Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa
File: c8af18fc-ae06-42ae-9533-a5516ea722d4.roa (raw, json)
Hash identifier: A/kbi38uTIlWXWKXA85QNsvttnGh8holrVpXa1Vtjyc=
Subject key identifier: A0:BF:52:AB:D5:38:CC:1A:D5:E7:EE:4B:D3:C6:A4:F9:E2:C6:C1:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: E492FC7773B69810B69A37FD9B58A477F6DCD8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa
Signing time: Fri 07 Aug 2026 05:10:06 +0000
ROA not before: Fri 07 Aug 2026 05:10:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e4:92:fc:77:73:b6:98:10:b6:9a:37:fd:9b:58:a4:77:f6:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a0120dddc5551bff135cacd55bdca0c85f1adadad8d471d3491150e1c33630d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e4:67:9b:49:b2:ee:74:1a:72:b8:2d:99:09:
95:ee:ba:6d:e6:53:d8:a6:4f:22:68:85:55:40:81:
e3:f5:4d:8d:18:30:cb:0f:ca:8a:9c:77:11:59:c8:
63:84:7b:a5:70:08:76:3e:de:e3:07:46:51:49:e5:
ac:f8:5f:49:98:df:53:6b:72:ee:5a:0a:1a:58:d4:
89:b7:e6:ed:84:2c:e8:7a:84:25:d9:ea:ec:57:ca:
18:30:76:fb:b6:21:04:0c:3c:54:fe:4d:c4:89:30:
cb:d1:e5:11:b5:6d:e2:c6:1e:cc:9e:29:91:1b:fe:
7b:1d:09:ef:c2:81:56:7a:af:89:69:98:73:a8:e2:
ea:08:b0:56:b8:7e:b1:1a:95:40:92:12:28:85:c7:
e7:87:cc:70:d9:dd:eb:f3:56:a7:96:ee:c4:7f:a7:
bf:17:48:d0:88:39:d1:c6:67:85:cb:8b:8a:ab:5c:
7e:ca:f3:d1:6b:03:47:f9:85:21:45:76:87:a6:77:
45:0c:12:0a:a5:01:57:2b:f8:c6:07:d3:27:79:3b:
7d:1d:3d:ba:05:7b:91:85:4e:51:77:47:7d:a8:15:
5e:e6:f1:ea:be:2f:eb:35:7c:8f:da:1f:d8:74:e8:
0a:7b:75:fc:f0:9a:b5:b4:0b:c8:f5:0d:5e:0a:42:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:52:AB:D5:38:CC:1A:D5:E7:EE:4B:D3:C6:A4:F9:E2:C6:C1:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:9080::/48
Signature Algorithm: sha256WithRSAEncryption
81:a1:2c:7f:96:d8:0c:0a:a0:2b:85:b0:a7:18:46:2a:91:51:
d8:a2:ec:63:e7:de:07:9b:65:7c:d7:2b:66:b7:e3:3b:a1:27:
bd:61:28:f4:ee:cc:02:e6:11:d3:ed:f6:99:08:e9:02:12:25:
67:3e:60:d1:f8:73:6c:fa:80:d6:b6:cd:85:08:47:65:ec:43:
be:df:bd:45:c6:17:81:a9:f1:63:82:db:f7:55:52:af:e3:a7:
8f:2e:61:10:d0:ef:34:fc:c9:e2:60:85:a7:b4:77:bf:1f:9e:
df:8a:b6:b0:70:c5:d2:40:57:d5:c6:83:88:6a:74:44:5e:eb:
8e:e9:58:43:ac:6a:04:fe:76:7e:49:90:2a:67:d9:ec:f0:a7:
9b:98:3f:23:45:6d:e3:cf:07:8d:84:fe:61:fb:a9:96:73:40:
30:00:83:65:41:80:c6:cd:1a:bb:1a:1c:f9:eb:c7:59:88:ef:
bc:17:f0:57:4f:f2:69:e7:fd:9b:95:ef:67:f4:e9:35:06:15:
d7:41:ee:95:e6:3e:25:d9:2a:2c:19:96:7c:5c:19:39:b4:97:
c4:b0:fd:aa:0b:99:2f:98:f2:3f:fa:94:8f:0b:a9:c7:f9:53:
00:fc:9d:0a:be:ab:31:4e:f4:df:ae:84:31:9c:38:dc:f9:13:
1a:a5:77:ad
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUAOSS/HdztpgQtpo3/ZtYpHf23NgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTEwMDZaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGEwMTIwZGRkYzU1NTFiZmYxMzVjYWNkNTViZGNhMGM4NWYxYWRhZGFkOGQ0
NzFkMzQ5MTE1MGUxYzMzNjMwZDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPfkZ5tJsu50GnK4LZkJle66beZT2KZPImiFVUCB4/VNjRgwyw/Kipx3EVnI
Y4R7pXAIdj7e4wdGUUnlrPhfSZjfU2ty7loKGljUibfm7YQs6HqEJdnq7FfKGDB2
+7YhBAw8VP5NxIkwy9HlEbVt4sYezJ4pkRv+ex0J78KBVnqviWmYc6ji6giwVrh+
sRqVQJISKIXH54fMcNnd6/NWp5buxH+nvxdI0Ig50cZnhcuLiqtcfsrz0WsDR/mF
IUV2h6Z3RQwSCqUBVyv4xgfTJ3k7fR09ugV7kYVOUXdHfagVXubx6r4v6zV8j9of
2HToCnt1/PCatbQLyPUNXgpCJrkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSgv1Kr
1TjMGtXn7kvTxqT54sbBBDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzhhZjE4ZmMtYWUwNi00MmFlLTk1MzMtYTU1MTZlYTcyMmQ0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAgaEsf5bYDAqgK4WwpxhGKpFR2KLsY+feB5tl
fNcrZrfjO6EnvWEo9O7MAuYR0+32mQjpAhIlZz5g0fhzbPqA1rbNhQhHZexDvt+9
RcYXganxY4Lb91VSr+Onjy5hENDvNPzJ4mCFp7R3vx+e34q2sHDF0kBX1caDiGp0
RF7rjulYQ6xqBP52fkmQKmfZ7PCnm5g/I0Vt488HjYT+YfuplnNAMACDZUGAxs0a
uxoc+evHWYjvvBfwV0/yaef9m5XvZ/TpNQYV10HuleY+JdkqLBmWfFwZObSXxLD9
qguZL5jyP/qUjwupx/lTAPydCr6rMU70366EMZw43PkTGqV3rQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:31 2026 by rpki-client