Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
File: 92652652-28d6-49c1-8ea6-f5079f374345.roa (raw, json)
Hash identifier: O0llYYgDS2DwQyphvhq1A+QR2AgneBl4PyjR3MbmgEc=
Subject key identifier: 0E:3A:39:6E:66:35:16:C0:0F:52:03:98:B0:37:11:86:69:1A:60:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7791218B41B4877F35FB3A5A211C44921B011054
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
Signing time: Sat 28 Feb 2026 06:00:35 +0000
ROA not before: Sat 28 Feb 2026 06:00:35 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:91:21:8b:41:b4:87:7f:35:fb:3a:5a:21:1c:44:92:1b:01:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:00:35 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=1461db28b5f0f2069d3b1feeeb4fe32fc44e7f3750658ce64e4d642bd3c47655, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:c8:33:c9:cf:d7:22:d5:5e:8c:69:46:89:
4e:cf:5c:02:9a:21:b6:4d:1a:87:2c:78:6c:a3:56:
71:70:31:b2:ea:02:d5:fc:ab:b5:98:02:d4:b2:1d:
5b:48:8d:8c:ab:b0:d0:f3:73:a2:81:8b:41:12:de:
41:1b:0c:e6:b6:ae:7c:6c:2b:76:78:2c:5e:0f:54:
29:55:9f:51:3a:e1:0d:e4:31:52:9f:d8:6b:c2:13:
86:1c:fb:f8:8f:d5:e9:54:bf:65:a0:a0:a6:48:4c:
25:87:95:16:62:7c:5e:0b:2d:3d:6e:16:4e:a9:9b:
d7:cf:f6:d8:91:8d:fb:76:67:37:6d:83:d5:2b:11:
04:01:e0:3a:c1:29:2f:4d:e9:3b:b1:aa:5f:d4:55:
77:72:31:93:0f:50:b7:b3:9d:36:95:af:b4:a5:35:
6f:13:be:67:6e:c4:e3:f4:7d:b7:bd:a6:f6:40:84:
e5:ad:f8:dc:5d:6c:16:a7:47:8f:17:65:2f:27:25:
2b:a1:04:f0:7f:51:a1:dd:34:7e:71:e8:15:12:b7:
34:9c:a9:a0:87:e4:ff:fc:10:0a:6d:bd:ae:cc:5f:
47:40:17:7b:5e:ea:53:54:7e:84:80:20:11:60:a6:
7d:0a:b5:14:ce:ca:a7:27:8d:7a:98:09:d2:18:b5:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:39:6E:66:35:16:C0:0F:52:03:98:B0:37:11:86:69:1A:60:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4060::/48
Signature Algorithm: sha256WithRSAEncryption
1e:5a:4c:0f:2e:2f:87:93:1f:e9:38:79:47:61:30:87:77:14:
e8:9f:13:a4:e6:c7:2b:ac:f1:0f:87:8b:d1:b0:a1:35:4f:e5:
c0:12:be:39:54:3d:b2:c9:38:5b:a3:06:78:18:d9:a1:33:e5:
bf:1e:d1:ed:d5:98:40:fa:9c:d1:08:fb:3d:35:65:5c:ce:80:
c6:28:df:82:87:95:cf:0d:93:19:63:e2:7d:48:a7:26:9c:4a:
e0:64:6c:17:41:b4:39:24:41:df:1e:e6:c0:43:12:23:fe:7b:
ef:6e:8f:5e:32:1b:d6:2d:a6:5f:d3:11:fa:26:9a:35:d1:5b:
13:0d:53:94:6e:5b:53:e0:99:86:c0:a4:03:de:5a:d2:91:dc:
49:c2:29:05:5d:d9:fe:92:78:c0:73:2f:e9:1c:dd:f5:dc:f8:
85:50:16:ad:5e:3c:ea:4b:18:65:ff:63:34:92:12:d7:7f:ac:
08:51:80:6a:35:c9:34:43:9c:ec:33:01:d0:ec:85:6e:8e:b9:
03:fc:4f:ff:2c:09:55:26:2a:54:56:7f:7d:f2:75:d1:e6:db:
50:6d:19:8e:bd:b6:38:9a:f6:f9:06:50:d7:4f:c9:0b:e9:84:
6c:14:5d:dc:a3:a5:9c:da:7b:68:e7:81:e7:6b:48:05:77:88:
e3:65:3b:05
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUd5Ehi0G0h381+zpaIRxEkhsBEFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjAwMzVaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0NjFkYjI4YjVmMGYyMDY5ZDNiMWZlZWViNGZlMzJmYzQ0ZTdmMzc1MDY1
OGNlNjRlNGQ2NDJiZDNjNDc2NTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ5kyDPJz9ci1V6MaUaJTs9cApohtk0ahyx4bKNWcXAxsuoC1fyrtZgC1LId
W0iNjKuw0PNzooGLQRLeQRsM5raufGwrdngsXg9UKVWfUTrhDeQxUp/Ya8IThhz7
+I/V6VS/ZaCgpkhMJYeVFmJ8XgstPW4WTqmb18/22JGN+3ZnN22D1SsRBAHgOsEp
L03pO7GqX9RVd3Ixkw9Qt7OdNpWvtKU1bxO+Z27E4/R9t72m9kCE5a343F1sFqdH
jxdlLyclK6EE8H9Rod00fnHoFRK3NJypoIfk//wQCm29rsxfR0AXe17qU1R+hIAg
EWCmfQq1FM7KpyeNepgJ0hi1dC8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQOOjlu
ZjUWwA9SA5iwNxGGaRpg+TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTI2NTI2NTItMjhkNi00OWMxLThlYTYtZjUwNzlmMzc0MzQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A
YDANBgkqhkiG9w0BAQsFAAOCAQEAHlpMDy4vh5Mf6Th5R2Ewh3cU6J8TpObHK6zx
D4eL0bChNU/lwBK+OVQ9ssk4W6MGeBjZoTPlvx7R7dWYQPqc0Qj7PTVlXM6Axijf
goeVzw2TGWPifUinJpxK4GRsF0G0OSRB3x7mwEMSI/57726PXjIb1i2mX9MR+iaa
NdFbEw1TlG5bU+CZhsCkA95a0pHcScIpBV3Z/pJ4wHMv6Rzd9dz4hVAWrV486ksY
Zf9jNJIS13+sCFGAajXJNEOc7DMB0OyFbo65A/xP/ywJVSYqVFZ/ffJ10ebbUG0Z
jr22OJr2+QZQ10/JC+mEbBRd3KOlnNp7aOeB52tIBXeI42U7BQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:36 2026 by rpki-client