Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa
File: 94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa (raw, json)
Hash identifier: 6ANp74xTjIDZtjvJpsqRgL9SlLX9np+IPmUd55DHv2k=
Subject key identifier: A0:F9:D0:22:EE:89:16:6A:55:FD:BB:09:3E:F6:79:FC:E0:CC:3F:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27BACA7C63FB0F60C4229BEDEE2259464B7987C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa
Signing time: Tue 18 Aug 2026 18:13:01 +0000
ROA not before: Tue 18 Aug 2026 18:13:01 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ba:ca:7c:63:fb:0f:60:c4:22:9b:ed:ee:22:59:46:4b:79:87:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:13:01 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=7240e0f3b6b6a7ca9f3415fa8e97b57beb0fe80f8299eab4653aa5418cdf756e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:fd:19:2c:0b:8f:4c:85:79:f1:60:5c:72:
7f:82:e1:a0:3c:93:7d:03:63:33:7c:47:ff:ad:60:
b7:ec:e6:cf:15:e6:e6:b5:a2:40:6b:b4:75:78:bb:
fe:f6:cc:ed:32:ef:27:60:71:f8:79:85:35:c5:ab:
ae:ab:ae:29:48:fd:97:84:ce:c8:24:b3:e4:15:c8:
63:fe:d4:40:b7:07:4d:4c:75:55:ef:f2:3d:86:a1:
95:70:1a:8c:7a:83:a2:6f:e0:e5:54:41:13:0f:ea:
62:82:3b:5b:3c:b1:01:f5:eb:2a:2b:fa:fa:e2:79:
12:36:8f:53:f6:dd:a6:42:b1:58:f0:b3:20:b0:68:
9b:50:93:1b:53:48:3d:28:ef:1b:1e:9a:e0:c9:93:
eb:4c:3b:9a:95:ec:aa:54:e6:7d:33:6e:0e:f1:5a:
43:62:57:b8:6d:5a:07:8c:38:d6:77:26:06:c3:a0:
c9:0f:d3:28:b1:2f:fb:89:9a:0c:8f:92:36:eb:9f:
9c:cf:fa:63:ac:ae:fa:2c:c3:0e:db:e3:39:5a:e6:
37:92:57:fc:6d:f2:22:a6:1c:e7:96:a4:19:7e:13:
0d:f8:9b:fc:8f:10:41:bf:93:00:6f:ab:5c:35:19:
84:9b:26:f6:bb:66:eb:37:a5:2f:97:13:6e:eb:9f:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:D0:22:EE:89:16:6A:55:FD:BB:09:3E:F6:79:FC:E0:CC:3F:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:e000::/40
Signature Algorithm: sha256WithRSAEncryption
91:82:1a:cc:96:7c:33:01:9e:65:43:78:a6:5d:d3:ba:54:b0:
ba:cc:5a:85:91:b0:69:82:55:37:54:e1:37:93:69:27:dc:cd:
97:bb:4a:c7:a9:3a:df:bf:b6:0f:01:88:6f:78:91:de:6a:b7:
36:6e:8c:8e:46:97:79:69:f7:df:ad:6e:8f:ca:6a:f4:55:3b:
86:26:5e:1e:24:27:bc:4b:8b:e3:cb:d9:3e:6d:24:8a:c1:64:
6d:a0:e5:75:30:53:e6:6b:61:7a:8b:15:57:25:33:d6:9c:9b:
7e:7d:da:18:e6:52:ba:46:af:ea:99:e9:64:1b:2e:3b:22:1b:
9b:a9:e7:98:39:98:81:86:3a:8a:1c:8f:d4:94:d6:91:85:e7:
aa:26:fb:ef:39:c8:d8:22:a9:0c:6c:ab:20:e7:c9:03:cc:69:
47:e8:2f:51:e7:3a:4d:94:a7:fb:02:f5:4c:ed:bd:ae:2a:de:
7e:c0:09:c5:2c:14:ad:c8:8e:1d:32:fc:ef:5c:d2:20:03:32:
c1:21:6a:20:6d:70:41:2f:da:7c:dc:4f:4e:1c:58:bb:a6:3d:
bc:1f:3b:70:fb:18:a3:2b:2d:30:31:8a:fb:2d:47:59:9a:bb:
d7:3c:a4:56:3a:0a:4e:15:f6:23:2a:fe:90:8b:68:19:6d:2d:
49:22:f1:99
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJ7rKfGP7D2DEIpvt7iJZRkt5h8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTgxODEzMDFaFw0yNjExMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDcyNDBlMGYzYjZiNmE3Y2E5ZjM0MTVmYThlOTdiNTdiZWIwZmU4MGY4Mjk5
ZWFiNDY1M2FhNTQxOGNkZjc1NmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANLo/RksC49MhXnxYFxyf4LhoDyTfQNjM3xH/61gt+zmzxXm5rWiQGu0dXi7
/vbM7TLvJ2Bx+HmFNcWrrquuKUj9l4TOyCSz5BXIY/7UQLcHTUx1Ve/yPYahlXAa
jHqDom/g5VRBEw/qYoI7WzyxAfXrKiv6+uJ5EjaPU/bdpkKxWPCzILBom1CTG1NI
PSjvGx6a4MmT60w7mpXsqlTmfTNuDvFaQ2JXuG1aB4w41ncmBsOgyQ/TKLEv+4ma
DI+SNuufnM/6Y6yu+izDDtvjOVrmN5JX/G3yIqYc55akGX4TDfib/I8QQb+TAG+r
XDUZhJsm9rtm6zelL5cTbuufQJUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSg+dAi
7okWalX9uwk+9nn84Mw/dzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTRhZTZlZTYtODI5NC00YzUzLWIzOWMtZmZlODBkYTEzZjU0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DPg
MA0GCSqGSIb3DQEBCwUAA4IBAQCRghrMlnwzAZ5lQ3imXdO6VLC6zFqFkbBpglU3
VOE3k2kn3M2Xu0rHqTrfv7YPAYhveJHearc2boyORpd5afffrW6Pymr0VTuGJl4e
JCe8S4vjy9k+bSSKwWRtoOV1MFPma2F6ixVXJTPWnJt+fdoY5lK6Rq/qmelkGy47
IhubqeeYOZiBhjqKHI/UlNaRheeqJvvvOcjYIqkMbKsg58kDzGlH6C9R5zpNlKf7
AvVM7b2uKt5+wAnFLBStyI4dMvzvXNIgAzLBIWogbXBBL9p83E9OHFi7pj28Hztw
+xijKy0wMYr7LUdZmrvXPKRWOgpOFfYjKv6Qi2gZbS1JIvGZ
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client