Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
File: 76af8472-01ad-4042-b385-078d559d94d0.roa (raw, json)
Hash identifier: 7QzjWhHggdone9ZuLMZoBn4IXiz3UbQgxQ2u42N4EZM=
Subject key identifier: EF:28:02:63:B2:16:E2:72:2C:4E:6B:3C:5E:75:53:0A:E7:0C:52:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DF614ECD7F0270C4A7997F78952B5DF510EE2AC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
Signing time: Fri 06 Feb 2026 00:30:12 +0000
ROA not before: Fri 06 Feb 2026 00:30:12 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f6:14:ec:d7:f0:27:0c:4a:79:97:f7:89:52:b5:df:51:0e:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 6 00:30:12 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=ad42512a37e2ae8273eea51f1721db7029216c9674b21c7efcea3b0f94cfed0e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:71:0b:c8:ce:eb:2e:9f:99:39:c7:d3:83:
2e:30:f2:6a:88:13:5a:16:63:4c:5f:ff:67:dc:0e:
75:b6:e1:fe:a1:c7:f9:f9:17:5e:57:70:29:71:3e:
5b:73:72:ba:9a:ff:09:7b:f5:28:e4:9f:64:58:30:
cd:8a:56:64:f5:c8:72:29:3c:20:bb:bb:ad:26:aa:
35:85:c3:71:72:4e:5d:c3:5e:46:b8:35:29:28:e2:
8e:e8:ad:a2:55:73:cf:ac:f3:4d:12:91:fb:8d:c9:
9a:0c:aa:43:49:25:33:b1:66:a1:67:42:6f:54:0b:
ed:fa:0c:ec:6b:06:e7:1e:ab:15:17:9e:ca:1d:56:
0c:b1:89:1d:20:c0:07:7c:57:40:42:5a:d4:08:c4:
7c:f1:86:60:14:42:38:0c:05:55:2e:3c:6d:4f:b6:
aa:57:0e:7b:2a:c7:55:ef:24:73:ca:86:28:81:12:
b6:fd:84:10:e1:34:3f:84:15:d7:53:60:cb:c6:1f:
93:b6:69:33:38:e9:48:f6:f4:5f:f2:5b:cd:34:4b:
20:be:70:3b:c0:ba:71:92:7c:4b:2a:29:7a:36:b4:
6d:25:08:fc:7a:e9:63:dd:d1:3b:dd:ce:5b:ee:6b:
6d:ce:55:6a:19:85:ef:78:4c:9d:e8:b1:5f:fb:bf:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:02:63:B2:16:E2:72:2C:4E:6B:3C:5E:75:53:0A:E7:0C:52:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
bd:2d:14:00:f5:d4:20:b2:9b:42:af:ca:57:1e:6c:ba:f8:62:
3a:12:77:f2:6e:31:91:37:53:ce:c6:41:a1:cc:6c:82:5c:b6:
3d:fe:2e:e8:3b:ba:3d:2e:60:89:10:11:75:3d:ca:02:0a:82:
a8:62:02:d9:e9:7a:0d:d4:a9:9b:8d:d7:5c:2b:1c:8a:8d:10:
c1:ec:a4:69:8b:0c:ad:d1:3b:fd:8f:f6:b5:31:1f:76:06:02:
68:7d:18:26:e1:f2:c0:0f:1b:e3:71:c4:45:a1:9a:40:af:0b:
b7:95:70:e5:a9:8f:1e:e5:e7:91:dd:84:ce:5a:dd:fe:f9:69:
91:36:8b:13:b2:de:75:46:aa:7b:c0:a0:48:a7:48:f9:ab:8f:
83:67:c4:a7:6d:d3:b7:d9:c8:28:e9:b7:10:88:26:26:96:d5:
f9:a2:2e:17:df:2c:ca:43:df:eb:a9:01:c0:76:8a:4e:f5:8d:
12:0a:96:50:10:b6:75:bf:8a:dc:52:5b:d0:9d:b1:5f:d7:4f:
cd:ce:35:bd:25:a9:42:c7:bf:26:96:64:90:d9:68:ef:55:73:
bd:6e:e6:0d:02:42:86:72:4e:8c:a2:6b:29:f0:a2:23:a4:46:
7b:06:ea:2b:59:a2:60:05:0f:13:f2:e1:e2:e5:0a:f0:14:cf:
d5:38:69:13
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHfYU7NfwJwxKeZf3iVK131EO4qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMDYwMDMwMTJaFw0yNjA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkNDI1MTJhMzdlMmFlODI3M2VlYTUxZjE3MjFkYjcwMjkyMTZjOTY3NGIy
MWM3ZWZjZWEzYjBmOTRjZmVkMGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTDcQvIzusun5k5x9ODLjDyaogTWhZjTF//Z9wOdbbh/qHH+fkXXldwKXE+
W3Nyupr/CXv1KOSfZFgwzYpWZPXIcik8ILu7rSaqNYXDcXJOXcNeRrg1KSjijuit
olVzz6zzTRKR+43JmgyqQ0klM7FmoWdCb1QL7foM7GsG5x6rFReeyh1WDLGJHSDA
B3xXQEJa1AjEfPGGYBRCOAwFVS48bU+2qlcOeyrHVe8kc8qGKIEStv2EEOE0P4QV
11Ngy8Yfk7ZpMzjpSPb0X/JbzTRLIL5wO8C6cZJ8Syopeja0bSUI/HrpY93RO93O
W+5rbc5VahmF73hMneixX/u/ph8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTvKAJj
shbicixOazxedVMK5wxSvjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzZhZjg0NzItMDFhZC00MDQyLWIzODUtMDc4ZDU1OWQ5NGQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DRg
QDANBgkqhkiG9w0BAQsFAAOCAQEAvS0UAPXUILKbQq/KVx5suvhiOhJ38m4xkTdT
zsZBocxsgly2Pf4u6Du6PS5giRARdT3KAgqCqGIC2el6DdSpm43XXCscio0Qweyk
aYsMrdE7/Y/2tTEfdgYCaH0YJuHywA8b43HERaGaQK8Lt5Vw5amPHuXnkd2Ezlrd
/vlpkTaLE7LedUaqe8CgSKdI+auPg2fEp23Tt9nIKOm3EIgmJpbV+aIuF98sykPf
66kBwHaKTvWNEgqWUBC2db+K3FJb0J2xX9dPzc41vSWpQse/JpZkkNlo71VzvW7m
DQJChnJOjKJrKfCiI6RGewbqK1miYAUPE/Lh4uUK8BTP1ThpEw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:23 2026 by rpki-client