Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99ffa238-9133-4fa5-ad84-49e67d34854a.roa
File: 99ffa238-9133-4fa5-ad84-49e67d34854a.roa (raw, json)
Hash identifier: JAUHw1AP8Z9yfJKb1gt7rsQRxGGm3/HBlsIlo4/bso8=
Subject key identifier: 3A:00:B9:E5:01:30:9B:1E:DD:CA:15:5D:86:A6:FB:5D:6B:2A:35:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 279242FBE827C5B96B6D7960C91EC8ED3DDE78B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99ffa238-9133-4fa5-ad84-49e67d34854a.roa
Signing time: Fri 07 Aug 2026 04:30:40 +0000
ROA not before: Fri 07 Aug 2026 04:30:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02a::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:92:42:fb:e8:27:c5:b9:6b:6d:79:60:c9:1e:c8:ed:3d:de:78:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b27d350e36a26199b375219f895f64756e973d2aa993f9fa4fe939d97492e91d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:fa:43:74:f3:9a:39:2c:5c:15:ab:a6:be:
2c:ed:a5:fb:01:6b:13:db:c0:7d:72:07:8b:f2:38:
80:e9:d5:e2:8b:37:28:a3:81:eb:dc:f6:09:c8:74:
43:a2:21:ae:75:a8:42:2e:a4:d9:6a:25:c9:37:31:
56:05:01:e3:d4:ef:29:12:1e:64:35:84:26:bb:97:
ef:b4:42:10:96:b7:80:46:53:97:84:07:4e:63:56:
f6:8e:56:e6:3e:61:b8:76:fc:a3:e9:77:eb:02:06:
33:85:04:47:7d:e4:af:85:80:d1:19:4b:96:5e:f1:
cf:75:34:04:ea:fd:64:ce:14:12:4a:26:92:90:09:
4a:7c:a4:ef:5f:20:05:82:dd:b5:a0:ba:4a:9f:e5:
4a:84:ae:a2:d5:ed:91:83:e7:83:97:79:55:5f:26:
68:6b:78:9d:7e:28:d3:2c:e0:50:dd:d4:74:2c:bb:
4a:de:bf:b1:fa:4a:87:18:ca:c6:c8:76:cf:70:8c:
54:2e:1d:51:96:71:8c:9c:93:fe:ed:54:ef:8f:78:
c9:43:c0:4d:ce:53:ee:98:bf:8e:97:cf:a9:0f:b9:
9e:ac:7a:14:1d:e4:48:bb:60:13:02:60:9e:ed:92:
d3:90:30:22:a0:3d:8c:28:bc:8f:b0:5a:86:b7:5a:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:B9:E5:01:30:9B:1E:DD:CA:15:5D:86:A6:FB:5D:6B:2A:35:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99ffa238-9133-4fa5-ad84-49e67d34854a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02a::/36
Signature Algorithm: sha256WithRSAEncryption
4a:8b:fc:7a:84:e2:34:c1:50:d4:84:81:38:eb:8a:66:c2:2c:
1f:05:65:f6:9b:18:10:5b:33:52:0f:4b:34:67:5a:46:dd:fd:
cd:b7:33:c2:94:57:48:6a:ed:8f:8c:03:3a:8d:82:ef:c1:44:
b0:df:c0:61:ff:cd:7b:5f:3b:22:49:86:99:6f:5c:24:8a:2d:
d4:b6:81:1b:57:55:78:1c:92:38:6a:54:e0:30:2d:29:98:75:
49:a5:70:6b:76:b2:ba:72:28:1b:0d:3b:6e:d9:61:b1:03:d9:
40:14:ae:d8:fe:88:bc:13:4e:37:f8:ef:7c:1a:91:aa:31:f5:
f4:d1:04:08:ee:11:be:00:40:79:21:c0:54:5f:61:76:67:59:
ee:9f:9d:5e:78:24:21:f2:72:df:cc:dd:99:a7:2e:67:35:1c:
e5:3b:8b:c9:9e:5b:2e:33:c1:55:82:3b:a0:cc:87:b3:3a:0f:
23:a2:a5:4b:be:07:54:b9:79:2c:22:05:fd:b2:96:c8:da:43:
d1:af:47:5c:30:c7:ba:e3:01:a2:88:cd:c8:56:80:c4:2a:88:
99:4f:26:28:d8:2c:e0:8b:ff:8a:29:38:9e:65:89:b7:5b:c4:
86:07:e8:b0:27:03:e4:0f:1d:4a:b4:4b:7b:80:1f:88:65:63:
24:a7:a8:74
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJ5JC++gnxblrbXlgyR7I7T3eeLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMwNDBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyN2QzNTBlMzZhMjYxOTliMzc1MjE5Zjg5NWY2NDc1NmU5NzNkMmFhOTkz
ZjlmYTRmZTkzOWQ5NzQ5MmU5MWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANyD+kN085o5LFwVq6a+LO2l+wFrE9vAfXIHi/I4gOnV4os3KKOB69z2Cch0
Q6IhrnWoQi6k2WolyTcxVgUB49TvKRIeZDWEJruX77RCEJa3gEZTl4QHTmNW9o5W
5j5huHb8o+l36wIGM4UER33kr4WA0RlLll7xz3U0BOr9ZM4UEkomkpAJSnyk718g
BYLdtaC6Sp/lSoSuotXtkYPng5d5VV8maGt4nX4o0yzgUN3UdCy7St6/sfpKhxjK
xsh2z3CMVC4dUZZxjJyT/u1U7494yUPATc5T7pi/jpfPqQ+5nqx6FB3kSLtgEwJg
nu2S05AwIqA9jCi8j7BahrdatAUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ6ALnl
ATCbHt3KFV2Gpvtdayo1SjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTlmZmEyMzgtOTEzMy00ZmE1LWFkODQtNDllNjdkMzQ4NTRhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CoA
MA0GCSqGSIb3DQEBCwUAA4IBAQBKi/x6hOI0wVDUhIE464pmwiwfBWX2mxgQWzNS
D0s0Z1pG3f3NtzPClFdIau2PjAM6jYLvwUSw38Bh/817XzsiSYaZb1wkii3UtoEb
V1V4HJI4alTgMC0pmHVJpXBrdrK6cigbDTtu2WGxA9lAFK7Y/oi8E043+O98GpGq
MfX00QQI7hG+AEB5IcBUX2F2Z1nun51eeCQh8nLfzN2Zpy5nNRzlO4vJnlsuM8FV
gjugzIezOg8joqVLvgdUuXksIgX9spbI2kPRr0dcMMe64wGiiM3IVoDEKoiZTyYo
2Czgi/+KKTieZYm3W8SGB+iwJwPkDx1KtEt7gB+IZWMkp6h0
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:55 2026 by rpki-client