/4hgHz64O8WV2FLeSk3b5
5fEOQwyiMWSR+wCFgHjUjJKh+ORnpsBXt6OeuqvvrBMyY5HiXBDYA6psQmQVa9nl
BmI7zzbJOglQxSyuIMOBhWmI+ug3GTc3JBog9abMBbRTOoL3IKw5dN34lbdNxnC3
lm6dV3+giUEEVBYUlhqsCj6YfN8EtiJjoA4MWY3pFMqbvQk5uKXR0TLFkaFktXft
hrRgZG8j3Wk1lOImiBHESeiybVXdI6JSD2gLs1TWCePyrJLooVQp5rYKfuzf8cLE
R/QdIb+I+TGG5z1rk76SO4GWNK144BnGep+3G6dMBMuIKGP6
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:48 2026 by rpki-client