Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa
File: 8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa (raw, json)
Hash identifier: gqH/c5o0fbHjFzCAOW9+7iX5xK2cwWdayrFGLxLkUow=
Subject key identifier: C3:B7:CD:48:68:48:06:C2:FD:5D:3B:E8:EE:F5:62:DB:08:CD:C8:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 590DAA7312FD2F32E239DD9B8F33193296AD7631
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa
Signing time: Mon 10 Aug 2026 00:50:31 +0000
ROA not before: Mon 10 Aug 2026 00:50:31 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0d:aa:73:12:fd:2f:32:e2:39:dd:9b:8f:33:19:32:96:ad:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:31 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=e4040d911cb85005001b1b576310a167fb986d8e740725b322ac2acc05638dd8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:47:42:67:e4:4e:57:4c:03:33:70:42:4e:
7a:1f:15:d1:37:33:11:86:8f:d2:1b:68:71:a3:9a:
3e:ea:d2:13:ba:e4:2c:fd:df:8b:5c:51:b3:89:34:
4f:72:2f:54:b3:0d:34:ec:87:41:da:cd:a6:54:cf:
0b:7f:02:c3:a4:98:7e:ab:1c:96:b1:62:16:09:fc:
97:ad:bc:89:17:d7:e7:49:f8:92:68:21:7c:ee:5e:
87:98:a2:ae:1f:f8:df:d3:2a:4c:97:d6:62:e0:36:
14:7f:bb:22:9e:2a:ea:ae:32:ef:21:cc:43:7c:22:
d8:6d:5d:42:e6:f5:67:8e:90:5f:cf:53:ac:20:92:
d9:63:da:ff:64:86:f8:bb:17:1e:5a:56:e1:03:12:
91:c5:8a:2e:dc:fe:9e:d2:1b:ca:6e:f4:f7:f4:b0:
02:04:6e:80:da:85:96:87:a2:96:2a:a1:f2:2b:3b:
9e:b9:9a:a9:e6:f9:29:ac:ab:dd:2f:f5:0a:64:7e:
ca:74:28:d3:29:67:0f:3c:a3:96:4a:64:ab:19:11:
34:b6:d7:e2:34:7c:a3:d3:86:20:99:a3:1a:d6:1f:
a5:03:3a:e4:53:18:0b:e6:a3:c8:5a:49:96:a2:22:
2a:b3:b5:2c:b7:46:0b:b2:51:32:f6:11:dd:4e:fa:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B7:CD:48:68:48:06:C2:FD:5D:3B:E8:EE:F5:62:DB:08:CD:C8:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:6080::/48
Signature Algorithm: sha256WithRSAEncryption
31:b8:2a:6b:fb:51:71:b8:d1:3b:24:51:d0:43:b0:61:b0:fd:
79:f1:e8:3a:84:64:96:d9:73:17:bd:23:7b:d9:80:f7:d9:64:
fd:4a:f3:d5:e3:eb:f1:cc:8f:c9:39:f7:51:52:03:3a:4f:18:
88:a4:94:f3:5c:58:32:b4:2d:0e:73:8b:f3:5b:8c:41:7e:37:
df:09:48:6e:16:c3:3a:d8:21:e7:99:75:e1:cf:71:7d:01:33:
72:f2:6b:51:df:ca:af:28:4f:8d:54:29:89:04:07:00:10:69:
b6:70:8b:c1:c7:5f:ec:51:44:bd:bb:9d:b7:28:f2:3f:0e:b3:
84:2b:87:68:93:3e:40:6e:7f:b4:b1:aa:7c:26:f2:ba:92:28:
d1:25:0c:87:98:ed:d0:99:3a:7d:d2:e2:cc:bc:5a:cd:40:f0:
5e:99:c0:8b:a7:93:a1:65:9c:3f:5d:8d:0e:88:5d:ea:48:f8:
63:01:47:2d:eb:db:f4:3c:dd:f1:78:3d:3c:50:1a:5b:5b:e7:
96:22:ce:1a:83:48:9e:4c:ae:51:d4:4c:09:32:fe:e2:ee:49:
32:aa:2c:a1:18:05:fc:96:4a:a8:11:d1:f9:0f:0b:5a:e4:c4:
55:f3:e7:92:87:82:f7:4b:4a:c4:af:1b:4b:b7:f1:4a:6f:d6:
09:64:c4:db
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWQ2qcxL9LzLiOd2bjzMZMpatdjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMDUwMzFaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGU0MDQwZDkxMWNiODUwMDUwMDFiMWI1NzYzMTBhMTY3ZmI5ODZkOGU3NDA3
MjViMzIyYWMyYWNjMDU2MzhkZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKssR0Jn5E5XTAMzcEJOeh8V0TczEYaP0htocaOaPurSE7rkLP3fi1xRs4k0
T3IvVLMNNOyHQdrNplTPC38Cw6SYfqsclrFiFgn8l628iRfX50n4kmghfO5eh5ii
rh/439MqTJfWYuA2FH+7Ip4q6q4y7yHMQ3wi2G1dQub1Z46QX89TrCCS2WPa/2SG
+LsXHlpW4QMSkcWKLtz+ntIbym709/SwAgRugNqFloeiliqh8is7nrmaqeb5Kayr
3S/1CmR+ynQo0ylnDzyjlkpkqxkRNLbX4jR8o9OGIJmjGtYfpQM65FMYC+ajyFpJ
lqIiKrO1LLdGC7JRMvYR3U76oKsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTDt81I
aEgGwv1dO+ju9WLbCM3IJDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGRjNGE2ZjMtYTI1Zi00Y2RmLTgzOWItYjk4ZDkzYWY5NDJkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Ghg
gDANBgkqhkiG9w0BAQsFAAOCAQEAMbgqa/tRcbjROyRR0EOwYbD9efHoOoRkltlz
F70je9mA99lk/Urz1ePr8cyPyTn3UVIDOk8YiKSU81xYMrQtDnOL81uMQX433wlI
bhbDOtgh55l14c9xfQEzcvJrUd/KryhPjVQpiQQHABBptnCLwcdf7FFEvbudtyjy
Pw6zhCuHaJM+QG5/tLGqfCbyupIo0SUMh5jt0Jk6fdLizLxazUDwXpnAi6eToWWc
P12NDohd6kj4YwFHLevb9Dzd8Xg9PFAaW1vnliLOGoNInkyuUdRMCTL+4u5JMqos
oRgF/JZKqBHR+Q8LWuTEVfPnkoeC90tKxK8bS7fxSm/WCWTE2w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:21 2026 by rpki-client