Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/afd23c37-4c24-49ac-baf6-1c3a9a2d0512.roa
File: afd23c37-4c24-49ac-baf6-1c3a9a2d0512.roa (raw, json)
Hash identifier: Wr4NvvqOqMxAyKP+Fbr0l4U4/5YCTph/HOZztsusW+Y=
Subject key identifier: A9:FC:8D:55:AC:C3:B7:49:0A:8A:CF:22:33:0F:76:A5:6F:39:21:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77761C16B0E846A19471CD166AD2B2E355647C51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/afd23c37-4c24-49ac-baf6-1c3a9a2d0512.roa
Signing time: Tue 04 Aug 2026 01:10:07 +0000
ROA not before: Tue 04 Aug 2026 01:10:07 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:76:1c:16:b0:e8:46:a1:94:71:cd:16:6a:d2:b2:e3:55:64:7c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:07 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=373b847994f12e42a0808657e6de697d857530b9e2663c065d715e0e092a557d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:e7:9e:a7:07:33:fe:ce:ee:7b:7d:95:95:
c6:59:b6:d2:75:e9:11:ac:53:3f:e8:51:67:5e:63:
f0:ea:0f:f6:be:8f:87:23:78:ca:e5:6c:12:28:eb:
9f:0d:57:8c:96:26:10:d5:b6:3d:fa:0e:d1:bd:f8:
9c:b6:19:84:19:f2:ae:ec:64:ee:31:c4:00:c0:a9:
ea:86:b0:8a:d9:06:6a:1d:92:6d:dc:38:d4:44:a4:
fd:90:67:f9:29:11:bf:78:55:af:23:8c:ef:0f:7b:
e6:7a:6a:97:d3:be:3e:28:ba:b7:61:b4:c0:c1:9b:
99:b7:56:cc:0c:59:21:33:cd:72:72:bf:c6:00:f8:
94:f7:93:dc:6d:01:53:2a:94:73:3b:04:3c:bd:b7:
aa:a8:49:97:ba:f0:5e:52:82:d6:ed:4a:4a:2d:1f:
4d:d3:5a:de:be:96:86:c5:4d:77:f2:0e:a0:ee:b1:
c0:a4:4f:fd:3c:ae:c7:80:f2:d2:23:34:e9:0a:58:
7c:a2:23:d8:94:34:b4:92:ec:99:3e:14:90:2f:02:
3b:3b:40:3b:24:f3:c9:15:eb:c2:6d:3c:5f:f7:a0:
07:39:89:0f:63:42:7c:f0:40:8b:7b:69:b0:a4:32:
96:0c:6a:43:32:d8:89:9f:e4:a2:94:59:e9:a2:e2:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:8D:55:AC:C3:B7:49:0A:8A:CF:22:33:0F:76:A5:6F:39:21:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/afd23c37-4c24-49ac-baf6-1c3a9a2d0512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:f6:ef:14:bf:20:0d:a8:65:62:83:e8:c4:91:1c:ac:29:eb:
87:4e:01:f1:9b:35:0d:51:98:75:9e:e1:bc:d0:d6:28:f6:17:
8b:04:82:11:00:08:f4:23:eb:d3:47:df:c2:f2:e4:57:34:0e:
5d:1b:d1:72:90:4e:51:3d:0f:b4:9b:e3:c7:67:4d:67:e9:3e:
42:e8:46:37:45:c8:21:7e:23:fc:73:b5:47:10:b3:11:98:ee:
29:5c:13:ac:3b:2f:95:78:bb:94:e9:f2:1e:e3:2b:6c:74:b0:
00:b7:30:39:70:9f:55:5a:66:ca:2e:a7:17:82:30:e9:bd:37:
2f:28:cf:63:c2:a2:2f:96:3d:fa:29:b7:1c:7c:7b:8d:a7:6a:
f8:61:ff:c9:eb:03:e0:41:07:2b:83:36:e0:b0:22:05:16:a4:
30:6d:b5:2b:14:19:63:09:5d:99:57:ee:e1:ca:48:18:1f:13:
0c:f1:f3:10:15:42:d9:4e:c5:08:97:8d:bc:5b:48:ae:33:3d:
9d:bc:47:e0:dc:ea:7d:de:75:13:7c:85:0e:35:3e:b2:0e:88:
95:32:b3:3a:03:a9:f7:e3:11:4c:8a:92:94:bd:30:05:f1:bd:
e5:58:a5:39:8d:4c:84:b8:75:fb:33:da:4d:2d:b2:65:8a:92:
91:05:c0:d9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUd3YcFrDoRqGUcc0WatKy41VkfFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDQwMTEwMDdaFw0yNjExMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDM3M2I4NDc5OTRmMTJlNDJhMDgwODY1N2U2ZGU2OTdkODU3NTMwYjllMjY2
M2MwNjVkNzE1ZTBlMDkyYTU1N2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4h556nBzP+zu57fZWVxlm20nXpEaxTP+hRZ15j8OoP9r6PhyN4yuVsEijr
nw1XjJYmENW2PfoO0b34nLYZhBnyruxk7jHEAMCp6oawitkGah2Sbdw41ESk/ZBn
+SkRv3hVryOM7w975npql9O+Pii6t2G0wMGbmbdWzAxZITPNcnK/xgD4lPeT3G0B
UyqUczsEPL23qqhJl7rwXlKC1u1KSi0fTdNa3r6WhsVNd/IOoO6xwKRP/Tyux4Dy
0iM06QpYfKIj2JQ0tJLsmT4UkC8COztAOyTzyRXrwm08X/egBzmJD2NCfPBAi3tp
sKQylgxqQzLYiZ/kopRZ6aLijscCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSp/I1V
rMO3SQqKzyIzD3albzkhHDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWZkMjNjMzctNGMyNC00OWFjLWJhZjYtMWMzYTlhMmQwNTEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DWQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC49u8UvyANqGVig+jEkRysKeuHTgHxmzUNUZh1
nuG80NYo9heLBIIRAAj0I+vTR9/C8uRXNA5dG9FykE5RPQ+0m+PHZ01n6T5C6EY3
RcghfiP8c7VHELMRmO4pXBOsOy+VeLuU6fIe4ytsdLAAtzA5cJ9VWmbKLqcXgjDp
vTcvKM9jwqIvlj36KbccfHuNp2r4Yf/J6wPgQQcrgzbgsCIFFqQwbbUrFBljCV2Z
V+7hykgYHxMM8fMQFULZTsUIl428W0iuMz2dvEfg3Op93nUTfIUONT6yDoiVMrM6
A6n34xFMipKUvTAF8b3lWKU5jUyEuHX7M9pNLbJlipKRBcDZ
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:09 2026 by rpki-client