Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7f51085-242e-4975-929d-5a48b9aa7650.roa
File: b7f51085-242e-4975-929d-5a48b9aa7650.roa (raw, json)
Hash identifier: bKaitX/wcXPe7N8qDY5sjSMXG9j3Il7XZ1MpHm8VnX4=
Subject key identifier: 69:0E:42:AA:DB:85:71:BE:78:C2:12:17:24:A2:E0:F9:EA:D0:73:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5322C150FA3B3204C5A7ED4644B9ACAAA7D599FE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7f51085-242e-4975-929d-5a48b9aa7650.roa
Signing time: Mon 03 Aug 2026 01:30:18 +0000
ROA not before: Mon 03 Aug 2026 01:30:18 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:22:c1:50:fa:3b:32:04:c5:a7:ed:46:44:b9:ac:aa:a7:d5:99:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:18 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=26f6fe14904375742a24bce05e54ae770294f1da1e06bd047007e26c706d4779, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:64:6f:e2:be:50:56:be:1b:be:87:40:2c:
87:ff:8a:b8:53:7f:0d:a3:0d:f9:6b:2a:8f:41:a2:
e2:6e:7f:fa:a7:66:b7:45:d9:64:16:a7:db:bf:47:
45:42:6e:a1:a2:18:09:47:a7:ac:21:34:72:9a:c2:
af:db:95:04:08:7b:a2:dc:f8:ad:10:3b:b0:ac:b8:
d1:a1:42:18:51:b0:2f:ed:f5:c6:df:9d:72:72:4a:
f3:97:26:9c:0d:3a:5e:c5:e4:08:c0:ae:54:0f:9d:
f6:df:21:c1:36:f9:52:55:0f:45:bd:10:91:c8:42:
4f:8b:d2:00:97:7c:34:10:b2:28:16:c5:c4:73:ac:
5a:8e:92:5f:53:4f:7c:ee:e7:4c:86:f5:c1:68:38:
08:51:71:1a:e6:76:f4:2c:74:2c:cd:c2:ca:e2:6d:
c8:d1:c6:ee:c8:88:0d:70:7a:8a:6d:11:c9:76:1a:
6b:88:78:2c:e6:37:e6:52:bd:40:14:6d:d8:a6:d8:
8b:cb:1d:35:24:bf:51:b3:5b:07:42:92:00:cb:9e:
19:21:88:1c:07:6d:f8:66:d3:08:79:63:e4:78:92:
7c:39:2a:69:b8:e2:f4:50:e6:c4:99:07:7c:d2:a1:
26:77:9d:52:38:8a:f4:5e:0a:65:77:eb:a9:ec:c4:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:42:AA:DB:85:71:BE:78:C2:12:17:24:A2:E0:F9:EA:D0:73:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7f51085-242e-4975-929d-5a48b9aa7650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5000::/40
Signature Algorithm: sha256WithRSAEncryption
28:7f:fb:7e:7a:c8:34:72:07:56:ae:a6:27:65:e2:a7:5a:d2:
01:6f:c7:78:ac:98:0d:ff:c7:a5:3d:00:13:a2:97:e5:a5:20:
4c:4d:43:2f:52:7f:4d:3d:08:d8:a4:72:72:a0:26:73:77:d3:
de:b8:f1:0d:7d:e2:15:eb:10:f9:80:86:ab:c5:3f:59:52:de:
bd:9a:ee:2c:f2:5d:8d:c8:10:f2:40:e9:72:40:56:6d:1e:2c:
1f:a6:71:e8:f4:4f:a9:93:e1:88:aa:62:4d:6d:61:c2:06:1f:
01:15:0d:33:3e:00:a6:79:5a:3d:b0:42:49:4e:f1:29:4b:9a:
64:b4:5e:d2:5a:7c:99:be:72:1c:47:0d:8c:59:4e:99:0b:86:
c7:16:5b:75:ae:fe:5e:ae:20:f2:7d:c8:ae:f9:a0:f4:b3:ae:
02:50:6a:f5:79:c0:59:3c:41:79:db:65:62:22:9a:da:2d:62:
3b:d8:cd:18:e5:db:86:7b:fe:ef:90:ce:86:b5:b0:d2:75:a8:
90:83:06:11:4b:85:d5:36:d9:7d:12:17:cf:2b:15:d0:63:3f:
13:d6:dd:7f:c6:8c:d1:e6:72:28:75:87:b5:22:9e:97:fe:32:
81:e4:5c:83:12:7d:da:90:26:2b:52:b8:01:05:42:9f:28:cf:
cf:d7:0c:ca
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUyLBUPo7MgTFp+1GRLmsqqfVmf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDMwMTMwMThaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDI2ZjZmZTE0OTA0Mzc1NzQyYTI0YmNlMDVlNTRhZTc3MDI5NGYxZGExZTA2
YmQwNDcwMDdlMjZjNzA2ZDQ3NzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbTZG/ivlBWvhu+h0Ash/+KuFN/DaMN+Wsqj0Gi4m5/+qdmt0XZZBan279H
RUJuoaIYCUenrCE0cprCr9uVBAh7otz4rRA7sKy40aFCGFGwL+31xt+dcnJK85cm
nA06XsXkCMCuVA+d9t8hwTb5UlUPRb0QkchCT4vSAJd8NBCyKBbFxHOsWo6SX1NP
fO7nTIb1wWg4CFFxGuZ29Cx0LM3CyuJtyNHG7siIDXB6im0RyXYaa4h4LOY35lK9
QBRt2KbYi8sdNSS/UbNbB0KSAMueGSGIHAdt+GbTCHlj5HiSfDkqabji9FDmxJkH
fNKhJnedUjiK9F4KZXfrqezE3rECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRpDkKq
24VxvnjCEhckouD56tBz/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjdmNTEwODUtMjQyZS00OTc1LTkyOWQtNWE0OGI5YWE3NjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAof/t+esg0cgdWrqYnZeKnWtIBb8d4rJgN/8el
PQATopflpSBMTUMvUn9NPQjYpHJyoCZzd9PeuPENfeIV6xD5gIarxT9ZUt69mu4s
8l2NyBDyQOlyQFZtHiwfpnHo9E+pk+GIqmJNbWHCBh8BFQ0zPgCmeVo9sEJJTvEp
S5pktF7SWnyZvnIcRw2MWU6ZC4bHFlt1rv5eriDyfciu+aD0s64CUGr1ecBZPEF5
22ViIpraLWI72M0Y5duGe/7vkM6GtbDSdaiQgwYRS4XVNtl9EhfPKxXQYz8T1t1/
xozR5nIodYe1Ip6X/jKB5FyDEn3akCYrUrgBBUKfKM/P1wzK
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:20 2026 by rpki-client