Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa
File: bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa (raw, json)
Hash identifier: DMr24WbkQJpFIxHRrUpjd/3aJ4KXvYan4w2CDnai5qE=
Subject key identifier: 2A:7C:B6:FB:40:E0:67:E9:80:E2:11:B1:4F:E0:D6:B8:30:12:6E:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B2E58470DE2445E647E8896D2BD99B3DA7A17FC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa
Signing time: Fri 07 Aug 2026 05:00:29 +0000
ROA not before: Fri 07 Aug 2026 05:00:29 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2e:58:47:0d:e2:44:5e:64:7e:88:96:d2:bd:99:b3:da:7a:17:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:29 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1451da99aa08a29b35c2107f91c6358be1db22c6bc3036d716ce2f4b7c99273d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:a2:52:ce:68:ca:c6:27:b5:4f:ef:7e:97:
89:1e:95:92:71:fb:27:e1:c7:bb:3a:27:bf:9f:36:
52:75:88:6c:aa:a3:c7:79:fa:21:51:8b:31:01:a1:
d0:24:12:00:bc:c5:4a:fc:6d:a5:ad:c2:be:32:16:
3e:8e:c0:bb:a5:d4:bb:0f:8f:63:67:c3:4c:3c:60:
fb:bc:f0:83:aa:f0:57:14:12:d7:0b:b2:94:1e:ff:
41:85:91:ca:64:de:38:49:08:0a:2a:cd:20:7f:e7:
c1:53:41:aa:38:28:94:74:1c:91:26:f5:58:3d:ed:
5c:4e:89:8e:77:58:81:d3:12:ad:e4:c4:98:e3:68:
c0:13:70:78:8a:60:7c:02:4b:82:e1:3d:cd:25:71:
d6:ae:b0:c2:e6:d9:9d:3c:73:58:53:52:f9:f0:f7:
d6:0f:aa:ad:65:48:d5:0a:2e:24:24:b1:47:32:37:
31:78:14:c5:1b:af:b4:0e:d9:b2:6b:87:15:2c:17:
27:cf:0b:58:23:2a:84:d3:44:1d:fc:62:a5:db:fe:
9b:86:6d:52:24:15:9f:de:07:49:29:cb:2c:f7:16:
73:46:3c:a3:28:a2:88:06:0e:f4:ab:90:79:20:a6:
31:28:1f:36:fa:c8:a2:52:d4:90:b2:16:34:3f:e7:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:B6:FB:40:E0:67:E9:80:E2:11:B1:4F:E0:D6:B8:30:12:6E:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4020::/48
Signature Algorithm: sha256WithRSAEncryption
37:9c:a7:79:ce:01:dc:93:96:93:0d:4f:08:a5:86:60:40:4e:
f0:d4:46:58:12:3e:35:02:1f:24:fe:e7:6b:ce:0f:8d:42:b8:
f8:5d:51:39:75:5c:ad:ad:96:0b:10:fe:cd:47:5e:f8:34:37:
fd:89:0d:3d:f6:ff:5b:ca:3e:f2:61:7b:2f:c8:c6:e1:f9:49:
09:f9:e1:46:16:a3:f6:8a:9f:ac:25:c3:62:4c:8a:4b:11:f6:
95:10:b6:08:95:00:c2:81:1d:33:b5:ad:06:af:b9:aa:4e:69:
86:19:93:70:3d:54:12:55:d5:bb:b3:b4:df:65:bf:61:1e:e9:
7d:e4:fa:08:59:0f:b5:b2:53:4d:9e:6b:8d:d5:9e:87:f2:52:
e7:e0:32:74:be:1c:c2:f0:ec:20:6c:11:64:ce:7d:48:f0:a7:
13:fa:b3:08:11:7c:9a:ae:f4:bf:84:f1:1a:fc:bf:4b:fc:be:
1d:da:40:f5:8a:d0:48:98:55:ae:db:6b:92:a3:6b:14:36:7f:
0a:54:e8:ad:b5:14:84:26:6e:c3:64:b1:66:9f:56:eb:a8:01:
ca:d8:9b:6c:58:d3:7e:bd:60:a4:2b:35:9f:77:bf:6e:72:14:
2c:80:d0:c6:cd:eb:48:ef:64:83:6d:cf:74:89:08:af:bf:35:
ff:50:62:41
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKy5YRw3iRF5kfoiW0r2Zs9p6F/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTAwMjlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0NTFkYTk5YWEwOGEyOWIzNWMyMTA3ZjkxYzYzNThiZTFkYjIyYzZiYzMw
MzZkNzE2Y2UyZjRiN2M5OTI3M2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKNeolLOaMrGJ7VP736XiR6VknH7J+HHuzonv582UnWIbKqjx3n6IVGLMQGh
0CQSALzFSvxtpa3CvjIWPo7Au6XUuw+PY2fDTDxg+7zwg6rwVxQS1wuylB7/QYWR
ymTeOEkICirNIH/nwVNBqjgolHQckSb1WD3tXE6JjndYgdMSreTEmONowBNweIpg
fAJLguE9zSVx1q6wwubZnTxzWFNS+fD31g+qrWVI1QouJCSxRzI3MXgUxRuvtA7Z
smuHFSwXJ88LWCMqhNNEHfxipdv+m4ZtUiQVn94HSSnLLPcWc0Y8oyiiiAYO9KuQ
eSCmMSgfNvrIolLUkLIWND/nTxkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQqfLb7
QOBn6YDiEbFP4Na4MBJuFzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmY1NDA0YzItYmNiZS00ZGY0LTg2Y2UtNzJjZWIwNjdmNjY2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A
IDANBgkqhkiG9w0BAQsFAAOCAQEAN5ynec4B3JOWkw1PCKWGYEBO8NRGWBI+NQIf
JP7na84PjUK4+F1ROXVcra2WCxD+zUde+DQ3/YkNPfb/W8o+8mF7L8jG4flJCfnh
Rhaj9oqfrCXDYkyKSxH2lRC2CJUAwoEdM7WtBq+5qk5phhmTcD1UElXVu7O032W/
YR7pfeT6CFkPtbJTTZ5rjdWeh/JS5+AydL4cwvDsIGwRZM59SPCnE/qzCBF8mq70
v4TxGvy/S/y+HdpA9YrQSJhVrttrkqNrFDZ/ClTorbUUhCZuw2SxZp9W66gBytib
bFjTfr1gpCs1n3e/bnIULIDQxs3rSO9kg23PdIkIr781/1BiQQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:06 2026 by rpki-client