Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
File: ad017d4e-10ed-4706-a728-1b3d3feae80f.roa (raw, json)
Hash identifier: 4mNDulKHv184wrOhbtI0FnhMOpaeWH3zoFyIvjmk3n0=
Subject key identifier: 21:EF:8E:AD:93:5D:2D:D9:93:28:8C:20:6F:C6:4F:81:6D:C4:AA:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EC9EFBD0C940BF29AF97D043BBAE93D0617FDF4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
Signing time: Fri 07 Aug 2026 04:41:15 +0000
ROA not before: Fri 07 Aug 2026 04:41:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c9:ef:bd:0c:94:0b:f2:9a:f9:7d:04:3b:ba:e9:3d:06:17:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9feff1c81f528677f859974e4c3ccee7c1df9058ad1288706c9dd0db0fc3cdfe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:dd:83:6b:f9:e9:de:1e:0e:15:38:c1:8a:
9c:b0:df:74:b9:57:fd:b6:3b:38:00:39:2b:84:ef:
17:fb:14:fa:10:36:9a:8a:8a:49:de:b9:f9:10:3f:
08:59:02:98:8d:a7:62:33:ff:73:ad:54:af:af:e9:
76:cb:de:46:82:57:3e:d5:16:19:ba:fe:33:d4:ac:
56:5f:86:d3:80:04:32:6a:74:f3:55:4e:48:61:f2:
3d:86:86:22:09:40:98:b9:1b:8a:80:d4:8d:40:e2:
8b:2c:2e:3f:c2:93:4d:0f:8d:c6:b8:93:43:c3:11:
10:ef:f9:e9:63:1c:6b:d6:cf:39:d3:62:7b:86:57:
14:4d:d0:fa:c6:7a:05:e0:04:0a:68:db:c0:1e:a1:
d0:18:94:08:36:43:8f:41:21:35:44:8e:30:27:cf:
f2:0f:5a:70:b1:53:99:78:dc:b3:8c:16:6d:39:73:
bc:94:70:42:4c:b1:60:51:2f:e7:21:79:99:cd:c8:
65:f0:80:78:be:26:0e:7f:dd:19:a8:6a:fa:46:38:
da:31:15:0d:5d:e5:44:8e:6e:74:fe:ba:64:20:29:
7a:34:02:2d:b6:39:27:51:50:f3:b3:e5:cb:ea:cf:
90:1d:37:24:3b:92:11:e2:ba:14:50:1d:73:85:5a:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EF:8E:AD:93:5D:2D:D9:93:28:8C:20:6F:C6:4F:81:6D:C4:AA:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:ee:98:bb:c2:17:f9:be:d6:e5:57:49:0f:9d:a0:48:e6:b5:
98:7b:66:e8:0b:e5:91:da:68:1c:f3:a2:0d:fa:92:0b:b6:70:
36:88:ca:b3:4e:4b:3c:a2:c2:95:b6:02:ed:3c:80:1a:a5:c7:
76:72:35:bb:81:47:05:a4:4c:0c:93:3c:40:d5:ee:af:14:b7:
42:97:a1:ad:e2:e9:df:b2:48:3f:c7:c8:19:a3:64:8f:8e:c8:
4a:89:14:47:f6:80:b5:e6:a9:15:3f:95:d2:aa:3f:f0:a6:55:
66:42:bd:ee:8d:d0:5e:39:02:72:8f:7a:3f:3a:0c:71:b9:17:
81:7b:25:c4:72:43:99:45:cf:69:6a:f3:c2:8c:34:98:f9:1c:
c2:e5:76:ed:c0:c4:c0:86:4f:67:3d:3c:a4:0a:4b:67:a1:31:
50:44:24:40:4b:f5:6b:7e:9c:f2:d4:89:ab:8b:f6:80:2f:81:
b1:8d:f8:e6:94:cd:dc:8f:0d:bd:52:c6:b2:8b:9e:cd:c2:c8:
d7:da:7e:db:e5:a9:6b:a2:07:90:05:ac:e2:09:fa:65:d4:d6:
47:58:4a:e1:be:8a:70:5a:1d:2b:36:e4:0f:22:a3:98:46:aa:
fe:54:8c:5b:6f:fa:93:f3:1e:e3:c5:06:04:61:4a:f7:7b:cd:
34:42:f2:50
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULsnvvQyUC/Ka+X0EO7rpPQYX/fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDQxMTVaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDlmZWZmMWM4MWY1Mjg2NzdmODU5OTc0ZTRjM2NjZWU3YzFkZjkwNThhZDEy
ODg3MDZjOWRkMGRiMGZjM2NkZmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAw3YNr+eneHg4VOMGKnLDfdLlX/bY7OAA5K4TvF/sU+hA2moqKSd65+RA/
CFkCmI2nYjP/c61Ur6/pdsveRoJXPtUWGbr+M9SsVl+G04AEMmp081VOSGHyPYaG
IglAmLkbioDUjUDiiywuP8KTTQ+NxriTQ8MREO/56WMca9bPOdNie4ZXFE3Q+sZ6
BeAECmjbwB6h0BiUCDZDj0EhNUSOMCfP8g9acLFTmXjcs4wWbTlzvJRwQkyxYFEv
5yF5mc3IZfCAeL4mDn/dGahq+kY42jEVDV3lRI5udP66ZCApejQCLbY5J1FQ87Pl
y+rPkB03JDuSEeK6FFAdc4VaMRkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQh746t
k10t2ZMojCBvxk+BbcSqUTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWQwMTdkNGUtMTBlZC00NzA2LWE3MjgtMWIzZDNmZWFlODBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G9A
MA0GCSqGSIb3DQEBCwUAA4IBAQB77pi7whf5vtblV0kPnaBI5rWYe2boC+WR2mgc
86IN+pILtnA2iMqzTks8osKVtgLtPIAapcd2cjW7gUcFpEwMkzxA1e6vFLdCl6Gt
4unfskg/x8gZo2SPjshKiRRH9oC15qkVP5XSqj/wplVmQr3ujdBeOQJyj3o/Ogxx
uReBeyXEckOZRc9pavPCjDSY+RzC5XbtwMTAhk9nPTykCktnoTFQRCRAS/Vrfpzy
1Imri/aAL4GxjfjmlM3cjw29Usayi57NwsjX2n7b5alrogeQBaziCfpl1NZHWErh
vopwWh0rNuQPIqOYRqr+VIxbb/qT8x7jxQYEYUr3e800QvJQ
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:06 2026 by rpki-client