Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
File: dedc9540-e267-4454-a449-e65933af6f0f.roa (raw, json)
Hash identifier: pYCXJMFTma3VCfQgyXEoLRFmTPbck/ToeCG160hk9qI=
Subject key identifier: 74:F4:B5:13:AA:CB:8E:9B:77:0D:37:0F:26:F1:38:96:B6:F4:2D:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 708A456329005C38E73005A2E22E7A8BEA5F74BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
Signing time: Fri 07 Aug 2026 05:40:43 +0000
ROA not before: Fri 07 Aug 2026 05:40:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8a:45:63:29:00:5c:38:e7:30:05:a2:e2:2e:7a:8b:ea:5f:74:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=946561d846572de9aff36c4f2ad89d6c39f813576bcee9a7aa713b5367b6b14b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:53:37:b2:ba:32:c9:b0:d2:a9:f0:dc:bb:
50:1f:d0:5e:d8:c7:ec:80:66:ad:0d:88:e7:79:91:
fe:a0:be:d7:c0:df:93:be:b5:af:e2:45:1d:e5:8d:
d9:6f:3c:4b:17:fd:00:05:3c:1e:19:20:ac:f8:37:
23:3b:ff:aa:ad:80:76:2d:31:ec:0a:46:0e:a7:dd:
fa:9f:47:f7:94:2e:43:0d:93:03:5a:c4:17:e0:e7:
50:58:25:c9:a2:58:fb:fd:ef:15:a3:1e:7f:f0:74:
9f:7d:bf:45:66:69:9c:dd:09:73:d1:56:b6:47:5f:
5d:eb:66:a9:f1:65:10:e4:d9:31:ee:13:48:a6:9f:
0e:eb:5b:bb:ce:02:0e:e0:af:f9:aa:e5:c1:93:e1:
f7:7a:cd:9f:59:6c:98:74:4c:30:f7:a6:02:12:45:
d7:65:5c:ad:9c:de:9a:45:24:23:95:a1:ec:16:09:
8f:6b:2f:99:00:a1:7c:3d:a1:b1:a2:e4:de:66:93:
56:93:1f:80:18:2c:4c:36:6d:04:50:38:17:5e:47:
39:24:c5:ea:1d:2a:7d:f4:c9:95:2c:cf:43:9e:44:
74:35:1d:c9:47:82:83:84:32:7a:aa:08:a4:3b:8e:
23:f3:6c:fc:bc:f9:5d:6a:6c:19:d0:75:26:50:13:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:B5:13:AA:CB:8E:9B:77:0D:37:0F:26:F1:38:96:B6:F4:2D:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:1000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:ec:5a:b6:de:04:19:f0:76:ef:0f:ad:07:44:53:c9:c1:33:
32:0c:25:9e:15:3e:a4:e5:35:5f:ec:c6:42:43:3b:db:29:da:
95:de:6c:4d:1c:59:cd:94:0e:a4:aa:11:9c:54:b4:38:d9:ac:
76:0e:07:5c:d0:32:c7:fa:85:b5:74:7a:e7:9f:e1:9b:d6:30:
9f:42:7e:d0:60:f7:cb:fc:ba:19:c0:25:fa:e8:04:6f:4f:7e:
a4:1e:0a:c0:46:e6:70:5c:98:57:13:6e:e5:74:25:bb:36:08:
b1:28:c8:2c:a9:04:f3:8d:47:4f:5a:17:ab:29:51:87:8a:ad:
1f:d2:67:13:fb:4d:cd:50:2f:f7:a1:d0:59:cf:a9:2e:96:2b:
b9:e6:d6:96:80:96:13:8b:d2:62:e1:bd:81:f7:6f:df:9f:ef:
cc:f6:fa:74:df:86:14:60:9b:9f:db:82:5d:38:41:c3:3e:07:
ca:11:6c:95:e5:ea:c7:89:c6:9f:ed:05:cd:97:fd:13:76:cb:
5e:6f:56:5f:48:75:a2:4a:60:11:06:70:f2:e4:5d:b4:9f:7f:
f9:75:bc:ee:dc:59:4c:0b:b9:bd:bd:f7:d5:86:c7:df:8d:10:
de:fc:89:ef:ef:1f:5e:f0:e9:8f:71:50:e3:d1:72:27:b3:65:
22:1b:a2:be
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcIpFYykAXDjnMAWi4i56i+pfdL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTQwNDNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk0NjU2MWQ4NDY1NzJkZTlhZmYzNmM0ZjJhZDg5ZDZjMzlmODEzNTc2YmNl
ZTlhN2FhNzEzYjUzNjdiNmIxNGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFoUzeyujLJsNKp8Ny7UB/QXtjH7IBmrQ2I53mR/qC+18Dfk761r+JFHeWN
2W88Sxf9AAU8HhkgrPg3Izv/qq2Adi0x7ApGDqfd+p9H95QuQw2TA1rEF+DnUFgl
yaJY+/3vFaMef/B0n32/RWZpnN0Jc9FWtkdfXetmqfFlEOTZMe4TSKafDutbu84C
DuCv+arlwZPh93rNn1lsmHRMMPemAhJF12VcrZzemkUkI5Wh7BYJj2svmQChfD2h
saLk3maTVpMfgBgsTDZtBFA4F15HOSTF6h0qffTJlSzPQ55EdDUdyUeCg4QyeqoI
pDuOI/Ns/Lz5XWpsGdB1JlATpjsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR09LUT
qsuOm3cNNw8m8TiWtvQt+zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVkYzk1NDAtZTI2Ny00NDU0LWE0NDktZTY1OTMzYWY2ZjBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCO7Fq23gQZ8HbvD60HRFPJwTMyDCWeFT6k5TVf
7MZCQzvbKdqV3mxNHFnNlA6kqhGcVLQ42ax2Dgdc0DLH+oW1dHrnn+Gb1jCfQn7Q
YPfL/LoZwCX66ARvT36kHgrARuZwXJhXE27ldCW7NgixKMgsqQTzjUdPWherKVGH
iq0f0mcT+03NUC/3odBZz6kuliu55taWgJYTi9Ji4b2B92/fn+/M9vp034YUYJuf
24JdOEHDPgfKEWyV5erHicaf7QXNl/0Tdsteb1ZfSHWiSmARBnDy5F20n3/5dbzu
3FlMC7m9vffVhsffjRDe/Inv7x9e8OmPcVDj0XIns2UiG6K+
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:42 2026 by rpki-client