Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
File: cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa (raw, json)
Hash identifier: D5CLn5NBoVjzUDziBe10lvAmlEgBGamhP1te4463V7s=
Subject key identifier: 93:AA:EF:23:D4:73:6F:B3:52:3C:61:45:B1:38:79:99:13:42:DC:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 596A199CD666CFDB358E44C8A869C358E3DB256A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
Signing time: Sat 28 Feb 2026 06:21:02 +0000
ROA not before: Sat 28 Feb 2026 06:21:02 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6a:19:9c:d6:66:cf:db:35:8e:44:c8:a8:69:c3:58:e3:db:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:21:02 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=8478830da97a8e1e6221665707e39f0af5fb2475442a462690dfb9cbecb445a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:35:4b:ad:9d:2d:96:8b:02:e2:92:43:6f:
94:ed:af:84:b5:8f:25:cd:32:66:7f:4d:3f:ca:c3:
26:0d:78:b0:e3:c4:51:8c:27:8b:52:2e:5a:a6:98:
a3:9d:94:03:a3:49:4b:01:fa:2f:d1:c9:70:d0:98:
26:97:6f:03:db:08:30:db:61:23:b0:79:cb:c4:02:
33:3a:87:02:42:21:94:2e:e7:84:e5:a8:49:19:c9:
64:3d:77:1e:ce:05:c3:73:9e:14:9b:07:8b:bc:b0:
75:16:3c:0b:4c:98:3e:ac:e9:72:dd:ee:29:cb:58:
85:b2:00:08:bd:7d:1e:67:ad:d6:7c:c8:b4:37:f9:
ad:4f:14:89:f0:91:b4:86:44:38:e4:8b:be:1c:da:
bd:99:98:c1:fa:10:5b:93:17:c4:0c:96:de:72:be:
9e:9e:1c:65:f2:f9:5a:0a:31:ef:5c:4c:83:86:e4:
67:44:9e:71:45:24:72:bd:57:25:ac:56:f6:c9:2f:
67:4e:28:b3:0c:ea:29:13:0f:bc:b6:90:5f:7b:c9:
f0:35:e4:a7:03:ef:53:c5:bf:e5:1d:85:04:43:54:
a7:36:f7:51:9b:7d:df:4f:e3:07:fc:e0:de:c6:85:
b9:1b:a2:37:d5:41:0a:f2:31:14:ad:e5:f4:87:74:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:EF:23:D4:73:6F:B3:52:3C:61:45:B1:38:79:99:13:42:DC:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1040::/48
Signature Algorithm: sha256WithRSAEncryption
23:ca:2d:cf:8e:ef:e1:5e:65:b2:63:31:7f:0b:0b:82:1e:5c:
e7:be:aa:dd:cd:4b:97:db:3d:8b:99:e0:6a:4c:d3:17:29:dd:
3e:44:0c:55:d5:27:32:0a:1a:35:67:c1:d8:a2:96:19:d7:88:
6a:24:75:3c:24:42:da:dc:12:c0:75:37:fb:10:ef:c7:97:ad:
14:e8:b8:cf:ee:e6:77:97:fc:58:98:bb:20:16:31:83:11:24:
ad:f5:80:20:15:53:8a:85:bf:2c:e1:24:e1:dc:cc:99:3c:88:
cb:d3:f5:3e:5b:8b:33:d8:cd:10:c7:f4:bc:d3:55:39:44:89:
63:8d:e4:12:42:52:62:22:24:b0:28:64:65:3b:30:64:14:1e:
d3:34:d4:0c:7d:1d:87:15:3f:11:25:46:9b:2a:93:b5:45:be:
5c:1c:e7:9c:05:fc:fc:60:5d:c1:9d:93:2c:14:95:56:42:50:
17:49:a4:5a:33:94:3c:bb:cb:94:ee:f0:cb:a7:ad:f8:89:38:
be:46:91:ab:17:55:ed:e0:b2:a8:0a:db:07:d6:31:b0:c4:0e:
58:72:92:77:36:8b:a0:90:f2:49:e8:2a:bd:e1:f1:ae:6e:8a:
5b:e8:92:0e:c4:a8:5c:0d:b9:5c:14:1b:1b:41:8c:62:eb:ac:
b1:e7:e5:5f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWWoZnNZmz9s1jkTIqGnDWOPbJWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjIxMDJaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDg0Nzg4MzBkYTk3YThlMWU2MjIxNjY1NzA3ZTM5ZjBhZjVmYjI0NzU0NDJh
NDYyNjkwZGZiOWNiZWNiNDQ1YTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO/ONUutnS2WiwLikkNvlO2vhLWPJc0yZn9NP8rDJg14sOPEUYwni1IuWqaY
o52UA6NJSwH6L9HJcNCYJpdvA9sIMNthI7B5y8QCMzqHAkIhlC7nhOWoSRnJZD13
Hs4Fw3OeFJsHi7ywdRY8C0yYPqzpct3uKctYhbIACL19Hmet1nzItDf5rU8UifCR
tIZEOOSLvhzavZmYwfoQW5MXxAyW3nK+np4cZfL5Wgox71xMg4bkZ0SecUUkcr1X
JaxW9skvZ04oswzqKRMPvLaQX3vJ8DXkpwPvU8W/5R2FBENUpzb3UZt930/jB/zg
3saFuRuiN9VBCvIxFK3l9Id0+BsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSTqu8j
1HNvs1I8YUWxOHmZE0LcwDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Y4MzI2ZDAtZWNjMC00OTM5LTk5MzktMmVkNzBmNmVhNTM2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAI8otz47v4V5lsmMxfwsLgh5c576q3c1Ll9s9
i5ngakzTFyndPkQMVdUnMgoaNWfB2KKWGdeIaiR1PCRC2twSwHU3+xDvx5etFOi4
z+7md5f8WJi7IBYxgxEkrfWAIBVTioW/LOEk4dzMmTyIy9P1PluLM9jNEMf0vNNV
OUSJY43kEkJSYiIksChkZTswZBQe0zTUDH0dhxU/ESVGmyqTtUW+XBznnAX8/GBd
wZ2TLBSVVkJQF0mkWjOUPLvLlO7wy6et+Ik4vkaRqxdV7eCyqArbB9YxsMQOWHKS
dzaLoJDySegqveHxrm6KW+iSDsSoXA25XBQbG0GMYuusseflXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:56 2026 by rpki-client