Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
File: 8b940c44-168e-4976-b17d-778e9341611b.roa (raw, json)
Hash identifier: KKCZh5yunq8Nh/KdjjCbv5fgeGQ6jJ+PqMUK05UYhlM=
Subject key identifier: 7E:65:0E:43:F9:A1:28:54:B8:D8:2A:35:32:DD:D8:07:62:99:B3:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ABEA379E2340FF40ABB0D71053CCE1C3D0C96F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
Signing time: Sat 28 Feb 2026 06:20:45 +0000
ROA not before: Sat 28 Feb 2026 06:20:45 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:be:a3:79:e2:34:0f:f4:0a:bb:0d:71:05:3c:ce:1c:3d:0c:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:20:45 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=af346f9e7ed4832db8e5f47cf91195fdc5156527c794fb8a551c4cab0b7747dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:85:60:ab:b2:ad:e3:d4:88:f2:52:6b:65:
33:8e:e1:de:73:a3:e5:24:50:61:d4:0f:23:c1:c8:
ff:ce:10:04:a2:f3:db:32:b1:fb:f9:4f:69:34:d7:
fa:e4:27:81:d8:29:da:d6:53:01:67:d9:67:c8:48:
51:38:5d:71:32:1e:f6:ca:a7:cb:61:18:97:d0:c9:
28:b0:0e:9b:ed:3a:df:3d:6d:ee:24:89:1d:51:e7:
06:50:25:20:0d:dd:99:5a:81:87:d1:87:0a:3d:ff:
71:36:29:06:87:fe:65:fb:81:55:5d:72:4a:6f:35:
36:e7:ca:49:c1:b6:c1:b6:dc:09:72:f5:8b:43:84:
e6:df:b3:cc:61:48:b5:25:5d:58:28:95:13:0e:01:
a6:70:4a:20:15:e4:28:86:2b:e7:ff:e3:28:96:8a:
b8:49:45:e0:b1:cd:63:5b:bd:06:48:b5:35:2d:c2:
ee:e4:1a:72:74:94:69:56:8d:08:1c:0a:1c:5b:8b:
18:17:42:f5:c3:fc:1f:75:24:99:c2:25:70:7b:39:
d4:e9:4b:d6:26:fc:ee:16:22:42:bd:56:79:1f:76:
cf:26:a3:d7:1d:15:ab:22:24:0c:57:7f:81:38:59:
dd:a5:30:81:78:f6:6c:72:17:0d:6f:e4:5c:79:79:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:0E:43:F9:A1:28:54:B8:D8:2A:35:32:DD:D8:07:62:99:B3:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1080::/48
Signature Algorithm: sha256WithRSAEncryption
88:97:82:8e:e7:9f:b4:99:6f:da:3a:ec:86:93:51:b0:b0:71:
b2:b5:e3:8d:b2:58:f9:f8:49:33:2d:d2:1d:29:98:1a:c7:ac:
b4:5a:c6:3b:57:1a:29:ff:65:b1:dc:84:0b:85:e9:9b:62:c6:
cd:5c:dd:69:65:07:3b:c7:15:23:ad:26:1d:6e:43:91:18:56:
cf:7b:6d:83:29:fc:73:4c:08:43:1f:6c:d6:2c:9e:1a:43:e5:
a0:09:db:58:d0:a5:f1:08:0a:ff:3d:27:ba:a9:80:a6:58:1a:
10:2f:93:d1:e8:a4:e8:b9:49:bf:f7:c4:3d:ab:26:1b:9e:fd:
ef:7a:02:3f:ba:50:a6:4b:eb:bd:2d:e7:a3:c0:82:ca:9d:a4:
19:59:69:c5:b9:ce:0f:24:0e:04:00:a0:73:a8:df:39:1d:57:
18:7a:20:60:ae:b7:3f:36:9b:05:8f:47:de:d2:2c:31:d7:ac:
41:31:7a:12:5b:a8:fd:86:77:fc:24:46:db:88:3f:d9:b1:3d:
53:21:d8:28:e1:32:02:11:f7:8f:ef:20:67:81:5f:bd:64:87:
c8:0e:45:ca:be:69:a6:1a:a1:83:df:c3:73:5f:b4:51:28:36:
b0:d6:d8:63:1f:94:80:2d:06:85:7b:e6:74:5c:69:d8:51:7a:
b7:47:65:0f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWr6jeeI0D/QKuw1xBTzOHD0MlvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjIwNDVaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGFmMzQ2ZjllN2VkNDgzMmRiOGU1ZjQ3Y2Y5MTE5NWZkYzUxNTY1MjdjNzk0
ZmI4YTU1MWM0Y2FiMGI3NzQ3ZGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7dhWCrsq3j1IjyUmtlM47h3nOj5SRQYdQPI8HI/84QBKLz2zKx+/lPaTTX
+uQngdgp2tZTAWfZZ8hIUThdcTIe9sqny2EYl9DJKLAOm+063z1t7iSJHVHnBlAl
IA3dmVqBh9GHCj3/cTYpBof+ZfuBVV1ySm81NufKScG2wbbcCXL1i0OE5t+zzGFI
tSVdWCiVEw4BpnBKIBXkKIYr5//jKJaKuElF4LHNY1u9Bki1NS3C7uQacnSUaVaN
CBwKHFuLGBdC9cP8H3UkmcIlcHs51OlL1ib87hYiQr1WeR92zyaj1x0VqyIkDFd/
gThZ3aUwgXj2bHIXDW/kXHl5yHsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR+ZQ5D
+aEoVLjYKjUy3dgHYpmzaTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGI5NDBjNDQtMTY4ZS00OTc2LWIxN2QtNzc4ZTkzNDE2MTFiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAiJeCjueftJlv2jrshpNRsLBxsrXjjbJY+fhJ
My3SHSmYGsestFrGO1caKf9lsdyEC4Xpm2LGzVzdaWUHO8cVI60mHW5DkRhWz3tt
gyn8c0wIQx9s1iyeGkPloAnbWNCl8QgK/z0nuqmAplgaEC+T0eik6LlJv/fEPasm
G57973oCP7pQpkvrvS3no8CCyp2kGVlpxbnODyQOBACgc6jfOR1XGHogYK63Pzab
BY9H3tIsMdesQTF6Eluo/YZ3/CRG24g/2bE9UyHYKOEyAhH3j+8gZ4FfvWSHyA5F
yr5pphqhg9/Dc1+0USg2sNbYYx+UgC0GhXvmdFxp2FF6t0dlDw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:06 2026 by rpki-client