Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
File: 4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa (raw, json)
Hash identifier: 6Pc4GrsTFkbbYiZhOXUHpWtqd5UYSeU97qQSCGIYdmo=
Subject key identifier: 54:19:BD:99:7C:B9:38:EA:E4:DA:84:74:4D:46:F0:84:51:0E:FD:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1745C69D3172BE1145DC2BA634722CA37AB71F42
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
Signing time: Sat 28 Feb 2026 05:20:43 +0000
ROA not before: Sat 28 Feb 2026 05:20:43 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:45:c6:9d:31:72:be:11:45:dc:2b:a6:34:72:2c:a3:7a:b7:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:43 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=035e8976cfae5b010ea25880eea9937f1b4847bca61ce8e23589cda71e59d31c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:53:28:22:69:ab:85:2b:cd:dc:86:a5:d9:
f3:21:07:a7:1f:ae:60:ef:f4:62:ea:d1:ac:88:8d:
a9:94:2c:cd:5f:c5:21:35:b9:0c:69:ed:4c:b7:d2:
9f:55:28:5b:ab:9b:fd:4f:ac:60:8c:ce:4b:85:bd:
55:ce:16:a2:78:c7:61:62:09:be:2e:12:8c:34:27:
3b:dc:a7:7b:37:b7:17:e2:7b:8a:32:2c:71:51:30:
12:51:bf:d3:39:73:18:48:1c:04:42:77:bb:c6:e1:
0f:ba:89:b2:36:41:ff:f1:9b:d8:d9:f4:7d:5c:8c:
85:01:8e:69:f3:10:1a:68:3b:f2:37:0d:05:64:32:
c6:7e:f3:f5:52:25:35:0b:b5:74:25:d3:c1:21:07:
79:7c:89:98:d7:cd:11:75:c8:e5:02:51:fd:33:d5:
da:c0:6b:62:21:4e:a2:c9:d3:71:0c:17:b5:e6:b9:
34:9f:23:50:55:27:0b:2c:6f:d4:60:59:00:3a:ac:
9d:49:26:8c:de:9b:73:e0:c0:91:2c:cc:20:a2:6f:
44:9a:ae:62:b5:7c:c1:6e:42:b6:ce:22:56:0f:4b:
cf:57:06:a4:7b:b9:df:88:3f:05:42:f2:2f:7f:d2:
3c:32:05:dd:7a:58:ed:9b:23:de:f2:99:75:49:89:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:BD:99:7C:B9:38:EA:E4:DA:84:74:4D:46:F0:84:51:0E:FD:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:8000::/40
Signature Algorithm: sha256WithRSAEncryption
61:26:4f:6b:79:e5:14:12:aa:40:30:9f:49:dc:e1:1e:07:5b:
58:5f:ff:53:38:e0:36:0b:83:10:f8:ab:8b:1e:31:6c:b4:97:
f4:16:f2:9a:aa:64:9b:f3:92:61:46:28:6a:75:fc:bc:5f:dd:
f0:28:fd:b6:e2:65:99:bd:a9:30:ea:7c:3b:2b:04:55:bd:6c:
15:33:61:af:cc:a9:09:17:5f:d5:28:1e:d7:b4:41:c7:fc:d5:
97:c5:c0:99:77:4f:71:c8:ed:28:75:f7:16:c0:b3:fe:3d:8d:
78:6c:d2:87:5e:58:23:23:32:ca:bb:c3:f8:a2:71:cd:51:db:
81:80:18:62:2f:89:92:c7:f6:eb:49:32:b3:ef:2b:b6:46:95:
c8:4d:99:7d:e8:b3:08:33:15:6a:aa:d3:c1:27:b6:e9:53:c8:
bf:e9:ac:55:7c:1d:20:8b:a1:4d:b9:fe:5b:74:e9:0d:5f:f1:
e2:5d:14:77:29:9c:7f:c5:cb:b8:ca:05:56:60:1c:07:ac:fc:
c5:73:d9:47:12:2b:61:c4:63:93:e0:31:a1:1b:b3:e3:79:c9:
c9:5f:8c:db:23:90:70:be:3c:a7:6e:1c:33:bd:c2:91:48:cc:
c1:60:7a:b1:32:15:ee:db:c8:2f:1e:4d:bd:93:e5:3f:c5:10:
98:13:b9:0c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUF0XGnTFyvhFF3CumNHIso3q3H0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTIwNDNaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDAzNWU4OTc2Y2ZhZTViMDEwZWEyNTg4MGVlYTk5MzdmMWI0ODQ3YmNhNjFj
ZThlMjM1ODljZGE3MWU1OWQzMWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOAoUygiaauFK83chqXZ8yEHpx+uYO/0YurRrIiNqZQszV/FITW5DGntTLfS
n1UoW6ub/U+sYIzOS4W9Vc4WonjHYWIJvi4SjDQnO9yneze3F+J7ijIscVEwElG/
0zlzGEgcBEJ3u8bhD7qJsjZB//Gb2Nn0fVyMhQGOafMQGmg78jcNBWQyxn7z9VIl
NQu1dCXTwSEHeXyJmNfNEXXI5QJR/TPV2sBrYiFOosnTcQwXtea5NJ8jUFUnCyxv
1GBZADqsnUkmjN6bc+DAkSzMIKJvRJquYrV8wW5Cts4iVg9Lz1cGpHu534g/BULy
L3/SPDIF3XpY7Zsj3vKZdUmJ0c0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRUGb2Z
fLk46uTahHRNRvCEUQ79WDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGMyY2Y3YjYtM2ZiYi00ZDc0LTg4NmQtMjFjNThiMzQ3ZjU4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H6A
MA0GCSqGSIb3DQEBCwUAA4IBAQBhJk9reeUUEqpAMJ9J3OEeB1tYX/9TOOA2C4MQ
+KuLHjFstJf0FvKaqmSb85JhRihqdfy8X93wKP224mWZvakw6nw7KwRVvWwVM2Gv
zKkJF1/VKB7XtEHH/NWXxcCZd09xyO0odfcWwLP+PY14bNKHXlgjIzLKu8P4onHN
UduBgBhiL4mSx/brSTKz7yu2RpXITZl96LMIMxVqqtPBJ7bpU8i/6axVfB0gi6FN
uf5bdOkNX/HiXRR3KZx/xcu4ygVWYBwHrPzFc9lHEithxGOT4DGhG7PjecnJX4zb
I5BwvjynbhwzvcKRSMzBYHqxMhXu28gvHk29k+U/xRCYE7kM
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:56:49 2026 by rpki-client