Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82df8d10-cbc3-4e10-bb57-64c489c9d380.roa
File: 82df8d10-cbc3-4e10-bb57-64c489c9d380.roa (raw, json)
Hash identifier: MJb6L2msHp4O7xSDK0IHkv1VjdDeDzBR6Ne5i7zYvz8=
Subject key identifier: 48:60:BD:C1:88:9D:2F:54:D2:34:6F:36:E0:E5:90:A9:F6:D5:73:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F8BE9D54F114110FEBD4126FD6D3E155CC01541
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82df8d10-cbc3-4e10-bb57-64c489c9d380.roa
Signing time: Tue 24 Feb 2026 00:40:11 +0000
ROA not before: Tue 24 Feb 2026 00:40:11 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8b:e9:d5:4f:11:41:10:fe:bd:41:26:fd:6d:3e:15:5c:c0:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 24 00:40:11 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=b6f144072bcd4ed75ed3d8b15b8daef849e976bc1fd269be3074156d610af7d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:ed:74:96:8f:a9:ae:34:69:12:3e:24:a7:
fd:f8:aa:3c:fa:f9:ff:59:2b:db:69:25:82:6f:f5:
31:ba:ec:64:12:8b:65:a1:13:65:f6:47:00:e4:8c:
c7:97:88:78:3f:25:d1:54:a1:37:89:c6:3b:00:ab:
37:4f:53:2c:93:36:04:f6:bf:3a:81:17:7e:68:bb:
c1:90:4d:1b:fb:8f:87:fe:59:f6:d9:1a:39:6a:f9:
50:fd:06:e5:3c:95:5d:17:4e:f0:43:93:05:0b:67:
52:6c:92:2a:98:4f:9e:b9:52:e9:8d:ff:89:11:c3:
3b:d8:db:7e:87:24:7e:a1:69:ae:fd:63:11:82:b4:
8d:92:1f:8e:77:4a:83:98:80:7f:ae:ce:2f:2c:01:
ef:26:ce:9b:1e:25:94:f4:53:46:6d:19:6c:38:9a:
b5:44:86:31:26:9f:51:95:80:72:69:08:2f:a5:4c:
b8:d0:12:c1:ed:a3:3a:a4:e3:33:16:ac:bb:61:81:
e1:60:2b:cc:dc:d8:f6:95:30:20:46:b7:43:55:ba:
e3:a7:2d:f0:f0:01:8c:ec:ea:bc:9c:db:43:0c:c8:
d8:30:6d:59:10:69:ab:1d:73:5e:8a:70:7e:cb:39:
ed:bf:a5:c7:6a:77:13:90:aa:71:d7:0a:a5:2a:68:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:BD:C1:88:9D:2F:54:D2:34:6F:36:E0:E5:90:A9:F6:D5:73:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82df8d10-cbc3-4e10-bb57-64c489c9d380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:d000::/48
Signature Algorithm: sha256WithRSAEncryption
29:f2:68:5b:31:bf:76:1f:6f:8c:39:97:4f:b3:d3:97:cc:ac:
71:ef:ad:67:60:83:90:29:6d:e8:3c:11:e4:bc:16:6e:49:f9:
cf:4f:c1:a8:13:d2:70:74:48:5b:73:6a:5c:82:ea:a1:02:42:
7d:44:3f:74:4e:19:75:11:39:db:68:fb:2b:5d:8a:0f:25:0c:
99:17:c2:59:fc:f6:0e:d1:a8:ac:b4:74:61:f6:1c:3c:5d:1c:
e1:6f:26:8c:1f:80:18:a8:e2:f6:f2:ff:2f:a6:df:d2:15:5e:
2b:7d:3f:57:bd:51:b2:d4:df:23:c3:51:9f:13:5e:5b:be:b3:
a1:05:ee:61:8a:fb:d9:ad:3f:6a:b8:04:69:10:22:60:49:d6:
a4:36:7d:c9:1e:81:bf:85:0a:4d:4f:8c:ad:38:d8:58:ed:aa:
8b:6b:15:ef:04:02:08:22:f9:09:15:f4:37:ff:7f:f4:b8:f5:
a1:ff:31:32:08:ea:3c:fe:1c:0a:8e:ef:f5:76:d3:3b:fd:12:
49:3b:9b:ab:10:8f:d7:0e:68:94:00:06:41:f7:06:c2:61:15:
5a:8a:71:29:df:85:c3:ff:c1:90:79:00:d4:58:cc:ab:09:9d:
24:ce:bd:1c:b3:49:3e:aa:10:fe:ee:c4:80:f2:09:a1:70:d4:
70:fb:05:af
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUP4vp1U8RQRD+vUEm/W0+FVzAFUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjQwMDQwMTFaFw0yNjA1MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGI2ZjE0NDA3MmJjZDRlZDc1ZWQzZDhiMTViOGRhZWY4NDllOTc2YmMxZmQy
NjliZTMwNzQxNTZkNjEwYWY3ZDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdY7XSWj6muNGkSPiSn/fiqPPr5/1kr22klgm/1MbrsZBKLZaETZfZHAOSM
x5eIeD8l0VShN4nGOwCrN09TLJM2BPa/OoEXfmi7wZBNG/uPh/5Z9tkaOWr5UP0G
5TyVXRdO8EOTBQtnUmySKphPnrlS6Y3/iRHDO9jbfockfqFprv1jEYK0jZIfjndK
g5iAf67OLywB7ybOmx4llPRTRm0ZbDiatUSGMSafUZWAcmkIL6VMuNASwe2jOqTj
Mxasu2GB4WArzNzY9pUwIEa3Q1W646ct8PABjOzqvJzbQwzI2DBtWRBpqx1zXopw
fss57b+lx2p3E5CqcdcKpSpoDRECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRIYL3B
iJ0vVNI0bzbg5ZCp9tVzZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODJkZjhkMTAtY2JjMy00ZTEwLWJiNTctNjRjNDg5YzlkMzgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GzQ
ADANBgkqhkiG9w0BAQsFAAOCAQEAKfJoWzG/dh9vjDmXT7PTl8ysce+tZ2CDkClt
6DwR5LwWbkn5z0/BqBPScHRIW3NqXILqoQJCfUQ/dE4ZdRE522j7K12KDyUMmRfC
Wfz2DtGorLR0YfYcPF0c4W8mjB+AGKji9vL/L6bf0hVeK30/V71RstTfI8NRnxNe
W76zoQXuYYr72a0/argEaRAiYEnWpDZ9yR6Bv4UKTU+MrTjYWO2qi2sV7wQCCCL5
CRX0N/9/9Lj1of8xMgjqPP4cCo7v9XbTO/0SSTubqxCP1w5olAAGQfcGwmEVWopx
Kd+Fw//BkHkA1FjMqwmdJM69HLNJPqoQ/u7EgPIJoXDUcPsFrw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:43:32 2026 by rpki-client