Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01122183-0f7a-46da-bb81-689dbffa220d.roa
File: 01122183-0f7a-46da-bb81-689dbffa220d.roa (raw, json)
Hash identifier: m06ASphZ1BQ17atBCIEYPt1TKN4LI+o6yNSLyXzyKX0=
Subject key identifier: 5F:1E:E2:3B:D9:78:FC:0A:62:61:8B:D7:B6:8B:82:04:CE:14:15:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5656AAB844B1F3BAC260102274DD6214FADCAD3B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01122183-0f7a-46da-bb81-689dbffa220d.roa
Signing time: Wed 19 Aug 2026 01:10:06 +0000
ROA not before: Wed 19 Aug 2026 01:10:06 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:56:aa:b8:44:b1:f3:ba:c2:60:10:22:74:dd:62:14:fa:dc:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:06 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=ba8a6f3b60a3595016e8052064e2f086c403c05a4c10fc89ef4f02bcd26cda12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:1b:74:51:3e:45:db:50:d5:64:c9:6c:73:
cc:c5:6b:80:b1:a6:c3:32:3f:79:4a:99:18:1b:8e:
51:bd:c5:ef:75:16:7b:c8:30:a5:b3:05:e9:99:ad:
fd:e4:90:f6:f8:e6:bc:1b:de:6a:fb:7b:42:e5:c8:
96:87:04:2c:9e:22:f8:6d:0e:d0:37:5a:cf:e5:73:
7f:d9:b9:c6:9c:51:fa:59:b9:b1:0e:08:8f:b8:01:
59:e5:10:d4:f6:e6:db:51:32:16:1f:e8:d5:94:14:
4b:08:b7:c1:5b:4b:11:64:73:bc:2c:69:05:01:85:
f5:42:bb:04:8d:45:76:66:59:fc:1b:83:98:4e:e8:
c6:2f:48:c4:85:82:1f:6b:80:87:0b:f2:fb:39:6a:
0b:bd:fa:7b:5d:61:92:3f:d3:02:42:08:ce:cb:d1:
0a:ca:ef:2b:2b:89:9d:06:fd:31:cf:4d:8c:6e:5b:
59:82:e3:36:d7:82:5a:53:8c:ae:25:76:e8:d4:75:
e8:28:d4:df:ff:37:39:d4:4b:04:32:57:58:5c:65:
58:ac:27:be:be:f8:7e:4b:e6:cd:d3:31:1a:7b:2b:
ad:f4:26:f9:6d:29:7f:68:37:97:e9:cf:2a:fa:22:
f0:3a:06:74:61:c5:ed:cb:99:1d:a4:9c:a2:18:82:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:E2:3B:D9:78:FC:0A:62:61:8B:D7:B6:8B:82:04:CE:14:15:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01122183-0f7a-46da-bb81-689dbffa220d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b0:01:22:19:5b:09:81:cd:28:3d:8a:15:6b:8c:c5:2b:7d:
6f:68:ce:1e:5a:66:0f:e8:ca:4e:21:5a:e7:35:2c:a2:b1:f1:
20:77:88:7c:ad:60:73:f1:42:dc:9b:66:fd:14:d5:c9:41:8e:
ea:54:27:16:d2:f2:8a:17:a1:d2:8a:f9:e9:b2:55:8d:3b:4d:
8a:81:7e:c3:5b:fe:34:79:e4:5a:71:a8:d8:64:4d:c8:a9:e8:
43:98:54:c0:df:1e:ad:10:55:f9:f9:ab:ea:0b:5d:68:50:06:
7b:06:17:ec:29:a0:3e:dd:8c:34:fc:1e:0d:e5:f9:50:19:b1:
d5:77:09:b9:fb:e2:37:a1:e7:4a:13:63:a2:47:98:b8:c2:e3:
5b:71:41:bf:4b:62:0a:18:63:12:c2:03:7b:a6:e6:27:c3:5d:
d2:b7:98:e9:97:be:f5:fd:66:5b:77:c0:ee:e8:69:27:8a:6f:
ce:67:93:ac:f2:2d:b7:94:78:99:2b:1b:55:29:d6:25:55:0f:
7d:ef:72:2a:d0:fc:fd:44:38:fb:1a:61:1d:70:79:a1:6b:b5:
1e:05:c8:0a:62:ed:c3:06:4c:b8:c3:ff:73:28:39:61:83:0d:
fe:33:f6:98:59:97:bb:cd:9d:2b:de:de:31:23:e7:d2:e0:84:
ad:31:b3:70
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUVlaquESx87rCYBAidN1iFPrcrTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTEwMDZaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhOGE2ZjNiNjBhMzU5NTAxNmU4MDUyMDY0ZTJmMDg2YzQwM2MwNWE0YzEw
ZmM4OWVmNGYwMmJjZDI2Y2RhMTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJdQG3RRPkXbUNVkyWxzzMVrgLGmwzI/eUqZGBuOUb3F73UWe8gwpbMF6Zmt
/eSQ9vjmvBveavt7QuXIlocELJ4i+G0O0Ddaz+Vzf9m5xpxR+lm5sQ4Ij7gBWeUQ
1Pbm21EyFh/o1ZQUSwi3wVtLEWRzvCxpBQGF9UK7BI1FdmZZ/BuDmE7oxi9IxIWC
H2uAhwvy+zlqC736e11hkj/TAkIIzsvRCsrvKyuJnQb9Mc9NjG5bWYLjNteCWlOM
riV26NR16CjU3/83OdRLBDJXWFxlWKwnvr74fkvmzdMxGnsrrfQm+W0pf2g3l+nP
Kvoi8DoGdGHF7cuZHaScohiCM8sCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRfHuI7
2Xj8CmJhi9e2i4IEzhQV/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDExMjIxODMtMGY3YS00NmRhLWJiODEtNjg5ZGJmZmEyMjBkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H1g
wDANBgkqhkiG9w0BAQsFAAOCAQEAw7ABIhlbCYHNKD2KFWuMxSt9b2jOHlpmD+jK
TiFa5zUsorHxIHeIfK1gc/FC3Jtm/RTVyUGO6lQnFtLyiheh0or56bJVjTtNioF+
w1v+NHnkWnGo2GRNyKnoQ5hUwN8erRBV+fmr6gtdaFAGewYX7CmgPt2MNPweDeX5
UBmx1XcJufviN6HnShNjokeYuMLjW3FBv0tiChhjEsIDe6bmJ8Nd0reY6Ze+9f1m
W3fA7uhpJ4pvzmeTrPItt5R4mSsbVSnWJVUPfe9yKtD8/UQ4+xphHXB5oWu1HgXI
CmLtwwZMuMP/cyg5YYMN/jP2mFmXu82dK97eMSPn0uCErTGzcA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:05 2026 by rpki-client