Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9804154-ae28-42df-b30f-c5a6353036e5.roa
File: e9804154-ae28-42df-b30f-c5a6353036e5.roa (raw, json)
Hash identifier: CqVIKpxibD7yzPdPaQ1Qktk7mNPlNZXhscFLcLWr6/w=
Subject key identifier: 00:0A:71:FC:D2:D6:05:22:21:A6:15:EC:C1:7A:16:A2:F8:07:24:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76EA6706F50DDF122807D4266DB6848AA437EB65
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9804154-ae28-42df-b30f-c5a6353036e5.roa
Signing time: Wed 09 Sep 2026 16:15:16 +0000
ROA not before: Wed 09 Sep 2026 16:15:16 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ea:67:06:f5:0d:df:12:28:07:d4:26:6d:b6:84:8a:a4:37:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:16 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=5928411e3f4df74e10bc9e38d476003e9cc6c40a7755ed7b5d48867a23ffc1d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:4b:0e:e0:f0:7a:f9:21:98:68:13:42:bf:
b7:68:b3:12:6d:a0:6c:3b:06:35:ba:81:27:3c:84:
18:a3:b4:98:ba:fb:d6:2a:43:8d:e3:38:5c:f4:1b:
79:62:da:83:3f:dd:c8:a0:e1:a1:1b:c0:67:75:62:
2c:a0:1f:60:86:81:25:79:e0:33:d5:5a:d3:01:4b:
00:24:93:64:65:df:cb:25:77:cf:f2:d2:39:e5:c9:
dd:9b:af:0d:8f:62:b5:a5:36:67:dd:ad:9c:b0:38:
ea:7f:9a:88:9a:e5:dc:b5:fb:81:ae:e2:dc:c5:5b:
4f:a5:fe:fa:2a:83:b0:c5:0c:0b:0d:e2:bb:cf:0e:
ab:b7:0f:be:7d:9f:16:57:07:85:a0:09:eb:3d:54:
4d:62:83:cb:eb:08:bc:46:ea:a1:66:66:44:5f:57:
b9:80:5b:07:94:0b:c3:ba:7a:59:3e:1d:83:3f:92:
f4:47:e3:3e:7e:3f:cd:f0:90:b4:29:d6:a3:83:06:
49:a5:6c:f1:3e:25:f5:55:cc:aa:bc:ee:15:58:94:
1c:2d:3e:a4:29:df:9c:12:f9:e4:25:77:b4:e5:5b:
fd:1d:16:20:01:92:c9:78:d6:f1:05:0d:c0:3d:2f:
1c:e0:15:06:60:a9:33:12:44:5b:95:3d:22:4d:f9:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:71:FC:D2:D6:05:22:21:A6:15:EC:C1:7A:16:A2:F8:07:24:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9804154-ae28-42df-b30f-c5a6353036e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:8800::/40
Signature Algorithm: sha256WithRSAEncryption
8b:d3:af:55:ad:67:0e:94:7a:a7:11:f1:1d:de:f0:7c:42:10:
02:93:e2:16:88:4c:d3:19:b6:70:2b:ab:1f:a6:af:46:7b:4e:
e9:75:bb:8a:49:19:e6:5b:b4:46:c0:ee:f8:df:c0:90:db:88:
bc:bf:2d:cf:7a:10:c4:66:e6:41:fb:20:a7:98:c7:cc:44:4b:
09:a0:83:2e:88:23:d9:c8:38:9a:81:33:28:f4:b1:c7:20:c3:
45:4a:09:5c:e8:c8:b4:47:bf:8d:8d:1b:a3:b8:f4:a0:f7:ba:
9e:26:48:ad:d4:f6:e5:e0:bb:b7:fa:a1:35:a9:84:a9:f0:58:
6e:68:6a:26:4b:1a:4a:9d:a9:f1:30:7a:c9:cc:5e:f7:78:bf:
c6:14:8e:21:2a:cd:13:81:cf:ba:6c:24:8b:a7:64:09:74:4c:
75:fc:44:e9:fc:51:27:fc:85:13:4b:3f:6a:71:89:ed:d4:c5:
4c:5b:70:fe:0a:50:c6:20:8c:eb:63:f3:8a:3d:bf:b7:17:b8:
b1:a4:07:ab:a3:22:60:0c:bf:d2:b6:f2:5c:3c:93:2f:42:c5:
96:c2:73:19:30:c4:cb:f2:ed:24:fd:d7:41:2f:67:92:69:8f:
60:e8:ed:0d:8c:ce:93:b5:7b:01:1a:1e:ee:a3:ca:73:15:5f:
89:6c:80:84
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdupnBvUN3xIoB9QmbbaEiqQ362UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE1MTZaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDU5Mjg0MTFlM2Y0ZGY3NGUxMGJjOWUzOGQ0NzYwMDNlOWNjNmM0MGE3NzU1
ZWQ3YjVkNDg4NjdhMjNmZmMxZDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4ySw7g8Hr5IZhoE0K/t2izEm2gbDsGNbqBJzyEGKO0mLr71ipDjeM4XPQb
eWLagz/dyKDhoRvAZ3ViLKAfYIaBJXngM9Va0wFLACSTZGXfyyV3z/LSOeXJ3Zuv
DY9itaU2Z92tnLA46n+aiJrl3LX7ga7i3MVbT6X++iqDsMUMCw3iu88Oq7cPvn2f
FlcHhaAJ6z1UTWKDy+sIvEbqoWZmRF9XuYBbB5QLw7p6WT4dgz+S9EfjPn4/zfCQ
tCnWo4MGSaVs8T4l9VXMqrzuFViUHC0+pCnfnBL55CV3tOVb/R0WIAGSyXjW8QUN
wD0vHOAVBmCpMxJEW5U9Ik358sUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQACnH8
0tYFIiGmFezBehai+AckpzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTk4MDQxNTQtYWUyOC00MmRmLWIzMGYtYzVhNjM1MzAzNmU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DaI
MA0GCSqGSIb3DQEBCwUAA4IBAQCL069VrWcOlHqnEfEd3vB8QhACk+IWiEzTGbZw
K6sfpq9Ge07pdbuKSRnmW7RGwO7438CQ24i8vy3PehDEZuZB+yCnmMfMREsJoIMu
iCPZyDiagTMo9LHHIMNFSglc6Mi0R7+NjRujuPSg97qeJkit1Pbl4Lu3+qE1qYSp
8FhuaGomSxpKnanxMHrJzF73eL/GFI4hKs0Tgc+6bCSLp2QJdEx1/ETp/FEn/IUT
Sz9qcYnt1MVMW3D+ClDGIIzrY/OKPb+3F7ixpAeroyJgDL/StvJcPJMvQsWWwnMZ
MMTL8u0k/ddBL2eSaY9g6O0NjM6TtXsBGh7uo8pzFV+JbICE
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:25 2026 by rpki-client