Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96465c6e-b018-4a78-9331-a401ed34641c.roa
File: 96465c6e-b018-4a78-9331-a401ed34641c.roa (raw, json)
Hash identifier: xbJ3K2POuMGnl0NRZuNdnXHR/kfxxS5fljA49RJb6cY=
Subject key identifier: 99:64:CB:65:5A:03:B3:61:8A:FB:C3:C1:79:F1:CD:1B:8A:3F:A2:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20A02815AE7989D9BC0F70F80FB227398E00E9F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96465c6e-b018-4a78-9331-a401ed34641c.roa
Signing time: Tue 18 Aug 2026 18:12:52 +0000
ROA not before: Tue 18 Aug 2026 18:12:52 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a0:28:15:ae:79:89:d9:bc:0f:70:f8:0f:b2:27:39:8e:00:e9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:12:52 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=ae38adf862ceb6cd01e244b6f45d98c42db8918a02699c8a17d7c139bc781956, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:d7:7f:47:2c:06:72:dd:39:ce:4d:f1:aa:
65:2b:df:4c:08:26:09:d1:6e:15:06:2e:13:78:38:
61:d9:56:cb:c2:87:4b:db:81:62:55:c5:01:4b:01:
f6:f1:41:99:aa:ce:68:04:cf:78:ea:fa:4d:86:90:
9d:d6:44:bb:cc:99:34:7d:ad:d2:6a:2b:b1:b1:3a:
bc:65:86:28:7c:c4:fc:df:97:88:f4:f9:5e:81:e6:
cb:c7:dc:68:b1:74:af:b1:36:34:a7:e4:97:0d:0d:
80:00:a4:95:bc:39:d4:e5:b4:d8:77:7a:22:84:c7:
66:d0:3b:a2:ca:cb:31:15:12:ea:47:57:ae:07:a1:
71:b1:b8:51:c3:f8:e0:c6:9d:90:99:d2:1b:39:97:
25:7d:9e:c5:46:08:19:43:86:ff:83:74:9b:7b:86:
77:38:01:f3:36:9d:03:eb:6a:51:05:e2:03:60:f5:
59:ce:f8:24:61:f9:d1:cd:02:76:41:cb:80:eb:a1:
15:70:f3:4e:83:bd:b5:41:4d:6e:ae:e0:41:89:06:
1e:c2:9a:29:22:e2:ac:35:d0:07:65:a6:02:80:88:
2f:60:fa:53:a3:3e:31:4e:30:9c:04:c8:35:42:cf:
b1:90:b8:7e:e3:22:df:28:c6:bc:a4:16:4a:c0:8b:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:CB:65:5A:03:B3:61:8A:FB:C3:C1:79:F1:CD:1B:8A:3F:A2:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96465c6e-b018-4a78-9331-a401ed34641c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:83:91:31:37:96:34:15:2d:2e:17:09:12:13:e6:8b:1d:79:
4d:5d:00:b0:b1:c3:93:7e:58:f0:e9:07:54:15:55:52:e3:05:
62:74:18:f1:11:17:ce:0c:2f:45:29:30:aa:2d:58:4f:8c:a9:
ab:f6:0f:ba:1f:09:0f:b0:7c:aa:5b:15:ee:89:7e:e2:54:b7:
ee:d7:27:09:1d:2a:8c:7f:9b:5e:81:f1:03:81:10:ab:a0:d4:
ea:97:82:22:e9:f5:30:32:dc:31:5a:57:c6:46:e6:8a:bc:ac:
1a:aa:9b:ec:e9:6d:65:2d:52:26:02:04:7d:96:91:50:43:ec:
d8:0a:a5:1f:0a:fa:59:03:d0:08:6e:03:8d:79:e3:f4:a9:72:
fb:fc:79:66:62:65:ec:60:7c:74:d9:42:b2:37:25:d2:25:b9:
56:61:78:45:5c:e4:a6:27:ec:d1:0f:7f:d7:09:2c:09:df:b3:
ee:f1:9a:3b:b0:fd:7e:7b:fe:14:b9:5c:4c:56:5b:01:03:69:
8c:dc:3f:c7:77:10:8b:be:e1:9a:f8:d2:98:ad:b8:36:d7:34:
26:ea:3a:26:12:7e:25:a7:85:02:59:fe:9d:3a:d3:28:07:13:
e7:0a:ab:2b:8d:3e:96:d2:93:ea:18:e5:52:36:0c:bb:5b:f7:
64:e9:b2:46
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIKAoFa55idm8D3D4D7InOY4A6fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTgxODEyNTJaFw0yNjExMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGFlMzhhZGY4NjJjZWI2Y2QwMWUyNDRiNmY0NWQ5OGM0MmRiODkxOGEwMjY5
OWM4YTE3ZDdjMTM5YmM3ODE5NTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4z139HLAZy3TnOTfGqZSvfTAgmCdFuFQYuE3g4YdlWy8KHS9uBYlXFAUsB
9vFBmarOaATPeOr6TYaQndZEu8yZNH2t0morsbE6vGWGKHzE/N+XiPT5XoHmy8fc
aLF0r7E2NKfklw0NgACklbw51OW02Hd6IoTHZtA7osrLMRUS6kdXrgehcbG4UcP4
4MadkJnSGzmXJX2exUYIGUOG/4N0m3uGdzgB8zadA+tqUQXiA2D1Wc74JGH50c0C
dkHLgOuhFXDzToO9tUFNbq7gQYkGHsKaKSLirDXQB2WmAoCIL2D6U6M+MU4wnATI
NULPsZC4fuMi3yjGvKQWSsCL/akCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSZZMtl
WgOzYYr7w8F58c0bij+iBzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTY0NjVjNmUtYjAxOC00YTc4LTkzMzEtYTQwMWVkMzQ2NDFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DMQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC8g5ExN5Y0FS0uFwkSE+aLHXlNXQCwscOTfljw
6QdUFVVS4wVidBjxERfODC9FKTCqLVhPjKmr9g+6HwkPsHyqWxXuiX7iVLfu1ycJ
HSqMf5tegfEDgRCroNTql4Ii6fUwMtwxWlfGRuaKvKwaqpvs6W1lLVImAgR9lpFQ
Q+zYCqUfCvpZA9AIbgONeeP0qXL7/HlmYmXsYHx02UKyNyXSJblWYXhFXOSmJ+zR
D3/XCSwJ37Pu8Zo7sP1+e/4UuVxMVlsBA2mM3D/HdxCLvuGa+NKYrbg21zQm6jom
En4lp4UCWf6dOtMoBxPnCqsrjT6W0pPqGOVSNgy7W/dk6bJG
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:28 2026 by rpki-client