Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
File: a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa (raw, json)
Hash identifier: 73vpJR8kDcgGBeYTQP7krfRVJIPWw9nekR+3C0Qz6TA=
Subject key identifier: 38:93:5C:AC:EE:43:90:58:0C:4B:27:18:BF:04:10:B0:5E:8C:AA:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24F476C0CFD7F502F820F20CF19832D267349A47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
Signing time: Fri 07 Aug 2026 04:50:24 +0000
ROA not before: Fri 07 Aug 2026 04:50:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f4:76:c0:cf:d7:f5:02:f8:20:f2:0c:f1:98:32:d2:67:34:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4cd61f9f216a6aad6e89422d4f2664b3d8fc3713a3932c362d86267edcbd3756, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:40:fd:6f:7f:f6:e6:ca:97:71:48:24:b4:
8b:30:22:01:77:56:d3:9c:3a:79:2d:7e:49:59:d4:
44:20:28:30:33:79:8a:38:a9:a4:cb:a8:9c:ed:41:
a9:06:db:13:0e:19:00:04:11:b9:89:83:d3:b9:e4:
6e:24:dc:2a:d2:aa:df:c7:20:a8:cc:b5:ba:06:5f:
dc:69:dc:1f:de:fb:ea:51:1e:f7:72:f5:47:08:a8:
d8:0c:52:c1:d0:8a:5e:68:ae:7c:8d:a9:27:e0:35:
a0:44:3f:29:be:19:99:0c:b2:05:f1:e4:06:14:d7:
23:46:aa:bc:f8:98:a3:4f:1c:88:56:d7:9e:d0:d5:
67:31:66:fb:0b:81:43:01:02:7a:8d:99:76:39:a3:
10:a4:fc:ad:77:b3:fa:a8:7c:35:6d:9c:d7:9a:f0:
2e:21:f8:c8:78:47:00:6c:b8:bb:a0:5c:4b:14:ee:
c9:44:fb:d3:e0:89:cb:6c:a0:d3:5a:6f:41:00:5c:
cb:51:3c:89:d8:f1:f7:de:07:db:63:5c:47:07:1b:
f0:16:e0:0e:c3:e7:4f:ce:47:3b:2c:e5:2f:c6:e4:
d5:93:d4:32:b1:ba:6b:1c:46:30:b3:b6:a0:32:41:
07:1c:db:d8:78:6c:71:f8:f7:73:42:13:63:8e:5a:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:5C:AC:EE:43:90:58:0C:4B:27:18:BF:04:10:B0:5E:8C:AA:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:9000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:1b:a5:1c:c3:e6:71:69:25:e0:db:d2:02:47:9b:50:24:16:
f6:1c:75:f4:7d:85:20:ae:d9:cc:f7:44:98:23:0f:09:d9:2e:
52:04:1e:f8:dd:58:c2:a5:6b:84:dc:dd:5d:30:b8:f6:27:85:
68:09:ba:ad:02:8e:37:81:78:d9:26:30:a8:ed:b5:cd:5b:6c:
8e:31:0b:ec:a3:bf:24:49:70:f8:ca:e6:2d:e5:94:a3:57:83:
36:4d:8f:08:2e:29:c7:ea:35:ac:47:05:43:2c:ef:26:b6:0e:
32:82:71:11:4e:f9:f9:62:a8:8d:83:78:ee:69:43:38:fa:35:
4d:c6:97:a9:4a:85:61:de:ed:25:c5:a7:6b:d3:c5:b5:9b:ec:
ae:dd:61:11:97:9a:17:7f:96:1b:5f:c6:32:cd:a7:47:4e:9f:
57:f6:6a:dc:19:96:32:92:20:f9:8e:21:8b:b5:12:64:c5:5c:
b1:12:aa:38:c9:e1:82:78:b5:cb:01:69:d0:99:d5:5a:af:5b:
73:66:bd:99:a1:d3:fc:37:21:f6:fc:91:e2:b8:f5:36:54:d7:
21:47:3e:f9:19:fa:d9:3d:34:e0:c1:67:2c:a2:e4:b8:c1:2c:
71:d7:a7:6f:5b:53:81:a7:b5:53:3d:74:d3:80:19:31:a0:9f:
4f:fc:1a:95
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJPR2wM/X9QL4IPIM8Zgy0mc0mkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMjRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDRjZDYxZjlmMjE2YTZhYWQ2ZTg5NDIyZDRmMjY2NGIzZDhmYzM3MTNhMzkz
MmMzNjJkODYyNjdlZGNiZDM3NTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMgeQP1vf/bmypdxSCS0izAiAXdW05w6eS1+SVnURCAoMDN5ijippMuonO1B
qQbbEw4ZAAQRuYmD07nkbiTcKtKq38cgqMy1ugZf3GncH9776lEe93L1Rwio2AxS
wdCKXmiufI2pJ+A1oEQ/Kb4ZmQyyBfHkBhTXI0aqvPiYo08ciFbXntDVZzFm+wuB
QwECeo2ZdjmjEKT8rXez+qh8NW2c15rwLiH4yHhHAGy4u6BcSxTuyUT70+CJy2yg
01pvQQBcy1E8idjx994H22NcRwcb8BbgDsPnT85HOyzlL8bk1ZPUMrG6axxGMLO2
oDJBBxzb2Hhscfj3c0ITY45aSrsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ4k1ys
7kOQWAxLJxi/BBCwXoyqszAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZiZDg3ZDUtYzExZS00NTA4LWFkYTUtZWY1OGE0OTVkM2Y2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB6G6Ucw+ZxaSXg29ICR5tQJBb2HHX0fYUgrtnM
90SYIw8J2S5SBB743VjCpWuE3N1dMLj2J4VoCbqtAo43gXjZJjCo7bXNW2yOMQvs
o78kSXD4yuYt5ZSjV4M2TY8ILinH6jWsRwVDLO8mtg4ygnERTvn5YqiNg3juaUM4
+jVNxpepSoVh3u0lxadr08W1m+yu3WERl5oXf5YbX8YyzadHTp9X9mrcGZYykiD5
jiGLtRJkxVyxEqo4yeGCeLXLAWnQmdVar1tzZr2ZodP8NyH2/JHiuPU2VNchRz75
GfrZPTTgwWcsouS4wSxx16dvW1OBp7VTPXTTgBkxoJ9P/BqV
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:55 2026 by rpki-client