Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: 5Z98+D/p5eArYpP4c7PB5Nj+KOIq7ydc0JCvIj4/Nak=
Subject key identifier: FB:EB:1E:5A:98:6C:87:4F:E9:F8:B2:E3:A4:FD:51:C7:55:0C:00:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A3D9422567A174207E03AFC4DE2E2CE01874861
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Sat 28 Feb 2026 05:50:07 +0000
ROA not before: Sat 28 Feb 2026 05:50:07 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3d:94:22:56:7a:17:42:07:e0:3a:fc:4d:e2:e2:ce:01:87:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:50:07 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=7af83b0ae7bd151d75c76e881b3a5e8cddaf2db12c22f4f08983cc3ec4db6c08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:87:15:c4:b4:53:3a:b4:72:40:6b:94:76:
09:80:5c:32:ea:be:63:e0:41:d4:39:b8:4c:7e:18:
ff:52:2d:db:c7:d9:93:36:0d:e7:02:c7:03:13:b3:
58:7f:4a:96:de:1d:4e:5b:d5:90:1d:57:04:7b:bc:
e1:06:cf:9c:46:9d:8e:c9:a5:19:ce:17:16:2f:71:
18:84:53:a6:83:63:86:ab:9a:db:1d:39:6a:75:f0:
6b:08:ef:32:87:e4:f5:c7:e7:6b:4c:24:42:d0:37:
72:fe:a7:56:6f:03:8d:c3:76:e5:ca:c8:88:24:c7:
a6:3d:e6:b4:33:67:22:3b:ea:a1:13:d2:67:70:fd:
f7:f5:3c:60:90:ed:e9:8a:3f:38:d9:da:8c:86:3d:
e3:da:e7:75:7d:46:f2:88:1c:89:e2:75:89:06:34:
43:9b:1a:7c:a3:df:ee:6c:e5:2a:ae:9f:ff:5a:75:
70:ed:ec:f3:c6:f4:5d:d5:4b:c5:9a:39:69:c3:a9:
ea:fa:6c:f7:65:d1:bc:6b:8f:92:b8:82:c3:4c:6d:
cc:3d:c6:50:24:ae:28:20:0e:54:59:7d:c7:89:10:
d5:af:9f:f0:94:c6:6c:93:6a:65:df:81:26:fe:13:
f9:48:86:79:cb:48:95:12:22:4c:a7:95:05:9b:62:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:1E:5A:98:6C:87:4F:E9:F8:B2:E3:A4:FD:51:C7:55:0C:00:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
07:43:8f:da:83:56:82:e7:9f:9d:63:b5:a3:15:1e:5d:5e:f0:
90:77:7f:64:15:9a:12:f2:80:51:f2:76:d1:c5:b9:34:9b:b7:
ce:4f:dd:70:4a:e9:b5:67:49:4e:e2:c5:45:ca:fa:30:01:d6:
5c:c7:6f:4a:11:39:7a:58:d5:09:20:58:dc:f4:15:80:bf:ff:
62:6f:d7:d3:0f:bd:5d:22:e1:e0:7e:51:d7:7d:31:4f:5c:28:
38:f2:bb:84:14:f3:7e:cd:b3:55:60:47:f7:d0:fe:28:e6:d8:
e2:09:d8:cc:9f:40:bf:0c:67:b3:05:86:a9:d0:0b:0b:ea:c1:
ee:8f:a0:72:96:87:3e:b3:57:92:85:a5:99:83:a1:9b:b7:32:
20:d8:de:9e:cc:0e:60:1c:9f:c2:61:b2:91:ea:69:e8:5f:33:
82:bd:33:71:ce:6b:f1:de:38:ae:26:e3:62:1e:f2:01:a8:d1:
cd:d1:78:ec:02:10:69:2b:d1:d0:e8:5b:b2:7d:f1:56:8e:02:
5c:9b:d3:e3:78:34:85:96:14:f0:61:3c:2f:19:94:be:26:fe:
6c:ba:19:ba:cd:d7:dc:84:dc:7e:3e:ee:b9:e3:ce:78:62:6e:
92:39:89:06:aa:f3:64:01:8e:42:e3:f7:7a:23:51:37:e8:f8:
08:66:c6:15
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCj2UIlZ6F0IH4Dr8TeLizgGHSGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTUwMDdaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDdhZjgzYjBhZTdiZDE1MWQ3NWM3NmU4ODFiM2E1ZThjZGRhZjJkYjEyYzIy
ZjRmMDg5ODNjYzNlYzRkYjZjMDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKkrhxXEtFM6tHJAa5R2CYBcMuq+Y+BB1Dm4TH4Y/1It28fZkzYN5wLHAxOz
WH9Klt4dTlvVkB1XBHu84QbPnEadjsmlGc4XFi9xGIRTpoNjhqua2x05anXwawjv
Mofk9cfna0wkQtA3cv6nVm8DjcN25crIiCTHpj3mtDNnIjvqoRPSZ3D99/U8YJDt
6Yo/ONnajIY949rndX1G8ogcieJ1iQY0Q5safKPf7mzlKq6f/1p1cO3s88b0XdVL
xZo5acOp6vps92XRvGuPkriCw0xtzD3GUCSuKCAOVFl9x4kQ1a+f8JTGbJNqZd+B
Jv4T+UiGectIlRIiTKeVBZtiYtcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT76x5a
mGyHT+n4suOk/VHHVQwAjjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTA3YzUzNGQtMTg5Yi00M2IzLTk0NWEtZGQwNDBlZTIwMGQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAHQ4/ag1aC55+dY7WjFR5dXvCQd39kFZoS8oBR
8nbRxbk0m7fOT91wSum1Z0lO4sVFyvowAdZcx29KETl6WNUJIFjc9BWAv/9ib9fT
D71dIuHgflHXfTFPXCg48ruEFPN+zbNVYEf30P4o5tjiCdjMn0C/DGezBYap0AsL
6sHuj6Byloc+s1eShaWZg6GbtzIg2N6ezA5gHJ/CYbKR6mnoXzOCvTNxzmvx3jiu
JuNiHvIBqNHN0XjsAhBpK9HQ6FuyffFWjgJcm9PjeDSFlhTwYTwvGZS+Jv5suhm6
zdfchNx+Pu654854Ym6SOYkGqvNkAY5C4/d6I1E36PgIZsYV
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:17 2026 by rpki-client