Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
File: fad76837-d6e1-4885-9781-3088c0b0c06c.roa (raw, json)
Hash identifier: rc3s4IHzOEdjqou5NNIWVIHx2FXvzM3we/Jg1mXO2gw=
Subject key identifier: 21:AF:ED:D1:D9:84:64:32:74:98:88:1F:C6:6F:78:8D:DA:A7:4A:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A9E05EA9454030410F4744827DFDA32EC672479
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
Signing time: Fri 07 Aug 2026 05:30:14 +0000
ROA not before: Fri 07 Aug 2026 05:30:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9e:05:ea:94:54:03:04:10:f4:74:48:27:df:da:32:ec:67:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a1db295223fc444952982dfe8a694bb3682b3b470ebbb1d98765518756cb93d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:20:b5:ea:5d:40:d7:c6:48:a5:33:70:ba:
67:df:b8:c3:da:da:35:3c:1e:8d:17:64:f1:7e:a7:
9f:09:c6:15:42:0b:14:74:c2:06:90:6b:01:84:95:
95:f9:22:4c:64:b5:23:f3:d1:e1:cb:f7:41:7c:70:
67:57:e7:a9:75:63:e4:d9:8e:8d:25:ea:b5:5a:51:
f3:5c:c2:0d:0b:6f:3d:ec:bf:68:79:cb:f9:f3:7b:
85:26:18:3c:f6:91:2a:19:65:cc:d0:7f:7e:71:c7:
c8:7f:d3:34:db:c4:1d:93:1c:ed:39:b3:59:16:79:
cf:ec:4d:b4:4e:0e:bb:52:8d:0a:d2:9f:de:b1:d6:
11:1e:3b:76:20:db:08:5f:be:32:d1:ac:62:fe:48:
dd:68:07:05:b6:8a:c4:7c:07:37:ed:31:61:b6:3e:
4d:35:4f:03:6e:12:06:41:b6:31:d3:9a:a0:cd:f5:
7e:46:5e:13:85:c9:e7:5d:5a:58:5d:61:cb:a5:23:
07:cb:e1:a0:b9:5f:47:46:80:ed:8f:cb:3c:d8:b0:
45:ef:7b:c8:a7:11:a9:dd:c6:28:9b:02:bd:e7:86:
8e:34:e0:98:80:2b:81:3f:18:5e:18:7f:c3:96:fe:
67:43:09:a3:30:ef:08:ad:d4:f4:47:3d:cf:ca:17:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:ED:D1:D9:84:64:32:74:98:88:1F:C6:6F:78:8D:DA:A7:4A:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fad76837-d6e1-4885-9781-3088c0b0c06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:6000::/40
Signature Algorithm: sha256WithRSAEncryption
6c:71:05:ef:1f:0d:66:a0:c5:a7:4e:9d:c3:35:87:20:51:b3:
56:bd:c4:1e:84:ee:61:fd:65:42:fa:6f:da:29:2f:1a:ec:15:
95:1f:41:ae:34:c8:a8:f5:e0:6f:27:7f:51:18:ef:f6:ce:f5:
9c:b3:5a:0e:7b:20:40:11:c3:9b:97:3a:8b:3a:0b:09:88:a3:
68:d1:df:44:20:63:0f:7d:4b:e8:28:b9:f0:cf:5d:11:3e:7b:
15:cb:26:b5:d7:e3:97:18:20:b1:1e:d8:26:56:0f:15:1d:6b:
10:8c:b7:e1:61:69:74:e0:2a:4f:48:f0:6d:32:75:9e:5f:e7:
13:79:b4:88:5c:db:8d:c9:50:15:b9:0b:38:f1:67:d3:46:5e:
aa:c2:11:35:84:6d:50:6a:5e:87:4d:a5:27:7a:1b:2e:90:f4:
d5:be:91:90:32:4f:5e:06:87:cd:57:3b:87:7f:c4:1d:5c:4c:
a6:a6:19:85:6e:18:2a:78:98:9d:ee:4a:31:9b:6c:19:93:de:
88:08:d2:dd:a2:02:2b:42:4b:11:77:68:9b:81:4e:6c:9b:31:
e1:90:83:ad:ef:90:cc:72:bc:54:bb:0a:3d:12:fa:3b:aa:52:
9d:75:17:1e:60:a8:cb:4c:b0:c9:83:1e:eb:0f:16:ea:be:2f:
11:ad:bd:87
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCp4F6pRUAwQQ9HRIJ9/aMuxnJHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMTRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGExZGIyOTUyMjNmYzQ0NDk1Mjk4MmRmZThhNjk0YmIzNjgyYjNiNDcwZWJi
YjFkOTg3NjU1MTg3NTZjYjkzZDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN8xILXqXUDXxkilM3C6Z9+4w9raNTwejRdk8X6nnwnGFUILFHTCBpBrAYSV
lfkiTGS1I/PR4cv3QXxwZ1fnqXVj5NmOjSXqtVpR81zCDQtvPey/aHnL+fN7hSYY
PPaRKhllzNB/fnHHyH/TNNvEHZMc7TmzWRZ5z+xNtE4Ou1KNCtKf3rHWER47diDb
CF++MtGsYv5I3WgHBbaKxHwHN+0xYbY+TTVPA24SBkG2MdOaoM31fkZeE4XJ511a
WF1hy6UjB8vhoLlfR0aA7Y/LPNiwRe97yKcRqd3GKJsCveeGjjTgmIArgT8YXhh/
w5b+Z0MJozDvCK3U9Ec9z8oXauECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhr+3R
2YRkMnSYiB/Gb3iN2qdKuDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmFkNzY4MzctZDZlMS00ODg1LTk3ODEtMzA4OGMwYjBjMDZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dhg
MA0GCSqGSIb3DQEBCwUAA4IBAQBscQXvHw1moMWnTp3DNYcgUbNWvcQehO5h/WVC
+m/aKS8a7BWVH0GuNMio9eBvJ39RGO/2zvWcs1oOeyBAEcOblzqLOgsJiKNo0d9E
IGMPfUvoKLnwz10RPnsVyya11+OXGCCxHtgmVg8VHWsQjLfhYWl04CpPSPBtMnWe
X+cTebSIXNuNyVAVuQs48WfTRl6qwhE1hG1Qal6HTaUnehsukPTVvpGQMk9eBofN
VzuHf8QdXEymphmFbhgqeJid7koxm2wZk96ICNLdogIrQksRd2ibgU5smzHhkIOt
75DMcrxUuwo9Evo7qlKddRceYKjLTLDJgx7rDxbqvi8Rrb2H
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:34 2026 by rpki-client