Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c701a1cf-9c34-4c52-8cf9-b4f7a34eac91.roa
File: c701a1cf-9c34-4c52-8cf9-b4f7a34eac91.roa (raw, json)
Hash identifier: hitKf4lb1OGMeRgc/6uWZ+8KPzZhEnEk2wkaSyr2qkQ=
Subject key identifier: 1E:6C:74:13:98:B5:C6:E8:15:6E:11:E8:78:0A:BD:50:CB:26:DA:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42EB385DB6710A766B97338B2FE356245135DBAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c701a1cf-9c34-4c52-8cf9-b4f7a34eac91.roa
Signing time: Wed 09 Sep 2026 15:12:29 +0000
ROA not before: Wed 09 Sep 2026 15:12:29 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:eb:38:5d:b6:71:0a:76:6b:97:33:8b:2f:e3:56:24:51:35:db:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:29 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=eaf9ba6334f21176ca35d8163033aa85b423c860a00cdc2008627b7c171efc1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:96:f8:6e:38:eb:13:fd:8e:d9:98:cf:d7:
53:be:9a:c4:45:1d:da:40:f3:34:00:78:9c:b6:34:
39:91:f6:13:27:60:dc:99:1d:60:b8:37:21:6f:08:
cf:9b:36:58:f3:57:a1:20:04:9b:c9:5e:0a:a7:11:
f6:e7:a4:bd:41:fc:57:c7:5f:02:75:bf:00:93:67:
64:d1:5a:6a:90:b0:90:97:9c:02:fe:68:c5:1c:53:
d7:6c:61:9e:fb:a0:57:a0:10:1d:2a:b3:5d:2b:bb:
61:ae:a6:a6:8e:45:1f:16:60:97:95:d8:03:0d:eb:
e0:30:70:a1:d8:97:03:ab:28:b3:0b:99:0e:73:cc:
81:92:99:4a:b5:ad:a5:89:22:8a:e4:9f:25:2b:da:
05:50:7f:61:34:15:38:75:7f:7b:74:eb:66:f4:2f:
83:45:63:d6:51:2b:35:d6:6f:74:b5:d2:0e:13:93:
90:e0:3a:b8:73:0d:44:e3:13:f3:3c:f9:2c:41:ea:
54:20:81:f1:be:44:1b:33:7b:bb:60:6f:96:20:54:
8c:de:1e:25:6b:8a:55:d8:bf:5c:92:07:1e:df:8f:
c5:53:61:f6:7e:fa:f9:ff:5c:99:30:c2:95:2a:f0:
d9:83:73:7f:d1:c1:59:77:2b:ce:e3:e9:3f:09:8b:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6C:74:13:98:B5:C6:E8:15:6E:11:E8:78:0A:BD:50:CB:26:DA:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c701a1cf-9c34-4c52-8cf9-b4f7a34eac91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4880::/48
Signature Algorithm: sha256WithRSAEncryption
77:00:e4:99:00:1f:7a:be:d9:98:75:93:c6:22:4c:8c:1e:c2:
fc:b0:2c:55:e9:09:19:3d:ed:e9:63:a1:7e:35:01:64:08:12:
ea:1b:a3:4b:af:c4:fa:b7:78:fe:54:f9:8f:91:4c:95:09:0d:
b2:77:10:23:38:9c:e4:0f:93:00:25:35:32:34:02:d4:e9:76:
ac:17:90:6e:35:8e:06:54:60:f8:7d:60:e0:6e:49:3d:ef:8c:
6f:26:de:64:7c:44:f7:b5:b6:73:19:1f:f8:1a:95:da:b8:e0:
e9:a5:08:f9:df:28:b9:5d:44:24:46:28:be:56:ff:d2:dc:10:
34:2b:36:b7:49:23:2d:a2:57:d0:68:01:58:36:58:2f:d4:4e:
24:ff:dc:08:b1:21:87:77:75:fc:e6:51:91:87:35:3a:06:5f:
21:c4:e1:11:fc:1b:45:21:1c:7d:bb:4e:1f:20:79:e8:23:5b:
13:e9:d6:10:35:22:d6:19:ea:3b:36:7a:cd:88:28:96:60:65:
4a:17:8a:e6:83:35:7b:8d:29:73:1c:7f:4b:ac:27:af:13:0b:
89:6f:33:a6:2c:da:96:53:05:fb:e3:f6:19:36:ab:e0:bb:46:
f3:f9:82:94:15:4c:fb:9b:03:67:ce:cc:50:68:85:e3:62:61:
10:54:e3:14
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQus4XbZxCnZrlzOLL+NWJFE126wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNTEyMjlaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGVhZjliYTYzMzRmMjExNzZjYTM1ZDgxNjMwMzNhYTg1YjQyM2M4NjBhMDBj
ZGMyMDA4NjI3YjdjMTcxZWZjMWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJJwlvhuOOsT/Y7ZmM/XU76axEUd2kDzNAB4nLY0OZH2Eydg3JkdYLg3IW8I
z5s2WPNXoSAEm8leCqcR9uekvUH8V8dfAnW/AJNnZNFaapCwkJecAv5oxRxT12xh
nvugV6AQHSqzXSu7Ya6mpo5FHxZgl5XYAw3r4DBwodiXA6soswuZDnPMgZKZSrWt
pYkiiuSfJSvaBVB/YTQVOHV/e3TrZvQvg0Vj1lErNdZvdLXSDhOTkOA6uHMNROMT
8zz5LEHqVCCB8b5EGzN7u2BvliBUjN4eJWuKVdi/XJIHHt+PxVNh9n76+f9cmTDC
lSrw2YNzf9HBWXcrzuPpPwmL3isCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQebHQT
mLXG6BVuEeh4Cr1QyybaZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzcwMWExY2YtOWMzNC00YzUyLThjZjktYjRmN2EzNGVhYzkxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GhI
gDANBgkqhkiG9w0BAQsFAAOCAQEAdwDkmQAfer7ZmHWTxiJMjB7C/LAsVekJGT3t
6WOhfjUBZAgS6hujS6/E+rd4/lT5j5FMlQkNsncQIzic5A+TACU1MjQC1Ol2rBeQ
bjWOBlRg+H1g4G5JPe+MbybeZHxE97W2cxkf+BqV2rjg6aUI+d8ouV1EJEYovlb/
0twQNCs2t0kjLaJX0GgBWDZYL9ROJP/cCLEhh3d1/OZRkYc1OgZfIcThEfwbRSEc
fbtOHyB56CNbE+nWEDUi1hnqOzZ6zYgolmBlSheK5oM1e40pcxx/S6wnrxMLiW8z
pizallMF++P2GTar4LtG8/mClBVM+5sDZ87MUGiF42JhEFTjFA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:58 2026 by rpki-client