Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa
File: e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa (raw, json)
Hash identifier: 51plKEQVrb+moCLNys5R43t1bkv41QEIbYMxkQWEutE=
Subject key identifier: 46:74:C3:2B:AA:6B:00:80:16:92:0C:0F:CE:7C:85:56:87:22:93:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B99B4FF65391F40DDD44BB551CC4B6AB28887B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa
Signing time: Wed 19 Aug 2026 01:00:08 +0000
ROA not before: Wed 19 Aug 2026 01:00:08 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:99:b4:ff:65:39:1f:40:dd:d4:4b:b5:51:cc:4b:6a:b2:88:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:08 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=f15c3267f4ee3bafcfb52efae499dcb83ea3260106564cd6b21811b1545c7c2b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:5c:9f:52:26:88:bc:69:7b:fb:6c:b4:25:
7b:54:8a:de:68:3c:a2:00:33:c3:dc:fa:9d:e4:db:
6a:f1:ef:87:ad:11:0c:91:52:27:80:9f:b8:ce:b6:
2e:0e:8a:8d:2a:1c:db:cd:86:2a:72:0e:97:6c:0b:
a8:d3:c6:3e:bd:6e:70:d6:30:f2:a1:20:16:94:ee:
ea:c9:ef:1d:ef:b7:d6:22:cf:12:29:ec:e4:51:f2:
ed:48:89:0a:e0:36:e8:61:94:5f:d3:43:a5:df:c2:
48:8e:11:2f:56:43:86:93:4c:f2:0f:45:be:f7:bf:
e4:ed:b2:df:24:23:c8:51:fe:3d:bf:fd:4e:7c:d5:
5c:cf:77:36:43:bf:54:ab:13:47:06:b3:ed:e4:4e:
bb:78:8e:1a:c1:f5:05:f5:be:85:33:ed:c3:3d:61:
c3:74:e1:c5:e1:60:14:dd:c1:92:9c:ec:98:20:7e:
b9:14:59:5b:bb:3d:bd:49:15:ee:12:02:66:2a:e2:
ed:cc:37:b3:78:0f:d0:07:fc:e4:0a:30:12:b2:86:
73:cd:69:c9:54:7d:e2:87:74:cc:72:87:96:6a:25:
30:1e:5e:1e:5c:39:0b:ec:92:80:66:8a:68:eb:7e:
53:20:dc:20:99:a1:1f:fd:98:55:b3:6f:a0:0d:99:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:C3:2B:AA:6B:00:80:16:92:0C:0F:CE:7C:85:56:87:22:93:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9ba4ecc-98e7-495a-ad67-75475de18ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:880::/48
Signature Algorithm: sha256WithRSAEncryption
ae:0f:ca:67:9a:99:48:06:16:08:49:9e:3b:48:28:31:5f:a4:
40:5f:99:cc:63:b2:d9:34:c2:30:86:3a:56:fc:a2:21:ec:7d:
cf:6f:66:27:c1:1e:75:7c:0d:39:42:97:4d:ad:ee:ec:e6:39:
a7:a7:60:f7:04:43:9c:c5:af:3b:d6:52:bb:cc:6d:25:04:4f:
1c:b3:64:35:ca:f6:24:76:65:ab:89:50:ff:36:3b:c2:47:70:
a1:a3:61:8d:2e:b4:36:fe:e3:40:1d:a4:8c:77:ce:f0:91:eb:
ba:26:aa:28:dd:51:02:80:f0:c9:94:e3:40:ae:19:b0:95:15:
56:45:70:53:c1:20:c3:13:80:0b:c0:0e:a0:97:79:63:29:ef:
2f:d2:77:a4:54:fe:eb:99:74:1f:ef:63:aa:93:91:aa:f4:6a:
a0:e8:ed:b9:90:c2:16:e9:74:fa:88:b9:5c:9c:b8:c0:cd:41:
21:76:e6:52:af:4f:64:1d:2a:b4:9b:4d:2b:e9:73:83:b1:44:
c9:4d:fd:8e:9d:b4:e7:a4:ea:6e:0e:3f:db:f0:0a:26:90:40:
ed:dc:9a:ba:d8:2e:82:61:5a:a1:22:c0:d4:cb:19:4d:5c:c7:
b1:74:56:02:fb:2a:0a:c9:5f:cc:f2:da:d2:43:93:32:ba:dc:
94:f3:97:b0
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUC5m0/2U5H0Dd1Eu1UcxLarKIh7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwMDhaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGYxNWMzMjY3ZjRlZTNiYWZjZmI1MmVmYWU0OTlkY2I4M2VhMzI2MDEwNjU2
NGNkNmIyMTgxMWIxNTQ1YzdjMmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALd9XJ9SJoi8aXv7bLQle1SK3mg8ogAzw9z6neTbavHvh60RDJFSJ4CfuM62
Lg6KjSoc282GKnIOl2wLqNPGPr1ucNYw8qEgFpTu6snvHe+31iLPEins5FHy7UiJ
CuA26GGUX9NDpd/CSI4RL1ZDhpNM8g9Fvve/5O2y3yQjyFH+Pb/9TnzVXM93NkO/
VKsTRwaz7eROu3iOGsH1BfW+hTPtwz1hw3ThxeFgFN3BkpzsmCB+uRRZW7s9vUkV
7hICZiri7cw3s3gP0Af85AowErKGc81pyVR94od0zHKHlmolMB5eHlw5C+ySgGaK
aOt+UyDcIJmhH/2YVbNvoA2ZRf8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRGdMMr
qmsAgBaSDA/OfIVWhyKTCzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTliYTRlY2MtOThlNy00OTVhLWFkNjctNzU0NzVkZTE4YWU0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H0I
gDANBgkqhkiG9w0BAQsFAAOCAQEArg/KZ5qZSAYWCEmeO0goMV+kQF+ZzGOy2TTC
MIY6VvyiIex9z29mJ8EedXwNOUKXTa3u7OY5p6dg9wRDnMWvO9ZSu8xtJQRPHLNk
Ncr2JHZlq4lQ/zY7wkdwoaNhjS60Nv7jQB2kjHfO8JHruiaqKN1RAoDwyZTjQK4Z
sJUVVkVwU8EgwxOAC8AOoJd5YynvL9J3pFT+65l0H+9jqpORqvRqoOjtuZDCFul0
+oi5XJy4wM1BIXbmUq9PZB0qtJtNK+lzg7FEyU39jp2056Tqbg4/2/AKJpBA7dya
utgugmFaoSLA1MsZTVzHsXRWAvsqCslfzPLa0kOTMrrclPOXsA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:53 2026 by rpki-client