Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab7811c0-f548-43b8-897d-fac68de3433a.roa
File: ab7811c0-f548-43b8-897d-fac68de3433a.roa (raw, json)
Hash identifier: mFS87He2uctu3e8JpeZZO6O310DpwTqdNqrpb1CK97g=
Subject key identifier: 45:3A:C7:A8:F7:E2:55:5E:17:E5:50:A0:78:D3:DC:1F:72:B4:57:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46F2902320DD65400CB6D7A39CB0333C2D2B915B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab7811c0-f548-43b8-897d-fac68de3433a.roa
Signing time: Fri 07 Aug 2026 05:20:10 +0000
ROA not before: Fri 07 Aug 2026 05:20:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f2:90:23:20:dd:65:40:0c:b6:d7:a3:9c:b0:33:3c:2d:2b:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=52325884920b8071a7fd644e585f0dda15bc0eec271dbc29f18b9da44bead3e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:9b:f3:b0:a4:fc:bb:a8:53:4b:8e:8c:b3:
6b:21:38:61:de:7d:04:94:f1:10:0f:1c:20:c6:79:
bb:9e:b9:79:5f:c8:02:de:e7:db:3e:89:84:26:4a:
92:cd:d8:e1:75:47:f2:7e:cb:57:e3:f6:99:b5:a3:
be:ce:4f:3c:d4:c8:8f:07:b0:79:c7:d6:80:a8:04:
93:c9:74:8a:92:9d:b1:7f:2b:5c:77:95:6e:f1:9c:
c5:d1:44:cb:74:46:0b:5f:2f:7a:33:d5:51:2d:48:
3b:c8:28:75:85:e8:c0:0c:f8:9f:e8:a8:0d:cc:0e:
0e:b2:5a:b6:fd:85:2b:92:a7:28:3e:bb:c9:08:87:
9b:65:11:e6:91:fe:91:5d:8e:50:18:65:16:b2:66:
82:29:b0:2b:19:19:7f:96:6f:17:3b:8e:4a:2c:20:
88:e5:a9:42:b3:6a:ab:07:03:0b:70:a9:af:88:15:
b6:a7:88:3b:e6:eb:7b:a8:b9:99:38:50:0b:11:68:
9d:6b:da:0d:19:69:04:8f:fc:31:d0:1f:be:bf:8a:
b3:23:ac:e6:4a:76:58:d9:a8:a1:f4:7c:80:d5:24:
b7:62:2d:e0:5a:bf:80:7d:6f:ef:9d:3d:a8:2d:a9:
21:b6:a2:d5:72:f0:03:ed:6d:45:a4:ca:92:bc:c1:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:C7:A8:F7:E2:55:5E:17:E5:50:A0:78:D3:DC:1F:72:B4:57:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab7811c0-f548-43b8-897d-fac68de3433a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/36
Signature Algorithm: sha256WithRSAEncryption
b8:2d:ba:5e:e0:df:a7:5a:6d:71:25:fc:d6:e6:9e:16:3b:77:
34:7a:30:c1:1f:92:b9:be:3d:d8:e3:c0:67:7d:23:40:97:43:
14:ea:0e:50:64:07:e7:e4:67:5c:b3:e9:21:c1:f1:31:2f:c5:
61:ac:96:e8:12:ea:12:43:3c:3e:1b:ce:c0:d5:46:dc:8f:d8:
71:95:e5:0a:a7:5d:b9:8a:1a:c9:62:fe:20:03:30:17:cd:18:
ca:08:de:c2:c0:0e:aa:62:09:93:b5:0f:bd:6e:f6:2c:bc:a5:
f5:2d:64:9a:f8:38:17:b6:9b:61:bf:f5:5c:07:33:eb:15:e4:
09:fd:e3:9f:bf:78:be:14:a2:bb:6f:a9:81:35:db:ad:e1:08:
0c:b3:da:02:16:e8:fd:1c:e6:31:65:7e:86:ad:1b:19:30:29:
54:50:2b:d8:6e:34:50:c0:1e:ee:9c:20:cd:a9:64:c3:3f:dd:
44:2d:63:10:47:92:36:c2:ec:f7:6a:20:60:3c:59:73:a4:d0:
61:cb:20:cd:5e:69:fd:d0:67:74:65:26:e7:15:3c:94:d5:f4:
8f:6e:fa:31:06:87:0d:25:cb:50:1f:b5:d7:d8:6b:e4:64:34:
7a:50:3e:8a:11:8a:66:e8:f4:69:0a:33:fb:0a:19:96:16:91:
51:a2:72:05
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURvKQIyDdZUAMttejnLAzPC0rkVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTIwMTBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDUyMzI1ODg0OTIwYjgwNzFhN2ZkNjQ0ZTU4NWYwZGRhMTViYzBlZWMyNzFk
YmMyOWYxOGI5ZGE0NGJlYWQzZTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOmJm/OwpPy7qFNLjoyzayE4Yd59BJTxEA8cIMZ5u565eV/IAt7n2z6JhCZK
ks3Y4XVH8n7LV+P2mbWjvs5PPNTIjwewecfWgKgEk8l0ipKdsX8rXHeVbvGcxdFE
y3RGC18vejPVUS1IO8godYXowAz4n+ioDcwODrJatv2FK5KnKD67yQiHm2UR5pH+
kV2OUBhlFrJmgimwKxkZf5ZvFzuOSiwgiOWpQrNqqwcDC3Cpr4gVtqeIO+bre6i5
mThQCxFonWvaDRlpBI/8MdAfvr+KsyOs5kp2WNmoofR8gNUkt2It4Fq/gH1v7509
qC2pIbai1XLwA+1tRaTKkrzBN+UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRFOseo
9+JVXhflUKB409wfcrRX9zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWI3ODExYzAtZjU0OC00M2I4LTg5N2QtZmFjNjhkZTM0MzNhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BwA
MA0GCSqGSIb3DQEBCwUAA4IBAQC4Lbpe4N+nWm1xJfzW5p4WO3c0ejDBH5K5vj3Y
48BnfSNAl0MU6g5QZAfn5Gdcs+khwfExL8VhrJboEuoSQzw+G87A1Ubcj9hxleUK
p125ihrJYv4gAzAXzRjKCN7CwA6qYgmTtQ+9bvYsvKX1LWSa+DgXtpthv/VcBzPr
FeQJ/eOfv3i+FKK7b6mBNdut4QgMs9oCFuj9HOYxZX6GrRsZMClUUCvYbjRQwB7u
nCDNqWTDP91ELWMQR5I2wuz3aiBgPFlzpNBhyyDNXmn90Gd0ZSbnFTyU1fSPbvox
BocNJctQH7XX2GvkZDR6UD6KEYpm6PRpCjP7ChmWFpFRonIF
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:38 2026 by rpki-client