Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
File: e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa (raw, json)
Hash identifier: d+qbIWszgtBLYne4KiRuV7pu3SnHACt/5fr1CnkewSM=
Subject key identifier: 91:F3:FD:17:D2:B1:1D:07:8E:D0:80:20:11:CF:81:F6:55:21:00:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C55120BC17A3956AFBA233C6D72C10618A23768
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
Signing time: Sat 28 Feb 2026 06:20:07 +0000
ROA not before: Sat 28 Feb 2026 06:20:07 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:55:12:0b:c1:7a:39:56:af:ba:23:3c:6d:72:c1:06:18:a2:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 06:20:07 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=b265588b8b92a1d141856186f07481be41ff847da6ac0c3a1087c7f2e44b36b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:0e:d6:bf:f5:18:8f:15:9a:e2:09:31:dd:
1e:16:30:df:b0:0f:a0:fa:5e:c7:4d:6b:be:59:93:
b7:34:a4:27:71:5d:26:93:eb:26:8b:9e:1d:64:8c:
ae:2c:f1:79:3e:ee:70:5c:92:9e:7d:de:af:7d:17:
c7:81:55:1d:f2:64:53:41:36:80:61:2e:8d:5a:0a:
3d:49:8a:f9:ff:c0:50:01:d6:dc:60:85:f2:98:73:
1b:75:8b:4c:f2:25:78:42:93:6d:5f:60:49:02:69:
eb:7e:32:57:44:6d:a1:62:63:ae:aa:8c:81:1a:e4:
3d:f9:af:4f:ea:75:a1:37:b2:3d:6e:65:ad:5e:af:
1c:68:67:c3:59:6f:df:71:b0:57:85:ac:e2:86:b1:
1e:ba:98:ce:39:7f:0b:73:75:fd:b8:f6:12:74:1e:
63:7e:18:a3:7b:c5:b7:e7:3e:cd:c5:ce:65:d5:0d:
8a:6a:d5:82:1f:eb:b0:11:95:20:3e:6b:4d:24:71:
35:51:19:8c:9c:4e:9a:cf:72:a5:65:b4:2b:b6:50:
9b:b6:6d:4d:90:6a:43:9d:55:ad:bb:87:c6:13:1e:
eb:72:48:11:c2:dc:ad:83:8c:7a:e4:1c:ac:2c:1d:
04:df:b8:cf:52:fe:fc:ac:eb:0f:1a:12:67:13:44:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:FD:17:D2:B1:1D:07:8E:D0:80:20:11:CF:81:F6:55:21:00:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c040::/48
Signature Algorithm: sha256WithRSAEncryption
84:e8:e4:90:16:eb:ed:9f:12:a9:29:22:69:11:45:e2:5c:17:
56:67:eb:87:7a:16:64:6b:40:1c:eb:d2:ec:64:3c:5e:03:f1:
d4:02:17:4b:62:8a:a2:47:f4:fa:62:6f:d0:b6:f0:31:01:5d:
5d:c1:bf:91:2d:c9:8b:4a:81:dc:e0:65:50:a1:4d:0b:01:92:
54:44:b9:ee:ac:02:44:c4:b6:e9:85:b7:37:8d:fe:c2:2b:c0:
4e:d2:ad:94:7a:bb:2d:f5:94:aa:90:5c:b5:00:78:3e:00:86:
f0:a7:af:22:9c:b0:37:5a:8f:1d:89:75:51:00:d1:e5:f4:a9:
e0:15:1d:20:cd:49:67:71:48:7b:82:04:8a:bd:8b:78:97:d9:
98:f4:fe:47:f6:30:e8:4f:bf:ed:2f:2d:b5:41:9e:e2:0d:c8:
b1:42:7a:50:b6:25:6d:81:b4:33:88:f2:3c:59:b9:d5:de:ba:
42:45:b5:25:3f:7c:48:3f:90:f8:92:34:32:56:a2:3d:68:1e:
64:54:75:36:97:a2:bc:ab:e3:11:d2:2c:20:a9:a2:ee:9d:2d:
56:bf:d8:55:22:ae:d0:8b:d1:09:b1:3f:96:71:38:5d:9b:1e:
69:1a:3d:a0:0e:44:dd:c4:ca:a3:e4:d9:e1:62:8e:49:b8:d8:
c3:ae:17:eb
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTFUSC8F6OVavuiM8bXLBBhiiN2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNjIwMDdaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyNjU1ODhiOGI5MmExZDE0MTg1NjE4NmYwNzQ4MWJlNDFmZjg0N2RhNmFj
MGMzYTEwODdjN2YyZTQ0YjM2YjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM3xDta/9RiPFZriCTHdHhYw37APoPpex01rvlmTtzSkJ3FdJpPrJoueHWSM
rizxeT7ucFySnn3er30Xx4FVHfJkU0E2gGEujVoKPUmK+f/AUAHW3GCF8phzG3WL
TPIleEKTbV9gSQJp634yV0RtoWJjrqqMgRrkPfmvT+p1oTeyPW5lrV6vHGhnw1lv
33GwV4Ws4oaxHrqYzjl/C3N1/bj2EnQeY34Yo3vFt+c+zcXOZdUNimrVgh/rsBGV
ID5rTSRxNVEZjJxOms9ypWW0K7ZQm7ZtTZBqQ51VrbuHxhMe63JIEcLcrYOMeuQc
rCwdBN+4z1L+/KzrDxoSZxNEXtECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSR8/0X
0rEdB47QgCARz4H2VSEAAjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTkzMWNhYTktY2E0ZS00MjhhLWFhM2MtM2FmMzZlZmFmYzhjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA
QDANBgkqhkiG9w0BAQsFAAOCAQEAhOjkkBbr7Z8SqSkiaRFF4lwXVmfrh3oWZGtA
HOvS7GQ8XgPx1AIXS2KKokf0+mJv0LbwMQFdXcG/kS3Ji0qB3OBlUKFNCwGSVES5
7qwCRMS26YW3N43+wivATtKtlHq7LfWUqpBctQB4PgCG8KevIpywN1qPHYl1UQDR
5fSp4BUdIM1JZ3FIe4IEir2LeJfZmPT+R/Yw6E+/7S8ttUGe4g3IsUJ6ULYlbYG0
M4jyPFm51d66QkW1JT98SD+Q+JI0MlaiPWgeZFR1NpeivKvjEdIsIKmi7p0tVr/Y
VSKu0IvRCbE/lnE4XZseaRo9oA5E3cTKo+TZ4WKOSbjYw64X6w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:47 2026 by rpki-client