Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
File: 4a799a36-6e8c-4ca7-be23-5388518d8f95.roa (raw, json)
Hash identifier: vhnShhtFoYYYyof7HgIWXoAnhtxKtyQG4XG0TGMulwE=
Subject key identifier: 1E:B0:4F:93:3A:7E:52:1B:13:2F:EF:83:30:EE:66:26:01:B0:6A:7C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70B1C67DC4C5A3C5ECB704340F7616A30CE41AE7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
Signing time: Fri 06 Feb 2026 00:40:05 +0000
ROA not before: Fri 06 Feb 2026 00:40:05 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b1:c6:7d:c4:c5:a3:c5:ec:b7:04:34:0f:76:16:a3:0c:e4:1a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:40:05 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=e17df3eed82b2ff647054bb99ee700258a1d6c45101366d3de98d3586fd9265b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:17:a7:a7:d5:4a:f2:83:a1:b6:7e:c9:34:
0e:06:1a:da:a6:6f:93:c4:5e:05:f9:93:53:45:b6:
1f:ea:d1:16:85:61:b8:db:4a:e6:e2:d9:d3:67:7a:
3e:73:3f:66:ee:ec:12:01:5d:9b:fb:26:70:b7:0a:
f1:28:18:14:0d:69:22:58:66:66:e9:00:58:dc:24:
33:c5:45:0e:a7:8e:1a:ac:af:30:64:14:f6:64:ac:
55:d5:9e:ab:d6:45:5b:ad:bf:1a:ff:df:be:fd:e2:
87:84:98:d7:09:a2:29:cf:66:fa:b1:76:1f:30:8e:
6e:13:39:6c:0f:cf:3c:e7:cc:ab:14:da:cf:2a:7f:
0d:2d:92:69:db:0c:d6:de:60:9b:58:79:16:a4:7b:
da:6d:23:c9:11:2e:c9:ea:5b:3e:16:ab:50:e0:7a:
bc:89:86:11:0e:5a:be:f3:e6:69:26:1e:75:1c:a8:
78:af:38:54:d3:30:80:45:e7:d6:dc:15:d5:c9:ef:
e2:66:92:b9:bf:65:fd:dd:23:27:84:5b:4c:9f:81:
56:17:98:1b:4a:15:c4:a5:80:64:d8:9c:a9:26:d6:
c5:fc:96:44:68:e3:d7:28:18:91:71:73:e9:09:82:
7a:b6:c7:fc:05:5a:a2:7d:91:08:38:16:75:75:1e:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B0:4F:93:3A:7E:52:1B:13:2F:EF:83:30:EE:66:26:01:B0:6A:7C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f::/36
Signature Algorithm: sha256WithRSAEncryption
39:e3:4e:08:25:5e:a1:3b:08:0c:f5:e0:dd:d6:bb:ff:dd:ec:
e7:ee:82:50:16:ab:b1:75:1a:ce:ab:9d:bf:78:39:41:32:68:
b4:27:56:f2:59:b0:c7:54:37:74:b8:ed:99:05:d7:ea:aa:90:
80:93:f9:51:c5:d8:df:e9:f9:70:93:fb:e8:35:00:63:38:6c:
41:5c:32:3a:f6:f7:a8:70:54:70:f2:3d:86:fb:29:09:cd:7d:
2c:77:0d:91:b2:4a:08:5f:03:69:d0:f5:69:35:dd:50:f5:21:
6d:f1:4f:e1:f2:b6:84:12:87:53:27:96:5b:eb:0d:7f:ed:52:
0d:ce:32:78:dd:ce:b4:83:8f:9b:93:c1:de:4b:77:e0:b2:9d:
3d:67:3b:8e:34:a8:21:cd:86:67:be:ce:e0:95:18:0c:52:79:
59:5e:fb:19:13:2d:af:db:db:27:b9:53:6c:0c:76:ac:7e:a3:
22:f8:ca:2a:35:d9:1d:51:bd:6c:4b:0b:2b:19:c4:03:34:4e:
77:0e:6f:6b:e3:9d:fa:2a:50:e4:6d:38:1b:2e:65:37:41:20:
f8:ac:ff:b3:ad:cc:96:3e:ba:e5:5c:25:36:b2:db:09:c6:50:
73:9e:bf:2c:6a:7a:16:ff:b4:8e:c8:8c:e2:1a:47:ab:d5:77:
43:eb:25:60
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcLHGfcTFo8XstwQ0D3YWowzkGucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMDYwMDQwMDVaFw0yNjA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQGUxN2RmM2VlZDgyYjJmZjY0NzA1NGJiOTllZTcwMDI1OGExZDZjNDUxMDEz
NjZkM2RlOThkMzU4NmZkOTI2NWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJuRF6en1Uryg6G2fsk0DgYa2qZvk8ReBfmTU0W2H+rRFoVhuNtK5uLZ02d6
PnM/Zu7sEgFdm/smcLcK8SgYFA1pIlhmZukAWNwkM8VFDqeOGqyvMGQU9mSsVdWe
q9ZFW62/Gv/fvv3ih4SY1wmiKc9m+rF2HzCObhM5bA/PPOfMqxTazyp/DS2SadsM
1t5gm1h5FqR72m0jyREuyepbPharUOB6vImGEQ5avvPmaSYedRyoeK84VNMwgEXn
1twV1cnv4maSub9l/d0jJ4RbTJ+BVheYG0oVxKWAZNicqSbWxfyWRGjj1ygYkXFz
6QmCerbH/AVaon2RCDgWdXUeZxECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQesE+T
On5SGxMv74Mw7mYmAbBqfDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGE3OTlhMzYtNmU4Yy00Y2E3LWJlMjMtNTM4ODUxOGQ4Zjk1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0B8A
MA0GCSqGSIb3DQEBCwUAA4IBAQA5404IJV6hOwgM9eDd1rv/3ezn7oJQFquxdRrO
q52/eDlBMmi0J1byWbDHVDd0uO2ZBdfqqpCAk/lRxdjf6flwk/voNQBjOGxBXDI6
9veocFRw8j2G+ykJzX0sdw2RskoIXwNp0PVpNd1Q9SFt8U/h8raEEodTJ5Zb6w1/
7VINzjJ43c60g4+bk8HeS3fgsp09ZzuONKghzYZnvs7glRgMUnlZXvsZEy2v29sn
uVNsDHasfqMi+MoqNdkdUb1sSwsrGcQDNE53Dm9r4536KlDkbTgbLmU3QSD4rP+z
rcyWPrrlXCU2stsJxlBznr8sanoW/7SOyIziGker1XdD6yVg
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:10 2026 by rpki-client