Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a507fd37-f907-46ea-8c80-857b97a67610.roa
File: a507fd37-f907-46ea-8c80-857b97a67610.roa (raw, json)
Hash identifier: RoxANvAUJ9YU4CHtavD/1p3yEHlqsiqGqz4hAZKO2JQ=
Subject key identifier: 2B:FD:C9:B1:10:9E:A9:EA:A8:CB:9D:6D:2F:A4:9B:03:A0:6B:5B:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68DB71A323A059BD17234BB7945EA1A5A71AA6C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a507fd37-f907-46ea-8c80-857b97a67610.roa
Signing time: Fri 07 Aug 2026 05:20:59 +0000
ROA not before: Fri 07 Aug 2026 05:20:59 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:db:71:a3:23:a0:59:bd:17:23:4b:b7:94:5e:a1:a5:a7:1a:a6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:59 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=40f107bccd74f511c69c8751f4d86900076b8a85017ae040c80decace6962e0b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:01:d8:41:60:70:78:8c:0a:71:4e:6c:dd:
a9:c5:0c:13:19:1c:f6:32:b1:3e:44:6c:b6:c2:3e:
dd:17:c0:2b:ce:27:4a:af:42:83:09:30:2e:54:df:
d1:77:64:f1:a4:ac:75:d7:89:a0:16:f3:e5:aa:80:
cd:4a:4a:61:76:69:20:ee:ea:93:b1:47:4d:4c:9b:
3e:03:96:e9:96:cb:61:87:15:4b:de:ec:d6:39:8d:
a9:1b:2f:9e:65:57:7b:e2:32:45:51:7f:cb:d0:33:
41:66:d2:08:9e:e0:e1:ca:5b:12:8b:e6:48:2c:6c:
e0:7a:10:39:df:1b:83:94:e3:6a:a9:a1:c1:28:ef:
7b:1c:3b:b7:18:77:f6:22:04:95:53:62:f5:b5:83:
44:7a:a6:9a:68:67:08:66:77:4e:46:ed:25:2c:08:
c2:81:84:6c:1a:a4:31:58:15:aa:58:25:53:92:07:
be:78:c5:75:ce:87:70:d3:67:f5:f3:a0:0f:7c:30:
ab:c7:90:4f:78:64:ab:14:3e:eb:d0:ff:11:e4:6f:
5e:11:71:ae:16:f0:6a:1f:6c:b9:8a:ed:5c:cb:86:
3b:5d:78:50:07:1f:77:60:4b:a7:40:99:ba:da:7a:
30:f3:aa:26:ba:d6:e5:2e:65:0c:9f:b0:9c:66:88:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:C9:B1:10:9E:A9:EA:A8:CB:9D:6D:2F:A4:9B:03:A0:6B:5B:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a507fd37-f907-46ea-8c80-857b97a67610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:e000::/40
Signature Algorithm: sha256WithRSAEncryption
9b:84:bb:e8:eb:57:67:98:da:ad:30:ae:3d:fc:cb:4e:58:91:
e9:61:40:ae:62:c3:11:ca:b3:3c:57:f2:78:a0:73:14:79:a0:
4d:e2:a2:2b:ce:30:62:22:31:00:b4:fb:24:3f:88:83:35:cd:
01:9a:be:07:c3:29:11:c7:2d:c5:3c:b8:e8:89:d5:cd:5d:55:
0e:ab:53:dd:04:26:fa:87:28:38:b4:9f:fe:2f:3a:37:55:47:
2f:01:dd:70:a3:d1:ff:af:b1:8f:e9:ad:3c:a5:99:1f:e0:2d:
85:f3:c9:3b:7d:41:c9:44:86:80:fe:80:6c:0d:7c:f4:f8:4a:
e7:24:29:0d:67:8c:52:5f:73:9b:77:71:d8:a1:50:0f:86:b3:
e9:1b:6d:16:38:93:c4:44:4b:c4:50:8d:14:eb:bc:3e:6f:8c:
c8:af:cf:29:b3:fb:cb:45:79:67:12:87:bd:6e:f8:ee:54:4c:
9e:de:c3:65:79:93:d4:5c:6f:b8:35:d4:2a:54:a9:8f:da:42:
2d:94:c2:d4:19:cf:4c:94:79:8c:20:61:5b:f3:9b:fa:2a:fa:
76:4e:7d:87:35:9f:7b:81:ae:ec:39:2e:b3:e5:f2:e3:c7:5c:
f8:75:53:4e:3e:d0:61:5b:64:dd:e2:ad:ac:f8:d1:5c:ba:f0:
98:b5:37:11
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaNtxoyOgWb0XI0u3lF6hpacapsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTIwNTlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwZjEwN2JjY2Q3NGY1MTFjNjljODc1MWY0ZDg2OTAwMDc2YjhhODUwMTdh
ZTA0MGM4MGRlY2FjZTY5NjJlMGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWhAdhBYHB4jApxTmzdqcUMExkc9jKxPkRstsI+3RfAK84nSq9CgwkwLlTf
0Xdk8aSsddeJoBbz5aqAzUpKYXZpIO7qk7FHTUybPgOW6ZbLYYcVS97s1jmNqRsv
nmVXe+IyRVF/y9AzQWbSCJ7g4cpbEovmSCxs4HoQOd8bg5TjaqmhwSjvexw7txh3
9iIElVNi9bWDRHqmmmhnCGZ3TkbtJSwIwoGEbBqkMVgVqlglU5IHvnjFdc6HcNNn
9fOgD3wwq8eQT3hkqxQ+69D/EeRvXhFxrhbwah9suYrtXMuGO114UAcfd2BLp0CZ
utp6MPOqJrrW5S5lDJ+wnGaI0lcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQr/cmx
EJ6p6qjLnW0vpJsDoGtbvDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTUwN2ZkMzctZjkwNy00NmVhLThjODAtODU3Yjk3YTY3NjEwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HLg
MA0GCSqGSIb3DQEBCwUAA4IBAQCbhLvo61dnmNqtMK49/MtOWJHpYUCuYsMRyrM8
V/J4oHMUeaBN4qIrzjBiIjEAtPskP4iDNc0Bmr4HwykRxy3FPLjoidXNXVUOq1Pd
BCb6hyg4tJ/+Lzo3VUcvAd1wo9H/r7GP6a08pZkf4C2F88k7fUHJRIaA/oBsDXz0
+ErnJCkNZ4xSX3Obd3HYoVAPhrPpG20WOJPEREvEUI0U67w+b4zIr88ps/vLRXln
Eoe9bvjuVEye3sNleZPUXG+4NdQqVKmP2kItlMLUGc9MlHmMIGFb85v6Kvp2Tn2H
NZ97ga7sOS6z5fLjx1z4dVNOPtBhW2Td4q2s+NFcuvCYtTcR
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:41 2026 by rpki-client