Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99bc52f3-b4f5-44eb-9a53-c74da3e9713e.roa
File: 99bc52f3-b4f5-44eb-9a53-c74da3e9713e.roa (raw, json)
Hash identifier: hSEZ5IeJrVfYRJXX+A+sOHDgMwxCcT+F/ZOSy1MdLYQ=
Subject key identifier: 48:BE:6B:C4:6D:34:19:E6:FD:33:AF:71:4D:94:E3:35:99:61:27:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6440BE814CAAEFD846BE1F4302E75ECDCE12BE6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99bc52f3-b4f5-44eb-9a53-c74da3e9713e.roa
Signing time: Sat 08 Aug 2026 00:00:07 +0000
ROA not before: Sat 08 Aug 2026 00:00:07 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:40:be:81:4c:aa:ef:d8:46:be:1f:43:02:e7:5e:cd:ce:12:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:07 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=62f60da932cd86287de8a3ec7fee4fa1d6deaab2fd28eb9cafdb6ebdf7777899, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:bf:47:f9:ab:65:5c:ac:69:98:4e:40:16:
57:86:0f:a6:d2:9b:2e:e3:46:99:82:fb:7e:0d:83:
78:57:bc:ef:82:e0:21:7f:2d:d1:91:65:29:01:45:
25:24:8b:c3:54:bd:51:8f:2a:db:04:ee:e4:89:a9:
83:e2:c4:36:6e:94:e6:47:e3:b2:0b:38:df:18:a7:
e7:f0:17:0a:5b:c7:dc:76:84:1a:3f:6f:82:82:4c:
a1:22:2b:16:18:ac:a8:3e:96:5e:3d:55:8e:fa:92:
48:d7:21:35:77:e5:d1:b5:19:94:0d:cc:a4:7e:5e:
5e:37:d4:8f:f8:14:a3:42:98:ba:58:a9:85:7c:cd:
a4:1e:b7:37:e0:e5:33:38:19:14:45:88:cc:a9:59:
a3:19:09:f3:75:7e:a8:0b:99:39:43:97:7f:7c:b8:
45:ca:f5:09:ac:b0:a2:f1:bd:44:96:11:67:08:fc:
90:a1:23:f5:20:52:8c:41:db:e3:da:c8:3a:00:3e:
e3:38:1e:2d:a3:d0:d7:ec:f7:c3:ce:44:51:0d:50:
a1:1e:51:0d:b1:1c:ce:7d:b8:bf:6e:ad:93:a6:92:
5e:18:8e:5c:1a:76:db:a5:3a:ad:60:ad:bd:f6:c6:
22:1e:0e:22:a8:31:26:76:de:7a:38:91:ec:79:22:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:6B:C4:6D:34:19:E6:FD:33:AF:71:4D:94:E3:35:99:61:27:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99bc52f3-b4f5-44eb-9a53-c74da3e9713e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1000::/38
Signature Algorithm: sha256WithRSAEncryption
00:da:d8:3d:dc:5c:d1:64:0d:be:28:d9:96:43:fa:16:b6:21:
9c:47:e0:14:9a:5d:31:e8:f5:86:b5:07:9d:d4:4b:4b:f9:90:
9f:d8:fe:6c:5d:98:b9:7c:29:ad:c4:7b:82:0a:2f:d8:b4:e5:
a4:64:32:37:6c:20:34:bc:3f:09:ea:7a:6f:fd:42:56:32:05:
e2:bb:26:b8:e8:8f:6a:9e:b8:32:f4:1e:a2:e7:ee:8a:1e:f3:
da:31:07:66:25:b0:10:0a:1e:0d:14:d5:c0:5b:70:22:b8:06:
48:05:dd:7d:82:b1:e1:23:46:4d:a0:4a:98:71:63:75:cb:1c:
67:4e:6f:fe:99:b4:c1:5c:a2:6e:dc:d2:b3:c7:a8:e4:e0:2e:
22:d5:a8:33:9d:35:fd:1f:8c:44:fe:80:6d:d7:76:8e:4e:7f:
d7:d4:22:0f:2f:55:51:66:3d:23:47:3f:34:f7:de:21:38:ba:
6b:25:49:97:8b:a4:20:b0:16:d4:cd:bd:ff:a2:9a:35:4d:af:
f9:16:da:b3:32:00:8a:67:de:9b:7d:2d:3d:96:a9:0a:c3:b8:
79:16:78:27:01:bf:fa:a5:25:c3:65:52:ff:34:e9:76:2c:4d:
04:00:34:8d:cc:ef:6b:82:25:8c:15:e4:42:0d:eb:90:4f:5d:
17:b9:2a:98
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZEC+gUyq79hGvh9DAudezc4Svm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDgwMDAwMDdaFw0yNjExMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDYyZjYwZGE5MzJjZDg2Mjg3ZGU4YTNlYzdmZWU0ZmExZDZkZWFhYjJmZDI4
ZWI5Y2FmZGI2ZWJkZjc3Nzc4OTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOfVv0f5q2VcrGmYTkAWV4YPptKbLuNGmYL7fg2DeFe874LgIX8t0ZFlKQFF
JSSLw1S9UY8q2wTu5Impg+LENm6U5kfjsgs43xin5/AXClvH3HaEGj9vgoJMoSIr
FhisqD6WXj1VjvqSSNchNXfl0bUZlA3MpH5eXjfUj/gUo0KYuliphXzNpB63N+Dl
MzgZFEWIzKlZoxkJ83V+qAuZOUOXf3y4Rcr1CaywovG9RJYRZwj8kKEj9SBSjEHb
49rIOgA+4zgeLaPQ1+z3w85EUQ1QoR5RDbEczn24v26tk6aSXhiOXBp226U6rWCt
vfbGIh4OIqgxJnbeejiR7Hki4WMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRIvmvE
bTQZ5v0zr3FNlOM1mWEn2jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTliYzUyZjMtYjRmNS00NGViLTlhNTMtYzc0ZGEzZTk3MTNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAA2tg93FzRZA2+KNmWQ/oWtiGcR+AUml0x6PWG
tQed1EtL+ZCf2P5sXZi5fCmtxHuCCi/YtOWkZDI3bCA0vD8J6npv/UJWMgXiuya4
6I9qnrgy9B6i5+6KHvPaMQdmJbAQCh4NFNXAW3AiuAZIBd19grHhI0ZNoEqYcWN1
yxxnTm/+mbTBXKJu3NKzx6jk4C4i1agznTX9H4xE/oBt13aOTn/X1CIPL1VRZj0j
Rz80994hOLprJUmXi6QgsBbUzb3/opo1Ta/5FtqzMgCKZ96bfS09lqkKw7h5Fngn
Ab/6pSXDZVL/NOl2LE0EADSNzO9rgiWMFeRCDeuQT10XuSqY
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:13 2026 by rpki-client