Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
File: 0b022346-638e-4570-8b19-5cf9b4c378c8.roa (raw, json)
Hash identifier: CYzAcKAtYB1la/WjatJK7cA4CjtX3N2mJW/1LtMvUyA=
Subject key identifier: 79:09:AA:A3:E9:1F:83:9B:97:32:80:7B:8F:E4:44:4A:47:1D:EF:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A78BA56C2DEAE096F25056A8CDDDE70837B2D03
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
Signing time: Sat 28 Feb 2026 06:10:56 +0000
ROA not before: Sat 28 Feb 2026 06:10:56 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:78:ba:56:c2:de:ae:09:6f:25:05:6a:8c:dd:de:70:83:7b:2d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:10:56 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=d2740a410d7a4311153d01f72f0daca2471189fd46561fcc13ffbe9899185448, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:2f:91:51:ef:c6:3c:be:bb:48:b2:dc:34:
52:53:f8:b8:55:cd:94:6e:40:81:b5:0a:54:47:e6:
2e:8c:22:2d:2e:6a:56:fc:e4:26:42:34:b9:79:5b:
ed:09:b3:03:ab:4b:85:e8:58:40:f3:58:f3:90:03:
ab:d3:a4:58:c7:7b:f7:11:52:de:87:ee:37:b5:ce:
21:1f:c9:9b:65:8a:b9:ab:c9:a6:ce:0d:25:93:88:
af:a3:54:94:3c:59:af:80:89:3d:48:00:35:9a:37:
95:d3:60:ca:24:eb:b6:88:91:e1:06:42:52:0c:60:
4b:f6:e7:8b:c9:e1:58:86:d5:fa:bc:54:6f:48:4a:
e9:ed:26:29:f7:74:8f:1d:de:56:2a:36:8e:60:14:
be:46:a0:18:d2:70:1f:72:71:bd:e7:43:68:bd:6c:
df:94:6f:f8:ed:90:70:88:f6:4d:08:e6:48:3c:06:
76:4e:97:b0:21:ae:1f:d9:41:de:56:f2:1a:45:7b:
78:86:a6:b0:ad:d3:30:7e:a4:da:85:10:28:f9:cb:
16:13:8e:04:4d:61:60:93:8a:6c:2e:1f:ae:7b:3c:
20:e2:1e:ce:46:8c:53:89:0b:5c:b7:9c:43:a8:c6:
d9:2d:45:b8:8a:d6:e0:1f:f9:3f:a6:51:86:5e:19:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:AA:A3:E9:1F:83:9B:97:32:80:7B:8F:E4:44:4A:47:1D:EF:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.96.0/21
Signature Algorithm: sha256WithRSAEncryption
39:36:91:da:3e:cb:7f:e9:1f:67:ad:7e:7d:8d:07:d3:d5:6c:
ee:50:de:49:43:db:4c:c7:09:9d:98:01:42:1f:a5:5f:27:21:
5b:f7:a2:92:42:d8:43:0f:71:b7:aa:fc:68:96:b2:98:bc:07:
99:fa:30:b8:09:57:bd:34:81:e3:5d:b0:97:29:ef:4b:2e:29:
3a:ce:6b:cd:56:55:99:90:5d:78:a3:fa:49:b3:4d:43:54:fb:
95:d9:25:d7:24:2e:f6:ec:a3:06:b2:11:40:45:41:72:56:47:
a8:9e:c2:0f:44:1f:e5:19:8d:d9:50:d2:b7:3d:33:b6:30:3b:
5c:be:fc:1d:de:02:4e:fe:6a:fb:6d:27:99:e1:22:d0:24:7c:
a4:d7:a2:f4:f5:4f:3b:74:aa:29:e9:50:0d:67:3a:56:d1:57:
b4:7c:db:4b:e0:6c:79:de:ff:fd:46:14:44:da:49:89:53:16:
2b:e4:b1:31:80:ac:12:df:75:1b:01:2d:36:32:79:1d:73:c1:
a4:f1:ed:60:b1:0d:0d:59:3d:44:fc:8d:13:4d:8e:e2:ed:ca:
56:68:2d:c5:ae:e1:1b:37:99:1c:31:40:cc:18:4d:e2:eb:22:
74:64:5e:4e:be:06:84:f1:d4:72:87:05:50:36:d2:57:22:9b:
23:6e:83:20
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSni6VsLerglvJQVqjN3ecIN7LQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjEwNTZaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGQyNzQwYTQxMGQ3YTQzMTExNTNkMDFmNzJmMGRhY2EyNDcxMTg5ZmQ0NjU2
MWZjYzEzZmZiZTk4OTkxODU0NDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ//L5FR78Y8vrtIstw0UlP4uFXNlG5AgbUKVEfmLowiLS5qVvzkJkI0uXlb
7QmzA6tLhehYQPNY85ADq9OkWMd79xFS3ofuN7XOIR/Jm2WKuavJps4NJZOIr6NU
lDxZr4CJPUgANZo3ldNgyiTrtoiR4QZCUgxgS/bni8nhWIbV+rxUb0hK6e0mKfd0
jx3eVio2jmAUvkagGNJwH3JxvedDaL1s35Rv+O2QcIj2TQjmSDwGdk6XsCGuH9lB
3lbyGkV7eIamsK3TMH6k2oUQKPnLFhOOBE1hYJOKbC4frns8IOIezkaMU4kLXLec
Q6jG2S1FuIrW4B/5P6ZRhl4ZKPkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR5Caqj
6R+Dm5cygHuP5ERKRx3vhjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGIwMjIzNDYtNjM4ZS00NTcwLThiMTktNWNmOWI0YzM3OGM4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099YDAN
BgkqhkiG9w0BAQsFAAOCAQEAOTaR2j7Lf+kfZ61+fY0H09Vs7lDeSUPbTMcJnZgB
Qh+lXychW/eikkLYQw9xt6r8aJaymLwHmfowuAlXvTSB412wlynvSy4pOs5rzVZV
mZBdeKP6SbNNQ1T7ldkl1yQu9uyjBrIRQEVBclZHqJ7CD0Qf5RmN2VDStz0ztjA7
XL78Hd4CTv5q+20nmeEi0CR8pNei9PVPO3SqKelQDWc6VtFXtHzbS+Bsed7//UYU
RNpJiVMWK+SxMYCsEt91GwEtNjJ5HXPBpPHtYLENDVk9RPyNE02O4u3KVmgtxa7h
GzeZHDFAzBhN4usidGReTr4GhPHUcocFUDbSVyKbI26DIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:12:44 2026 by rpki-client