Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
File: c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa (raw, json)
Hash identifier: 2/dsrT9mw7ycvrGewvrkrpYvihqYuthWuyGE/8HI89o=
Subject key identifier: 58:6B:0A:9B:6F:28:3A:5C:73:6F:2D:69:05:3B:48:9F:19:E6:97:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22F50DB724FCB446A0B6F48BCD21B487BF6FE7C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
Signing time: Fri 07 Aug 2026 04:50:24 +0000
ROA not before: Fri 07 Aug 2026 04:50:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f5:0d:b7:24:fc:b4:46:a0:b6:f4:8b:cd:21:b4:87:bf:6f:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=145c22cfa5a3548ee9798c249c5d29f49c2792dfdf4ec8022deac02ed15256cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:fb:d6:ba:04:52:a0:7a:ba:0a:d0:fa:3b:
c2:75:23:44:9c:74:51:cd:73:6e:99:84:79:8d:15:
2d:a5:39:b0:96:f5:ea:ef:02:29:37:5e:c1:6e:fe:
19:7b:ac:e5:36:21:2e:eb:49:d0:5d:e4:02:87:bf:
c5:e7:23:2b:6f:01:c5:9e:dc:01:e5:0b:1e:97:33:
ec:0d:39:ab:3a:ce:8e:68:87:95:37:21:af:4d:f9:
40:eb:b5:9a:f5:3a:4d:65:4b:96:23:d3:6a:6c:12:
89:b3:81:cf:e5:73:a1:25:c1:6a:b9:c1:a2:c6:73:
93:22:24:15:fb:07:47:06:39:04:8a:22:cb:52:71:
17:f3:c3:74:60:1d:3a:ad:ba:53:a9:39:a4:3e:c1:
b1:6a:72:a9:ce:b3:b6:33:57:5f:f7:81:7d:ad:7c:
74:32:36:51:f3:71:eb:83:88:9b:92:29:5d:e0:a1:
30:b1:e7:5c:e6:68:bf:ec:83:d1:e9:cd:38:f6:f3:
e8:8e:5f:0c:dd:06:eb:9d:b4:8e:e9:d7:09:d0:24:
f4:c3:5c:6f:3c:ec:9f:f8:b3:a1:b4:88:58:6a:38:
08:e4:68:e6:61:a1:23:ed:cd:4f:83:0f:bb:91:7d:
f5:a6:fe:05:87:87:8f:4b:82:35:7a:bf:df:91:62:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:0A:9B:6F:28:3A:5C:73:6F:2D:69:05:3B:48:9F:19:E6:97:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
15:8a:39:6a:93:e1:2d:1a:c4:71:05:fc:48:a3:45:46:70:f3:
7a:46:ae:26:34:15:3e:4b:49:95:34:e8:50:5e:6f:52:60:eb:
0f:eb:2b:24:a0:11:0d:e4:86:db:ea:1a:6e:f3:87:68:d8:71:
16:db:8d:bc:5e:29:d4:cc:3f:3c:85:fa:52:59:a1:53:9d:15:
51:79:7c:8d:2d:1e:49:89:8e:ad:06:1b:38:f7:07:80:aa:e6:
fa:73:30:c0:98:d8:9c:31:7b:06:cc:ce:00:da:df:74:00:1c:
98:45:98:d2:c8:f2:25:f0:93:43:3f:08:59:7a:bb:17:4a:6a:
78:cc:12:e9:30:4e:98:92:d8:f1:4c:31:d9:50:78:52:18:2f:
1c:64:00:a9:e9:5b:d2:86:f7:e1:d0:cb:a8:33:96:65:76:99:
1f:34:9e:cf:98:f0:25:d2:2d:51:d5:b4:27:48:03:c0:b7:cd:
02:e4:cc:49:2c:e6:ac:b5:c0:ef:07:d9:36:6d:2d:6d:25:f4:
f6:9f:97:7c:5a:3f:28:e6:84:49:c1:58:7c:bd:59:84:56:1e:
e3:f7:54:71:2d:64:39:83:2f:32:76:7b:84:60:6d:32:ee:c8:
0f:3a:bd:91:46:42:16:62:ba:19:83:91:83:94:60:c5:5c:c7:
17:4e:08:dd
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUIvUNtyT8tEagtvSLzSG0h79v58YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMjRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0NWMyMmNmYTVhMzU0OGVlOTc5OGMyNDljNWQyOWY0OWMyNzkyZGZkZjRl
YzgwMjJkZWFjMDJlZDE1MjU2Y2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkR+9a6BFKgeroK0Po7wnUjRJx0Uc1zbpmEeY0VLaU5sJb16u8CKTdewW7+
GXus5TYhLutJ0F3kAoe/xecjK28BxZ7cAeULHpcz7A05qzrOjmiHlTchr035QOu1
mvU6TWVLliPTamwSibOBz+VzoSXBarnBosZzkyIkFfsHRwY5BIoiy1JxF/PDdGAd
Oq26U6k5pD7BsWpyqc6ztjNXX/eBfa18dDI2UfNx64OIm5IpXeChMLHnXOZov+yD
0enNOPbz6I5fDN0G6520junXCdAk9MNcbzzsn/izobSIWGo4CORo5mGhI+3NT4MP
u5F99ab+BYeHj0uCNXq/35Fi4SkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRYawqb
byg6XHNvLWkFO0ifGeaXCTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzRhY2Y0YmEtMDVjNS00ZTBhLTlkZmQtNzBjZjMyMjE4YmI0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA
4DANBgkqhkiG9w0BAQsFAAOCAQEAFYo5apPhLRrEcQX8SKNFRnDzekauJjQVPktJ
lTToUF5vUmDrD+srJKARDeSG2+oabvOHaNhxFtuNvF4p1Mw/PIX6UlmhU50VUXl8
jS0eSYmOrQYbOPcHgKrm+nMwwJjYnDF7BszOANrfdAAcmEWY0sjyJfCTQz8IWXq7
F0pqeMwS6TBOmJLY8Uwx2VB4UhgvHGQAqelb0ob34dDLqDOWZXaZHzSez5jwJdIt
UdW0J0gDwLfNAuTMSSzmrLXA7wfZNm0tbSX09p+XfFo/KOaEScFYfL1ZhFYe4/dU
cS1kOYMvMnZ7hGBtMu7IDzq9kUZCFmK6GYORg5RgxVzHF04I3Q==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:41 2026 by rpki-client