Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a72cbea9-100c-4974-8211-87debb0f6fbd.roa
File: a72cbea9-100c-4974-8211-87debb0f6fbd.roa (raw, json)
Hash identifier: qItVeCn6t3QzwYfPKy9ncqtKL5gzO6tADXOt2uOoAVI=
Subject key identifier: 6B:CB:87:99:D4:AC:5F:78:3E:CD:EB:E0:9B:73:B8:85:6C:0C:BE:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24736F428CB31C3381907AE6C06D344892DEEFE7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a72cbea9-100c-4974-8211-87debb0f6fbd.roa
Signing time: Fri 07 Aug 2026 04:31:01 +0000
ROA not before: Fri 07 Aug 2026 04:31:01 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:73:6f:42:8c:b3:1c:33:81:90:7a:e6:c0:6d:34:48:92:de:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:31:01 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=925d12f313af0f838128146447ba39d277da8d8a9e36ccf458c8909f16fcae46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:f0:2e:23:f6:7a:98:6d:27:c4:c7:42:23:
bf:fd:f5:92:7e:eb:87:fe:ca:53:c4:8e:f0:99:a6:
53:bf:f9:cc:b8:98:71:e9:76:e6:b2:8c:67:6d:34:
f6:e9:1f:91:af:ad:f6:32:e1:78:26:6a:c0:5b:50:
fa:fa:6f:c8:b1:b0:97:34:b3:7b:08:41:0b:09:71:
d2:26:2e:77:53:fa:aa:16:58:d1:59:da:c8:b9:e8:
2e:1a:55:31:6a:73:76:2c:59:10:b7:72:04:4b:88:
07:5a:45:da:a5:b4:73:94:7a:0e:7b:ea:d7:10:69:
bc:c1:48:d3:bd:b6:a5:36:0c:41:fd:51:06:27:50:
14:e8:61:b3:b0:8e:3f:39:02:ae:44:bf:a0:42:d6:
63:c2:d5:71:67:d9:04:73:5e:96:2e:14:e9:93:8f:
2f:42:91:02:4d:72:9b:8e:bd:d8:55:ea:2e:ad:65:
10:26:99:26:f9:64:06:2d:b0:8f:59:3f:2e:29:97:
3d:59:77:2c:5f:d3:27:6c:47:dd:63:7f:61:33:56:
c2:d4:d7:9d:4f:7c:e5:4c:72:4c:11:20:9e:89:3f:
9a:81:3a:c6:98:d6:29:06:d4:da:55:79:53:7b:52:
83:47:77:45:05:42:72:e2:b6:8e:5d:15:fa:88:3a:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:87:99:D4:AC:5F:78:3E:CD:EB:E0:9B:73:B8:85:6C:0C:BE:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a72cbea9-100c-4974-8211-87debb0f6fbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:dc:42:50:08:2b:e7:d4:ec:43:28:54:7a:9f:27:1c:84:4f:
e2:87:df:e9:7e:53:6e:82:8f:62:c8:f5:db:bb:03:07:2b:e0:
29:17:73:68:ce:ee:ce:80:1b:ac:45:da:d2:ef:fb:a1:6e:85:
0c:87:c8:e1:8f:ec:07:3d:60:6f:15:94:3e:f2:f0:2a:5d:02:
67:b2:a3:e4:f6:9a:e6:8f:ee:69:fd:9e:fc:83:35:01:24:ce:
34:51:5f:0d:23:30:d2:51:ac:c1:70:95:d1:1e:9a:96:61:4a:
63:af:5d:05:26:75:dc:95:cd:cb:42:ea:4f:c4:a3:9f:d3:38:
11:99:d5:49:ba:63:07:c8:dd:68:e0:c2:42:0b:b2:15:18:b2:
97:f6:56:68:eb:61:a2:f3:be:97:ab:cb:42:17:eb:8d:9f:3b:
72:fd:a6:c7:32:65:74:a3:2d:0c:d5:9d:09:e0:a3:47:5b:5e:
e7:53:85:9f:be:82:41:24:70:71:56:7e:c6:f4:fb:96:99:95:
e6:6b:27:75:e4:3f:0d:f7:8b:70:0e:d8:96:d2:a2:e4:77:88:
98:28:b7:ee:02:09:fa:4c:01:40:1e:94:24:7c:41:54:60:ca:
67:fb:d8:d5:17:76:9c:09:6f:7e:40:6d:78:ea:c2:cd:79:1a:
5c:12:01:57
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJHNvQoyzHDOBkHrmwG00SJLe7+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMxMDFaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyNWQxMmYzMTNhZjBmODM4MTI4MTQ2NDQ3YmEzOWQyNzdkYThkOGE5ZTM2
Y2NmNDU4Yzg5MDlmMTZmY2FlNDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANUi8C4j9nqYbSfEx0Ijv/31kn7rh/7KU8SO8JmmU7/5zLiYcel25rKMZ200
9ukfka+t9jLheCZqwFtQ+vpvyLGwlzSzewhBCwlx0iYud1P6qhZY0VnayLnoLhpV
MWpzdixZELdyBEuIB1pF2qW0c5R6Dnvq1xBpvMFI0722pTYMQf1RBidQFOhhs7CO
PzkCrkS/oELWY8LVcWfZBHNeli4U6ZOPL0KRAk1ym4692FXqLq1lECaZJvlkBi2w
j1k/LimXPVl3LF/TJ2xH3WN/YTNWwtTXnU985UxyTBEgnok/moE6xpjWKQbU2lV5
U3tSg0d3RQVCcuK2jl0V+og643ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRry4eZ
1KxfeD7N6+Cbc7iFbAy+TDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTcyY2JlYTktMTAwYy00OTc0LTgyMTEtODdkZWJiMGY2ZmJkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FmA
MA0GCSqGSIb3DQEBCwUAA4IBAQDA3EJQCCvn1OxDKFR6nycchE/ih9/pflNugo9i
yPXbuwMHK+ApF3Nozu7OgBusRdrS7/uhboUMh8jhj+wHPWBvFZQ+8vAqXQJnsqPk
9prmj+5p/Z78gzUBJM40UV8NIzDSUazBcJXRHpqWYUpjr10FJnXclc3LQupPxKOf
0zgRmdVJumMHyN1o4MJCC7IVGLKX9lZo62Gi876Xq8tCF+uNnzty/abHMmV0oy0M
1Z0J4KNHW17nU4WfvoJBJHBxVn7G9PuWmZXmayd15D8N94twDtiW0qLkd4iYKLfu
Agn6TAFAHpQkfEFUYMpn+9jVF3acCW9+QG146sLNeRpcEgFX
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:38 2026 by rpki-client