Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
File: a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json)
Hash identifier: hpc7jj0UDOhc6b1aYs7NZaVH7rvo7K+QZ25+T7Vo+UI=
Subject key identifier: 03:FD:00:A0:8A:9F:20:C2:8D:F7:52:0C:37:2D:DB:BA:6A:43:96:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03F6B56DEE1075093A20E50832215ED930C40688
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
Signing time: Sat 28 Feb 2026 06:30:13 +0000
ROA not before: Sat 28 Feb 2026 06:30:13 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f6:b5:6d:ee:10:75:09:3a:20:e5:08:32:21:5e:d9:30:c4:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:30:13 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=4c44ed622280ab7bce13a78e1d6df7c13e64b938953557a4d0ce82d575a9e5e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:4d:ce:b3:0b:4f:8e:bc:fb:7b:c3:6c:1a:
a7:ad:ed:ed:7e:27:94:f7:cd:a7:af:d0:b5:f7:36:
5d:89:90:d9:17:b8:c0:56:40:d0:d6:b9:4e:6d:fa:
f8:3e:b3:bf:ae:54:7e:68:5a:7a:fb:9d:e9:4d:a9:
a4:9e:01:1d:9a:63:72:1c:82:5b:21:3d:dc:fe:8a:
93:72:f3:31:e8:41:c6:10:2a:d2:60:09:6c:7b:3d:
7c:d7:63:9d:4d:39:ad:35:56:98:4f:9c:14:ba:26:
af:ce:d2:83:2c:3f:74:f0:ec:d5:a3:b1:1d:a7:75:
ec:ff:f3:30:95:b2:38:64:0a:b6:d9:43:ac:33:2e:
ad:b3:9a:3b:74:67:73:0d:e9:e1:ca:c7:d8:41:b6:
c9:2d:f1:20:a8:ea:91:df:50:b5:46:ef:f4:4f:d7:
42:16:17:da:f8:bd:44:a6:42:25:da:1d:76:3a:d8:
5a:0b:72:e4:03:49:2d:5a:ed:15:25:22:83:59:9d:
44:76:4e:85:77:13:71:8e:27:b5:51:4e:a2:d8:e7:
b6:33:26:32:7b:98:97:33:b0:a1:61:c1:c0:1c:03:
c9:0d:e8:e0:30:02:23:88:fd:c8:db:6b:df:b3:d7:
00:f8:8c:4b:1a:58:6d:b1:d8:15:24:c8:39:8a:6f:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:00:A0:8A:9F:20:C2:8D:F7:52:0C:37:2D:DB:BA:6A:43:96:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:38:84:2c:97:55:9c:28:4a:40:18:85:3a:46:73:7f:53:61:
c4:a1:7e:d3:dd:e7:c9:fc:2c:64:4e:9b:83:37:a0:f9:a2:ca:
2f:e8:1b:08:6e:19:da:4f:b2:aa:d0:09:80:1e:4f:33:60:f9:
a6:b3:ff:a3:46:be:13:a5:5c:e9:89:db:70:ce:37:30:d1:bb:
7a:01:00:3a:05:16:3d:3f:77:45:99:4c:78:45:4d:8e:30:83:
24:b5:ec:97:c6:1e:79:22:f9:76:66:79:54:1a:df:25:7b:1e:
c1:d2:fd:0f:aa:24:43:1d:b4:5b:15:40:08:de:6c:b1:36:f2:
b2:56:b4:b6:63:3a:4e:b9:49:7f:2b:f1:20:1d:46:2d:34:06:
4d:19:8a:eb:18:49:86:7a:67:a1:48:02:ec:af:77:ae:72:f3:
e2:6a:88:54:f3:bb:d3:1d:81:81:67:94:93:12:f1:dd:e2:1f:
3b:41:8b:2f:78:80:23:3f:f7:73:d7:29:1b:1d:64:ad:1a:31:
ae:c5:d5:68:1c:3c:5b:ed:d1:ce:49:fe:e2:24:44:f0:74:77:
a4:c1:ba:33:3f:fd:32:bb:73:c2:1e:29:54:e6:a7:33:82:3a:
6f:bb:85:a1:95:d9:4a:71:ef:61:3f:71:2c:4d:bf:f4:ec:0c:
72:2d:56:68
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUA/a1be4QdQk6IOUIMiFe2TDEBogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjMwMTNaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDRjNDRlZDYyMjI4MGFiN2JjZTEzYTc4ZTFkNmRmN2MxM2U2NGI5Mzg5NTM1
NTdhNGQwY2U4MmQ1NzVhOWU1ZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJGFTc6zC0+OvPt7w2wap63t7X4nlPfNp6/Qtfc2XYmQ2Re4wFZA0Na5Tm36
+D6zv65Ufmhaevud6U2ppJ4BHZpjchyCWyE93P6Kk3LzMehBxhAq0mAJbHs9fNdj
nU05rTVWmE+cFLomr87Sgyw/dPDs1aOxHad17P/zMJWyOGQKttlDrDMurbOaO3Rn
cw3p4crH2EG2yS3xIKjqkd9QtUbv9E/XQhYX2vi9RKZCJdoddjrYWgty5ANJLVrt
FSUig1mdRHZOhXcTcY4ntVFOotjntjMmMnuYlzOwoWHBwBwDyQ3o4DACI4j9yNtr
37PXAPiMSxpYbbHYFSTIOYpv1d0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQD/QCg
ip8gwo33Ugw3Ldu6akOWkTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTMzZmIyN2UtYjM2OC00MDNmLTg5ZTYtMDhkMDUzMDI1MzVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A
4DANBgkqhkiG9w0BAQsFAAOCAQEATjiELJdVnChKQBiFOkZzf1NhxKF+093nyfws
ZE6bgzeg+aLKL+gbCG4Z2k+yqtAJgB5PM2D5prP/o0a+E6Vc6YnbcM43MNG7egEA
OgUWPT93RZlMeEVNjjCDJLXsl8YeeSL5dmZ5VBrfJXsewdL9D6okQx20WxVACN5s
sTbysla0tmM6TrlJfyvxIB1GLTQGTRmK6xhJhnpnoUgC7K93rnLz4mqIVPO70x2B
gWeUkxLx3eIfO0GLL3iAIz/3c9cpGx1krRoxrsXVaBw8W+3Rzkn+4iRE8HR3pMG6
Mz/9Mrtzwh4pVOanM4I6b7uFoZXZSnHvYT9xLE2/9OwMci1WaA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:44 2026 by rpki-client