Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
File: 7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa (raw, json)
Hash identifier: RZz5OEzQyll48E1LS8+2FQtyVVVWyHf7JvJFDHrLf3w=
Subject key identifier: D0:05:DB:1D:93:C5:E3:4E:2D:35:8A:75:81:EE:E0:CD:3F:47:73:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D114D09CC7608C4DD71EB717501AA745699B0BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
Signing time: Fri 06 Feb 2026 00:40:08 +0000
ROA not before: Fri 06 Feb 2026 00:40:08 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:11:4d:09:cc:76:08:c4:dd:71:eb:71:75:01:aa:74:56:99:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:40:08 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=90cb3468e78ccd9c7e286da356e4bf8779fcb890656ba31b19bbfb1c651a7aeb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:83:62:84:d8:a1:1e:d3:d4:04:e7:f4:60:
25:18:b2:b0:6f:1b:81:c4:cd:75:3f:c1:3e:5d:cf:
6d:2e:c5:a2:6a:3d:bb:b6:9f:78:7b:95:82:15:a9:
e5:35:e6:68:87:0c:67:98:36:a6:ad:28:b2:33:f3:
db:cf:9b:7e:b0:14:b3:40:f8:9f:71:1a:57:3d:81:
e2:cd:33:b7:77:a2:c8:c2:ca:4e:5e:4d:36:a7:34:
1c:a9:81:ef:75:be:a0:8d:9d:5e:a9:76:83:ea:62:
c9:13:26:91:a4:5f:40:17:66:0b:b9:02:2d:a2:44:
d0:31:fb:1c:de:6d:0b:c4:f4:8c:05:79:44:3b:3d:
a1:cc:a7:ce:17:68:aa:42:57:b2:61:f6:20:cf:05:
40:96:d5:77:23:b8:a9:d7:a6:a3:20:e1:df:6b:ac:
d6:dd:55:b2:77:ec:7e:ad:f5:4b:c1:f4:98:fe:50:
87:fd:8b:87:a3:85:f5:11:ea:f1:db:55:af:ab:5e:
bc:da:7e:d5:63:01:19:4e:14:d6:a0:d4:be:9b:6b:
ff:3d:d7:00:79:80:45:06:d5:61:ba:4c:bd:99:3c:
aa:15:ff:09:a8:0d:1d:09:62:35:1a:bb:bd:b8:0a:
58:00:b4:f9:06:49:b4:50:13:9d:75:ac:32:ff:02:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:05:DB:1D:93:C5:E3:4E:2D:35:8A:75:81:EE:E0:CD:3F:47:73:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010::/28
Signature Algorithm: sha256WithRSAEncryption
b4:af:01:16:0a:29:de:2c:46:0a:bb:d8:36:1f:20:65:1d:6d:
eb:a4:18:ee:f5:aa:e4:f3:1a:d3:1d:9e:28:47:41:c8:74:0e:
f9:53:98:88:9c:8c:63:27:3b:bc:44:51:35:72:d1:39:ea:d0:
ce:5d:ea:67:6f:5d:e2:32:30:65:c1:eb:8c:ec:d7:e7:fe:49:
7c:03:f3:7a:7a:45:a7:79:93:b4:f0:02:bf:70:8a:fe:ce:cf:
5d:af:a9:4c:4a:1d:34:e7:79:c9:98:99:ad:99:1a:23:82:60:
17:22:94:ea:b3:dc:f2:ea:8d:d8:8c:3b:19:dd:5c:88:c7:9b:
08:f0:01:5a:b4:5b:97:fc:10:fd:e3:cc:ca:0b:7c:04:de:04:
d4:f6:b5:b9:f0:50:30:e5:06:02:15:71:e7:af:b3:46:2b:49:
ed:fe:bd:77:9e:35:cf:c5:65:3e:fc:4c:3d:9d:8a:93:36:73:
23:83:cb:19:a0:c9:0c:10:b3:97:2a:a7:f0:b0:15:15:3e:b0:
ba:cd:80:e6:3e:12:2f:e6:ec:bb:62:50:d2:fa:b8:84:de:38:
84:f7:b2:90:12:83:50:1a:4f:bf:8f:b7:86:bf:e1:3a:7b:9b:
74:4d:1c:78:08:23:21:bc:71:dd:5d:13:84:66:1f:9c:46:d2:
9d:61:d8:a0
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUXRFNCcx2CMTdcetxdQGqdFaZsLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMDYwMDQwMDhaFw0yNjA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDkwY2IzNDY4ZTc4Y2NkOWM3ZTI4NmRhMzU2ZTRiZjg3NzlmY2I4OTA2NTZi
YTMxYjE5YmJmYjFjNjUxYTdhZWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANp/g2KE2KEe09QE5/RgJRiysG8bgcTNdT/BPl3PbS7Fomo9u7afeHuVghWp
5TXmaIcMZ5g2pq0osjPz28+bfrAUs0D4n3EaVz2B4s0zt3eiyMLKTl5NNqc0HKmB
73W+oI2dXql2g+piyRMmkaRfQBdmC7kCLaJE0DH7HN5tC8T0jAV5RDs9ocynzhdo
qkJXsmH2IM8FQJbVdyO4qdemoyDh32us1t1Vsnfsfq31S8H0mP5Qh/2Lh6OF9RHq
8dtVr6tevNp+1WMBGU4U1qDUvptr/z3XAHmARQbVYbpMvZk8qhX/CagNHQliNRq7
vbgKWAC0+QZJtFATnXWsMv8CpiECAwEAAaOCAiIwggIeMB0GA1UdDgQWBBTQBdsd
k8XjTi01inWB7uDNP0dz5jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzM4MWMwNzUtZDk2Yi00M2JmLThhODktMjVkYmFiOWExYThkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFBCoF0BAw
DQYJKoZIhvcNAQELBQADggEBALSvARYKKd4sRgq72DYfIGUdbeukGO71quTzGtMd
nihHQch0DvlTmIicjGMnO7xEUTVy0Tnq0M5d6mdvXeIyMGXB64zs1+f+SXwD83p6
Rad5k7TwAr9wiv7Oz12vqUxKHTTnecmYma2ZGiOCYBcilOqz3PLqjdiMOxndXIjH
mwjwAVq0W5f8EP3jzMoLfATeBNT2tbnwUDDlBgIVceevs0YrSe3+vXeeNc/FZT78
TD2dipM2cyODyxmgyQwQs5cqp/CwFRU+sLrNgOY+Ei/m7LtiUNL6uITeOIT3spAS
g1AaT7+Pt4a/4Tp7m3RNHHgIIyG8cd1dE4RmH5xG0p1h2KA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:29:53 2026 by rpki-client