Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbeedab-21fb-4993-b3ce-b753ba293d00.roa
File: abbeedab-21fb-4993-b3ce-b753ba293d00.roa (raw, json)
Hash identifier: OINbOiqRaeneAwmXgQWpjJniYK7JymS+HrbxHCWZ1Io=
Subject key identifier: 57:22:17:29:4B:19:2F:86:7C:45:F2:AD:CE:C3:3E:B0:6B:39:ED:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D25C3A6968A9060EC12C3CD2D1563CA73CA2601
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbeedab-21fb-4993-b3ce-b753ba293d00.roa
Signing time: Fri 07 Aug 2026 04:40:08 +0000
ROA not before: Fri 07 Aug 2026 04:40:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 23:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:25:c3:a6:96:8a:90:60:ec:12:c3:cd:2d:15:63:ca:73:ca:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3a2a7e9e3a2984d5d5eef2b64f9cefa380d7067f5179a5e1232f0000c2db1bdb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:99:96:5d:5c:31:f8:62:24:25:c4:d7:93:
24:59:6e:53:56:ce:73:fa:d9:84:94:fe:94:de:af:
9d:4a:b1:ef:90:75:e3:fd:bd:90:e3:de:73:fc:fe:
59:25:a3:05:a9:76:c8:19:ac:dc:a8:45:9e:13:85:
d5:47:12:fa:b1:5d:c9:37:32:d4:23:6d:49:79:d9:
93:83:b4:9e:82:87:67:24:d8:e7:89:22:0a:fc:59:
6b:41:0e:1b:7f:19:6c:10:ef:7c:68:e7:17:c1:bc:
43:3c:d2:99:a4:b0:29:0b:cf:0a:5b:98:02:71:5f:
b7:24:01:3d:02:c1:f2:14:44:96:cc:1c:81:84:2f:
4f:f0:4e:0d:0d:b9:4a:a3:3d:a0:b2:97:2d:34:cf:
6f:60:fa:0f:9c:14:a4:47:50:09:98:c0:88:75:d6:
cd:d5:e1:dc:66:90:19:31:5a:fd:e8:74:36:4d:89:
8c:9f:13:ac:98:e0:6a:35:6b:a1:ad:80:21:a2:ee:
e8:91:c9:3d:72:b4:ee:84:ef:e1:06:0c:9c:15:c6:
7b:f3:c9:b7:94:c5:1f:11:6c:bd:5e:0c:a7:fc:12:
8e:b4:fb:ce:a3:f5:d6:ae:d1:03:2c:34:9f:73:fd:
06:bc:63:73:8f:35:f9:dd:70:e2:cc:23:55:16:43:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:22:17:29:4B:19:2F:86:7C:45:F2:AD:CE:C3:3E:B0:6B:39:ED:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbeedab-21fb-4993-b3ce-b753ba293d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:e000::/40
Signature Algorithm: sha256WithRSAEncryption
48:9c:7a:7c:57:7c:9e:34:14:0a:8d:ee:9c:eb:e3:fb:40:bb:
3d:99:29:b7:92:03:e6:68:d7:0d:6a:75:d3:4e:2f:a1:fe:43:
03:a7:cf:3e:e1:08:f3:35:1b:9a:10:04:7c:42:7d:6d:42:fd:
fc:40:23:ed:ed:38:da:59:0a:5c:e5:0b:91:15:14:f2:a7:67:
79:67:62:59:42:9d:cb:01:6b:f4:11:70:e4:89:b2:52:be:fd:
71:f3:e6:27:0e:09:02:c9:a0:d4:ae:08:80:fa:c3:62:bd:21:
d5:ec:0d:8c:77:40:50:43:d6:df:6f:d8:f4:78:ff:d9:78:02:
7b:3e:42:c2:70:0c:11:99:f8:75:db:89:c3:c1:82:85:96:ac:
5b:fa:bd:c8:a3:a6:a4:48:7e:ce:4c:d1:10:8a:66:c5:46:a8:
10:79:e6:f5:fe:ca:db:f6:9d:46:33:d1:98:e9:94:44:f0:00:
1a:e2:da:91:86:91:1b:5e:19:b6:22:92:f9:de:4b:ee:18:92:
68:7c:25:b6:58:60:fa:d7:41:54:40:e1:1a:c8:06:c9:45:c0:
87:eb:92:54:1e:5f:e3:9d:11:a0:59:3c:4a:74:3e:4e:69:e1:
98:77:ac:ff:d9:40:a3:3d:87:0d:93:b9:6c:61:d0:90:d5:ae:
d8:d7:53:e2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULSXDppaKkGDsEsPNLRVjynPKJgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDQwMDhaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDNhMmE3ZTllM2EyOTg0ZDVkNWVlZjJiNjRmOWNlZmEzODBkNzA2N2Y1MTc5
YTVlMTIzMmYwMDAwYzJkYjFiZGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9+mZZdXDH4YiQlxNeTJFluU1bOc/rZhJT+lN6vnUqx75B14/29kOPec/z+
WSWjBal2yBms3KhFnhOF1UcS+rFdyTcy1CNtSXnZk4O0noKHZyTY54kiCvxZa0EO
G38ZbBDvfGjnF8G8QzzSmaSwKQvPCluYAnFftyQBPQLB8hRElswcgYQvT/BODQ25
SqM9oLKXLTTPb2D6D5wUpEdQCZjAiHXWzdXh3GaQGTFa/eh0Nk2JjJ8TrJjgajVr
oa2AIaLu6JHJPXK07oTv4QYMnBXGe/PJt5TFHxFsvV4Mp/wSjrT7zqP11q7RAyw0
n3P9Brxjc481+d1w4swjVRZDjaUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRXIhcp
SxkvhnxF8q3Owz6wazntujAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWJiZWVkYWItMjFmYi00OTkzLWIzY2UtYjc1M2JhMjkzZDAwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FDg
MA0GCSqGSIb3DQEBCwUAA4IBAQBInHp8V3yeNBQKje6c6+P7QLs9mSm3kgPmaNcN
anXTTi+h/kMDp88+4QjzNRuaEAR8Qn1tQv38QCPt7TjaWQpc5QuRFRTyp2d5Z2JZ
Qp3LAWv0EXDkibJSvv1x8+YnDgkCyaDUrgiA+sNivSHV7A2Md0BQQ9bfb9j0eP/Z
eAJ7PkLCcAwRmfh124nDwYKFlqxb+r3Io6akSH7OTNEQimbFRqgQeeb1/srb9p1G
M9GY6ZRE8AAa4tqRhpEbXhm2IpL53kvuGJJofCW2WGD610FUQOEayAbJRcCH65JU
Hl/jnRGgWTxKdD5OaeGYd6z/2UCjPYcNk7lsYdCQ1a7Y11Pi
-----END CERTIFICATE-----
Generated at Wed Sep 2 04:52:28 2026 by rpki-client