Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
File: a6d14d01-1a1b-448e-bb4a-73279a06c540.roa (raw, json)
Hash identifier: jV4olUPPXGnMHZgsGpTUu/5KAFjN4L+oEU7B8VtfqmY=
Subject key identifier: 9C:AB:41:83:75:40:09:F5:E3:2F:21:3F:79:24:04:38:00:CB:4E:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5290708CFAF686314E89E8D66567D8E31C115FCE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
Signing time: Fri 07 Aug 2026 04:50:12 +0000
ROA not before: Fri 07 Aug 2026 04:50:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:90:70:8c:fa:f6:86:31:4e:89:e8:d6:65:67:d8:e3:1c:11:5f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=95cca6942c3eb9ed79f3102b09d5db74dd035f85188d5fa7f0b132be30aaf6ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:d8:a7:a4:7b:56:f9:89:fb:52:a5:f3:fc:
bb:67:e8:50:86:5c:42:fe:b5:9e:74:20:6c:0d:c7:
4c:92:5b:df:64:47:02:42:f1:57:f5:f9:8c:fe:b8:
e5:74:11:71:41:68:73:bb:d4:38:ee:fc:f4:b3:95:
a0:fa:4d:a5:1c:aa:19:1f:b3:85:06:29:8f:c0:90:
f7:90:53:b5:37:b7:8d:0c:c5:e7:49:ea:e6:a2:81:
46:d0:31:bc:3d:8b:0b:8f:5c:14:19:ec:f2:7b:88:
81:15:ef:f2:90:03:2f:a8:cb:27:76:eb:0b:5e:ad:
1c:a5:69:04:de:22:f3:36:aa:50:c6:6a:0c:41:65:
a5:80:a2:61:b9:28:33:14:63:94:3d:1c:b1:a6:ee:
f9:3c:39:5d:06:c9:f5:69:f8:02:85:60:4f:bc:ed:
cc:f5:7b:93:c3:32:df:a1:eb:f9:5b:51:45:11:7b:
f4:c9:11:02:16:26:eb:a1:8d:95:f6:66:09:1c:63:
ad:7e:0c:2a:48:75:78:61:60:9d:0a:1e:fb:bd:e4:
f4:9d:a5:a5:10:0d:9c:3c:ed:43:40:c6:23:2f:ed:
35:ab:76:e2:29:25:dc:40:d7:e7:f0:25:55:2d:25:
0c:8b:8f:ed:25:9d:77:70:fa:65:b9:a7:f7:ea:21:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:41:83:75:40:09:F5:E3:2F:21:3F:79:24:04:38:00:CB:4E:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5040::/48
Signature Algorithm: sha256WithRSAEncryption
bc:b0:e2:d7:da:3f:50:ae:b0:e6:54:37:1f:5d:24:04:88:d1:
8c:1a:f6:e1:95:d0:0b:af:e8:e1:59:de:c8:5c:9b:5c:b0:4c:
58:e1:e3:9c:94:b4:e4:0c:6b:99:f8:5f:9a:f1:4a:60:ec:13:
96:17:fe:8c:d5:79:b2:58:1d:fb:47:6b:19:89:83:b2:f0:f9:
8a:b8:cd:a0:3a:31:a7:d1:48:15:50:4c:f0:ab:4c:5d:80:5f:
86:66:a1:f8:24:f6:bc:f7:19:9c:91:3e:55:83:6d:57:09:6e:
9f:b1:bd:a1:b8:3e:38:48:26:b3:94:d2:b2:70:ca:e8:c3:cf:
f7:14:35:aa:d1:ec:9d:ca:e7:39:17:28:c7:c8:23:11:2b:15:
de:ab:c6:44:d0:8a:77:d7:26:cb:93:85:a9:dd:04:8b:6e:af:
7e:a6:6c:92:c3:ef:25:80:64:b7:58:76:76:52:db:ed:17:e7:
79:3e:52:d6:95:4b:6e:f7:36:ab:1b:9c:65:02:54:11:8b:b8:
99:79:b9:80:71:86:1f:af:cb:c0:f6:17:3f:71:a6:76:c8:54:
af:c4:bc:3a:c8:93:38:54:e0:52:c9:de:f9:1f:01:59:05:f0:
db:b4:15:f4:74:11:e6:a7:8c:39:29:8f:57:7f:0a:2e:f7:9d:
fe:14:0b:c5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUpBwjPr2hjFOiejWZWfY4xwRX84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMTJaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk1Y2NhNjk0MmMzZWI5ZWQ3OWYzMTAyYjA5ZDVkYjc0ZGQwMzVmODUxODhk
NWZhN2YwYjEzMmJlMzBhYWY2ZmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALh52Keke1b5iftSpfP8u2foUIZcQv61nnQgbA3HTJJb32RHAkLxV/X5jP64
5XQRcUFoc7vUOO789LOVoPpNpRyqGR+zhQYpj8CQ95BTtTe3jQzF50nq5qKBRtAx
vD2LC49cFBns8nuIgRXv8pADL6jLJ3brC16tHKVpBN4i8zaqUMZqDEFlpYCiYbko
MxRjlD0csabu+Tw5XQbJ9Wn4AoVgT7ztzPV7k8My36Hr+VtRRRF79MkRAhYm66GN
lfZmCRxjrX4MKkh1eGFgnQoe+73k9J2lpRANnDztQ0DGIy/tNat24ikl3EDX5/Al
VS0lDIuP7SWdd3D6Zbmn9+oheWMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBScq0GD
dUAJ9eMvIT95JAQ4AMtOwzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZkMTRkMDEtMWExYi00NDhlLWJiNGEtNzMyNzlhMDZjNTQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAvLDi19o/UK6w5lQ3H10kBIjRjBr24ZXQC6/o
4VneyFybXLBMWOHjnJS05AxrmfhfmvFKYOwTlhf+jNV5slgd+0drGYmDsvD5irjN
oDoxp9FIFVBM8KtMXYBfhmah+CT2vPcZnJE+VYNtVwlun7G9obg+OEgms5TSsnDK
6MPP9xQ1qtHsncrnORcox8gjESsV3qvGRNCKd9cmy5OFqd0Ei26vfqZsksPvJYBk
t1h2dlLb7RfneT5S1pVLbvc2qxucZQJUEYu4mXm5gHGGH6/LwPYXP3GmdshUr8S8
OsiTOFTgUsne+R8BWQXw27QV9HQR5qeMOSmPV38KLved/hQLxQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:10 2026 by rpki-client