Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa
File: ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa (raw, json)
Hash identifier: lcmKzpzS6Dq4tYqWb6rjCgdS1JgSgak+x5nQCfI/8HY=
Subject key identifier: AA:55:0C:F2:AA:B7:B7:4B:9B:3F:18:E3:59:CD:0F:3F:62:B9:6E:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5824FE57DFB87C355F29232A4AAF26D9AB65B359
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa
Signing time: Thu 10 Sep 2026 02:40:06 +0000
ROA not before: Thu 10 Sep 2026 02:40:06 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:24:fe:57:df:b8:7c:35:5f:29:23:2a:4a:af:26:d9:ab:65:b3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:06 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=881240d030ef3cbfcdc40c51794cc06fd9ac13f8b7a6f7d504d02461a10e90a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:0c:4d:ad:49:81:3b:93:2f:e1:c5:fe:44:
88:d0:6a:50:5c:88:51:55:16:31:40:ba:e5:db:2a:
1f:05:dd:f4:2a:c7:9a:27:40:d9:a2:26:03:53:8b:
d9:04:3f:ea:bb:39:31:fb:63:42:85:fa:8b:b7:7d:
71:c3:b7:35:59:e1:dd:a7:3b:91:b2:7d:0b:c2:44:
86:fc:6d:e3:e0:f5:4d:49:23:ae:70:92:23:86:1b:
74:43:41:ac:eb:f4:c6:c0:61:66:12:74:71:5e:5e:
8c:6b:27:4a:c4:10:18:7c:b2:ea:e3:88:ff:b6:5a:
c5:8e:ad:6e:1b:ca:8f:8c:fb:cf:a8:5a:e2:29:4b:
f6:e0:b7:cb:53:04:e9:c3:6b:00:65:9d:1a:fc:b8:
3c:3b:a6:b5:06:4f:57:ae:a4:52:74:7f:fa:5a:b0:
f2:30:53:60:85:78:8f:7a:ab:5d:c7:ab:38:d4:02:
93:e9:dc:ed:e7:d9:1a:28:7c:c5:5f:33:3c:ab:d5:
2a:e6:9a:16:cf:b7:dc:12:38:1d:e5:5e:45:7a:8b:
37:71:da:c2:1e:c4:98:85:3a:0c:7c:2f:2a:3c:c5:
5b:9b:d8:06:aa:7e:82:81:21:bc:3d:0b:66:e9:7d:
dd:c1:d9:2e:a4:aa:42:85:62:f6:57:0e:da:97:21:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:0C:F2:AA:B7:B7:4B:9B:3F:18:E3:59:CD:0F:3F:62:B9:6E:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:9e:86:95:80:57:81:b7:07:ba:bc:6c:55:55:ae:96:83:85:
08:cb:d9:a5:64:c4:93:35:cf:b0:34:d3:d2:ad:cc:4a:4b:45:
26:13:9f:5f:06:97:d5:ae:49:24:92:da:cf:04:4f:80:d4:5f:
ee:ad:a2:c2:7c:e7:0d:ea:82:35:6f:e6:e8:56:b6:71:3e:8b:
c4:0d:71:c2:7c:b2:1e:53:28:2f:44:79:9d:28:f2:ee:89:2b:
e1:58:ed:07:04:b7:89:ec:5c:56:6f:b4:38:30:b9:0a:ab:07:
84:52:5d:db:49:30:df:bf:a3:7d:0d:73:86:2a:94:58:d3:62:
4f:33:74:1b:3a:4c:ee:fe:a6:24:48:e8:6e:46:89:5b:73:a1:
aa:d0:ab:81:31:42:cb:2e:0e:d1:bd:96:a7:af:d7:95:4c:6c:
b1:46:31:f5:5c:99:94:ed:8a:06:65:9d:22:91:7f:bd:09:ce:
0c:b6:7a:b6:12:3a:f8:18:d3:3f:ce:a5:3b:d8:65:0c:25:7f:
de:3c:36:a0:dd:e1:ed:90:37:e9:85:af:b5:98:60:2b:4d:79:
3d:13:bc:d0:4c:ef:5a:25:b1:7f:24:24:b4:17:57:3f:83:f6:
8d:26:00:7f:5b:e6:27:bc:aa:fe:46:3a:e1:8b:0c:94:6b:94:
8e:82:41:b8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWCT+V9+4fDVfKSMqSq8m2atls1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjQwMDZaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDg4MTI0MGQwMzBlZjNjYmZjZGM0MGM1MTc5NGNjMDZmZDlhYzEzZjhiN2E2
ZjdkNTA0ZDAyNDYxYTEwZTkwYTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnkDE2tSYE7ky/hxf5EiNBqUFyIUVUWMUC65dsqHwXd9CrHmidA2aImA1OL
2QQ/6rs5MftjQoX6i7d9ccO3NVnh3ac7kbJ9C8JEhvxt4+D1TUkjrnCSI4YbdENB
rOv0xsBhZhJ0cV5ejGsnSsQQGHyy6uOI/7ZaxY6tbhvKj4z7z6ha4ilL9uC3y1ME
6cNrAGWdGvy4PDumtQZPV66kUnR/+lqw8jBTYIV4j3qrXcerONQCk+nc7efZGih8
xV8zPKvVKuaaFs+33BI4HeVeRXqLN3Hawh7EmIU6DHwvKjzFW5vYBqp+goEhvD0L
Zul93cHZLqSqQoVi9lcO2pchYIUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSqVQzy
qre3S5s/GONZzQ8/YrluBjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWY1NGE1MmYtYjg3Mi00ZmQ3LTliNTYtYzYxODg3ZTMyZmZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtQ
wDANBgkqhkiG9w0BAQsFAAOCAQEATp6GlYBXgbcHurxsVVWuloOFCMvZpWTEkzXP
sDTT0q3MSktFJhOfXwaX1a5JJJLazwRPgNRf7q2iwnznDeqCNW/m6Fa2cT6LxA1x
wnyyHlMoL0R5nSjy7okr4VjtBwS3iexcVm+0ODC5CqsHhFJd20kw37+jfQ1zhiqU
WNNiTzN0GzpM7v6mJEjobkaJW3OhqtCrgTFCyy4O0b2Wp6/XlUxssUYx9VyZlO2K
BmWdIpF/vQnODLZ6thI6+BjTP86lO9hlDCV/3jw2oN3h7ZA36YWvtZhgK015PRO8
0EzvWiWxfyQktBdXP4P2jSYAf1vmJ7yq/kY64YsMlGuUjoJBuA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:28 2026 by rpki-client