Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
File: aa679cd8-5924-43d7-8928-c65bc2ec3659.roa (raw, json)
Hash identifier: 3o2cZhfWm8eiAgHcD/9J5ffNoM8dY5zI1Z1nHTvcoZI=
Subject key identifier: C3:FC:28:81:F3:A2:3B:CC:D7:29:30:08:4E:FD:A8:45:F2:7D:0F:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59768DA848867AF8440612FFA9FB394F3354AA2B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
Signing time: Fri 07 Aug 2026 05:20:23 +0000
ROA not before: Fri 07 Aug 2026 05:20:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:76:8d:a8:48:86:7a:f8:44:06:12:ff:a9:fb:39:4f:33:54:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4dbceb8fcf216567a1e78dbff48411091bf48a4c31e00b258076bc3ed17785fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:17:b4:f2:2c:81:dc:bc:07:da:84:31:96:
3f:3c:53:10:f4:8e:f8:b4:79:53:ca:4a:a6:1f:72:
c9:96:af:ca:0c:18:2f:76:bd:f5:0e:e1:7b:aa:57:
ec:22:b6:96:d9:e9:09:79:f8:bb:b2:58:b9:6e:ac:
58:12:f9:83:0f:31:de:e8:1d:5d:ef:87:cf:b3:2a:
da:30:41:4a:99:48:f9:34:f9:c4:d8:99:f9:01:8d:
33:65:55:8c:6d:4d:31:b8:9e:04:9e:e7:ee:f5:2d:
45:a1:35:d4:50:37:4a:8c:4b:98:87:a1:8b:e7:14:
0c:b2:5b:e9:57:15:9a:73:0e:30:f5:f7:8c:70:89:
90:04:be:b6:34:15:87:c1:03:35:e7:26:03:b5:64:
e1:8a:e2:6b:82:23:06:92:8c:cf:12:43:5c:80:cb:
e2:26:21:a9:b8:18:68:22:47:25:5a:5e:29:9f:fd:
c9:95:b2:3b:f3:66:38:6f:63:5d:84:02:c7:53:8d:
52:2f:38:2f:34:c6:a3:44:4b:49:34:28:ec:83:87:
f4:62:de:cf:41:27:45:ed:62:29:47:93:54:e1:66:
cb:09:36:0b:73:d3:ac:90:86:d2:7c:bb:1e:a8:ee:
a3:0c:ac:ba:5f:47:9f:f7:d6:f9:64:96:66:7a:22:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:28:81:F3:A2:3B:CC:D7:29:30:08:4E:FD:A8:45:F2:7D:0F:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:c000::/40
Signature Algorithm: sha256WithRSAEncryption
01:24:0d:d1:82:4f:fd:c1:3e:8a:e7:ea:d4:d7:0e:2a:1f:e3:
d5:29:1f:ef:10:85:62:8e:a5:d8:c9:db:53:3b:38:6b:2b:e7:
4b:c5:06:08:b4:d2:6f:e4:12:f1:aa:51:54:4f:5b:69:09:6f:
06:f6:0d:1a:16:90:d4:42:f2:9e:93:9d:eb:13:64:72:c4:55:
c3:5f:d7:87:3f:47:51:8c:e3:4a:32:e1:0a:9d:99:cd:91:88:
92:e8:ba:10:08:6c:d5:86:ee:26:c8:46:c7:d7:aa:65:6a:45:
af:a5:82:27:dd:60:73:44:8e:b6:a6:be:26:8a:fc:04:a7:70:
f3:b5:0c:cc:c1:80:13:19:ba:6a:2d:a2:df:9b:48:c5:34:56:
b9:44:89:19:09:e5:20:4b:7f:63:45:80:f3:a8:dc:c9:9b:5a:
02:bc:12:a9:69:94:31:53:f5:3b:83:ba:bd:5f:8f:e1:96:5e:
e1:a6:23:4e:2f:25:69:7c:ea:a5:42:3f:bd:2a:d6:40:6f:0b:
d8:9f:50:3a:b7:a8:e0:c3:d4:f1:df:cf:f4:6e:28:fd:a2:a4:
58:bb:e6:03:88:ae:1d:6e:42:f1:59:a2:a3:ad:75:30:3b:ee:
14:70:66:67:3a:8e:18:1c:4e:79:5a:42:4c:cd:ae:64:bd:1d:
7b:57:e5:bb
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWXaNqEiGevhEBhL/qfs5TzNUqiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTIwMjNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkYmNlYjhmY2YyMTY1NjdhMWU3OGRiZmY0ODQxMTA5MWJmNDhhNGMzMWUw
MGIyNTgwNzZiYzNlZDE3Nzg1ZmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKE7F7TyLIHcvAfahDGWPzxTEPSO+LR5U8pKph9yyZavygwYL3a99Q7he6pX
7CK2ltnpCXn4u7JYuW6sWBL5gw8x3ugdXe+Hz7Mq2jBBSplI+TT5xNiZ+QGNM2VV
jG1NMbieBJ7n7vUtRaE11FA3SoxLmIehi+cUDLJb6VcVmnMOMPX3jHCJkAS+tjQV
h8EDNecmA7Vk4Yria4IjBpKMzxJDXIDL4iYhqbgYaCJHJVpeKZ/9yZWyO/NmOG9j
XYQCx1ONUi84LzTGo0RLSTQo7IOH9GLez0EnRe1iKUeTVOFmywk2C3PTrJCG0ny7
Hqjuowysul9Hn/fW+WSWZnoiMGMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTD/CiB
86I7zNcpMAhO/ahF8n0P6jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWE2NzljZDgtNTkyNC00M2Q3LTg5MjgtYzY1YmMyZWMzNjU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HjA
MA0GCSqGSIb3DQEBCwUAA4IBAQABJA3Rgk/9wT6K5+rU1w4qH+PVKR/vEIVijqXY
ydtTOzhrK+dLxQYItNJv5BLxqlFUT1tpCW8G9g0aFpDUQvKek53rE2RyxFXDX9eH
P0dRjONKMuEKnZnNkYiS6LoQCGzVhu4myEbH16plakWvpYIn3WBzRI62pr4mivwE
p3DztQzMwYATGbpqLaLfm0jFNFa5RIkZCeUgS39jRYDzqNzJm1oCvBKpaZQxU/U7
g7q9X4/hll7hpiNOLyVpfOqlQj+9KtZAbwvYn1A6t6jgw9Tx38/0bij9oqRYu+YD
iK4dbkLxWaKjrXUwO+4UcGZnOo4YHE55WkJMza5kvR17V+W7
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:05 2026 by rpki-client