Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier: 7Fyb/ZW46Wpd4VS9MkMApxiiVrH3MdL//lSlEebKpPU=
Subject key identifier: 17:A1:61:D6:2A:56:0C:36:8F:9C:6D:85:C0:57:46:5D:5A:11:EC:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FB15AD90D3648FD6BA89A399A6F6120FE317151
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time: Sat 08 Aug 2026 00:00:06 +0000
ROA not before: Sat 08 Aug 2026 00:00:06 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b1:5a:d9:0d:36:48:fd:6b:a8:9a:39:9a:6f:61:20:fe:31:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:06 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=7e602004d5e629268e1f9c39952b5fa738292746f08c8a308243f2dfc6105450, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:26:32:fc:3d:e3:93:92:a5:fd:c9:66:2c:
66:d8:bb:a0:1a:97:c1:c6:52:68:e8:1e:2d:65:f4:
32:ce:9e:53:b7:0d:22:ab:49:24:ed:a6:4c:fe:8b:
f1:72:fe:12:4b:a3:77:47:7f:a5:71:80:e2:c2:56:
56:88:21:d1:53:0e:bb:5d:ac:97:78:00:4d:6c:d7:
be:c1:0b:3c:81:ac:c7:56:81:e8:41:80:48:a1:96:
08:dc:46:f6:a1:c8:2f:7f:9f:d6:12:bc:a3:38:7e:
9f:d0:ca:68:a8:32:3b:43:e0:6b:da:96:a0:85:a0:
2a:17:f7:5d:75:0a:57:6e:33:dd:07:ce:c4:65:e3:
13:9b:01:57:fb:3b:59:77:0e:fb:f9:90:89:a8:f2:
f2:d7:4b:d8:30:5d:93:0b:8a:bb:f3:1f:89:97:57:
75:bc:17:6d:02:32:a5:b7:67:11:a8:55:c9:35:12:
c5:4b:b1:85:17:5d:f4:cc:5f:5a:81:b8:2f:40:42:
6b:75:a5:3c:7b:dc:61:35:30:40:ef:36:ff:e3:31:
d2:e2:a3:49:99:51:f0:2a:a0:1c:21:20:a8:44:79:
de:ae:01:af:9a:ff:7a:54:34:9e:88:f5:ff:2c:5f:
63:a9:b9:b6:db:16:a4:2b:50:dd:88:cb:34:5b:46:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:61:D6:2A:56:0C:36:8F:9C:6D:85:C0:57:46:5D:5A:11:EC:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:10:ed:63:a4:1e:65:4f:bd:38:0c:2a:98:e8:1c:2f:79:c2:
59:35:cc:c7:ed:6d:8c:6f:70:5b:f5:86:e1:8f:a7:3c:d2:92:
66:d4:79:2e:dc:f7:42:18:96:f8:68:80:7e:43:81:ad:86:15:
5b:b9:cc:f5:3f:fb:f1:80:06:f0:9f:fc:e6:94:d9:ec:2e:bc:
8d:23:c3:45:da:c9:fb:73:4e:da:2e:57:92:58:dc:fd:d8:fc:
a3:e5:d8:c1:73:94:e5:6c:58:44:41:19:6c:f5:86:5a:16:74:
0d:ce:4d:38:de:fd:73:f8:4c:ef:50:5a:19:e2:68:30:b6:fe:
34:23:b9:0f:db:8f:82:ac:a5:25:39:7e:0a:04:b2:55:ae:44:
dc:d4:4c:65:76:c4:52:e5:e9:34:c0:12:a9:20:c8:15:d4:07:
e4:9c:e7:b7:b8:9c:f0:6c:77:a8:47:80:28:99:3c:1f:c3:b2:
25:49:2e:d5:fb:b4:ae:fd:91:9a:76:ca:b6:4a:6d:69:3d:44:
e7:c0:cf:6b:81:f5:c6:f3:93:55:fe:ba:14:84:01:cf:05:c4:
d4:08:c9:cc:85:cd:57:39:6c:de:42:ba:ed:81:0a:54:1d:e0:
4a:89:cd:f2:bf:72:a6:df:8f:71:48:a9:d6:64:bb:76:47:9e:
11:53:13:f9
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUD7Fa2Q02SP1rqJo5mm9hIP4xcVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDgwMDAwMDZaFw0yNjExMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDdlNjAyMDA0ZDVlNjI5MjY4ZTFmOWMzOTk1MmI1ZmE3MzgyOTI3NDZmMDhj
OGEzMDgyNDNmMmRmYzYxMDU0NTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK63JjL8PeOTkqX9yWYsZti7oBqXwcZSaOgeLWX0Ms6eU7cNIqtJJO2mTP6L
8XL+Ekujd0d/pXGA4sJWVogh0VMOu12sl3gATWzXvsELPIGsx1aB6EGASKGWCNxG
9qHIL3+f1hK8ozh+n9DKaKgyO0Pga9qWoIWgKhf3XXUKV24z3QfOxGXjE5sBV/s7
WXcO+/mQiajy8tdL2DBdkwuKu/MfiZdXdbwXbQIypbdnEahVyTUSxUuxhRdd9Mxf
WoG4L0BCa3WlPHvcYTUwQO82/+Mx0uKjSZlR8CqgHCEgqER53q4Br5r/elQ0noj1
/yxfY6m5ttsWpCtQ3YjLNFtGcHMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQXoWHW
KlYMNo+cbYXAV0ZdWhHs2zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWVlMGE0OGItYmE4OC00NjVlLTllNDItZDA3MzIzNTFmNDZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBE99cDAN
BgkqhkiG9w0BAQsFAAOCAQEAehDtY6QeZU+9OAwqmOgcL3nCWTXMx+1tjG9wW/WG
4Y+nPNKSZtR5Ltz3QhiW+GiAfkOBrYYVW7nM9T/78YAG8J/85pTZ7C68jSPDRdrJ
+3NO2i5Xkljc/dj8o+XYwXOU5WxYREEZbPWGWhZ0Dc5NON79c/hM71BaGeJoMLb+
NCO5D9uPgqylJTl+CgSyVa5E3NRMZXbEUuXpNMASqSDIFdQH5Jznt7ic8Gx3qEeA
KJk8H8OyJUku1fu0rv2RmnbKtkptaT1E58DPa4H1xvOTVf66FIQBzwXE1AjJzIXN
Vzls3kK67YEKVB3gSonN8r9ypt+PcUip1mS7dkeeEVMT+Q==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:42 2026 by rpki-client