Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a4f7e183-c7b2-4c9b-8432-520e8e0a898d.roa
File: a4f7e183-c7b2-4c9b-8432-520e8e0a898d.roa (raw, json)
Hash identifier: kN+Vyv8FJjElBkaV2lII0zwbKp//vIWppJD8Nkd+pMw=
Subject key identifier: D4:67:CC:D0:93:78:63:21:03:FE:DE:61:A3:6A:91:8D:0D:47:78:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31A8F259A352B887596E20F97D49E7467505A56B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a4f7e183-c7b2-4c9b-8432-520e8e0a898d.roa
Signing time: Mon 10 Aug 2026 01:00:53 +0000
ROA not before: Mon 10 Aug 2026 01:00:53 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a8:f2:59:a3:52:b8:87:59:6e:20:f9:7d:49:e7:46:75:05:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:53 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=4865f796354316146096176a7fcdbc7b78eaa918f6f5ce0a99a9bf70251800d1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a5:98:ef:d2:01:7c:b4:9d:93:24:f1:d0:70:
83:43:2d:08:2a:ba:11:1e:ae:03:f6:30:55:cc:ec:
86:f9:a1:97:0d:1d:b5:16:ba:c5:00:9e:0a:ea:6d:
43:03:fa:c1:80:f6:55:86:2c:df:97:5c:c2:bb:26:
3d:a6:2d:0d:e7:59:6e:29:6b:d5:c0:85:f9:2b:ff:
53:34:3a:66:2f:35:ba:8b:87:80:13:ea:fd:b0:e6:
f5:cf:aa:51:a5:72:d4:a1:97:a3:22:2e:9c:92:36:
c5:04:e5:75:60:8e:57:5d:cc:95:c8:23:dd:63:12:
8a:1a:1b:86:cc:bc:8e:65:c8:15:e3:66:2c:61:89:
62:f6:53:45:fb:ef:13:94:ba:7d:da:67:6b:c2:69:
c6:93:91:a9:e6:ab:ec:a3:75:d3:e2:5d:83:78:37:
59:79:5b:ce:04:e9:84:fd:0e:db:e2:6a:73:ad:e8:
a8:c5:86:20:a6:d2:09:c1:b3:0b:04:db:bb:fd:e4:
4a:9b:50:86:3a:fc:9e:e6:04:48:d4:a1:92:64:d8:
67:58:ec:74:ce:22:0f:e0:e3:df:6a:fa:50:0e:a7:
88:35:54:e6:1a:fd:85:76:0f:eb:7d:97:58:96:f2:
e6:74:38:a2:de:9b:a9:c0:59:b8:9f:a0:68:13:09:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:CC:D0:93:78:63:21:03:FE:DE:61:A3:6A:91:8D:0D:47:78:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a4f7e183-c7b2-4c9b-8432-520e8e0a898d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4020::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ef:41:94:0f:8f:aa:ec:7d:69:15:9e:82:4b:19:1f:6e:b2:
12:3f:26:f7:60:fa:0e:fa:64:a0:cb:07:ea:77:cf:aa:4e:e4:
0a:95:da:20:b8:f1:42:31:d3:be:56:6b:2a:2c:04:4b:1b:84:
85:2a:b8:94:4f:13:06:5a:c3:fe:b8:a4:0a:07:99:65:ce:69:
2f:84:5b:90:ad:d1:a0:cd:f8:72:96:6b:10:2d:80:56:8f:d1:
84:ac:fa:c4:3f:e8:86:ff:b8:e0:27:0d:f7:fb:ac:62:e2:99:
e5:3f:11:09:a3:55:05:04:d7:08:3b:16:1e:87:d7:b2:9f:90:
91:0c:89:fc:24:1d:f2:02:a2:ea:9f:ca:be:10:c6:4e:2b:5e:
6d:7a:01:7f:48:5d:be:9b:7a:f2:78:0f:82:d5:5f:c1:e9:f9:
8f:94:b3:d2:50:69:54:2b:b8:d1:1a:13:39:cb:fe:58:97:5c:
9f:68:2c:c9:2b:db:c5:66:73:b1:16:3f:c4:0d:b2:7d:c4:e3:
3c:39:1b:37:ed:1e:51:1f:e4:ec:a1:7e:a4:ed:e2:6d:e3:84:
d7:0f:9d:0b:61:ea:d9:fc:86:e5:f5:3c:98:6d:0b:62:96:39:
d5:e3:94:45:2a:d5:b2:92:34:7a:bc:8c:63:f6:13:00:9b:1f:
8a:f5:9f:bf
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMajyWaNSuIdZbiD5fUnnRnUFpWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMTAwNTNaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4NjVmNzk2MzU0MzE2MTQ2MDk2MTc2YTdmY2RiYzdiNzhlYWE5MThmNmY1
Y2UwYTk5YTliZjcwMjUxODAwZDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOulmO/SAXy0nZMk8dBwg0MtCCq6ER6uA/YwVczshvmhlw0dtRa6xQCeCupt
QwP6wYD2VYYs35dcwrsmPaYtDedZbilr1cCF+Sv/UzQ6Zi81uouHgBPq/bDm9c+q
UaVy1KGXoyIunJI2xQTldWCOV13Mlcgj3WMSihobhsy8jmXIFeNmLGGJYvZTRfvv
E5S6fdpna8JpxpORqear7KN10+Jdg3g3WXlbzgTphP0O2+Jqc63oqMWGIKbSCcGz
CwTbu/3kSptQhjr8nuYESNShkmTYZ1jsdM4iD+Dj32r6UA6niDVU5hr9hXYP632X
WJby5nQ4ot6bqcBZuJ+gaBMJwq8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTUZ8zQ
k3hjIQP+3mGjapGNDUd4kTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTRmN2UxODMtYzdiMi00YzliLTg0MzItNTIwZThlMGE4OThkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GhA
IDANBgkqhkiG9w0BAQsFAAOCAQEAb+9BlA+Pqux9aRWegksZH26yEj8m92D6Dvpk
oMsH6nfPqk7kCpXaILjxQjHTvlZrKiwESxuEhSq4lE8TBlrD/rikCgeZZc5pL4Rb
kK3RoM34cpZrEC2AVo/RhKz6xD/ohv+44CcN9/usYuKZ5T8RCaNVBQTXCDsWHofX
sp+QkQyJ/CQd8gKi6p/KvhDGTitebXoBf0hdvpt68ngPgtVfwen5j5Sz0lBpVCu4
0RoTOcv+WJdcn2gsySvbxWZzsRY/xA2yfcTjPDkbN+0eUR/k7KF+pO3ibeOE1w+d
C2Hq2fyG5fU8mG0LYpY51eOURSrVspI0eryMY/YTAJsfivWfvw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:41 2026 by rpki-client