Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/075bdd7a-ba79-4543-9f8e-ac092351419b.roa
File: 075bdd7a-ba79-4543-9f8e-ac092351419b.roa (raw, json)
Hash identifier: HLFd5kX4dpW1Y1hwuS98nOwAiFN4UYgV8fLa3iOBKlA=
Subject key identifier: 79:C0:E3:0C:9C:DE:66:7F:10:15:49:9A:AD:F2:44:E8:F3:57:94:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 028ADF17E439966B081276879F84512FE084B5AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/075bdd7a-ba79-4543-9f8e-ac092351419b.roa
Signing time: Fri 09 Oct 2026 01:20:05 +0000
ROA not before: Fri 09 Oct 2026 01:20:05 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8a:df:17:e4:39:96:6b:08:12:76:87:9f:84:51:2f:e0:84:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:05 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=0ddee2cebbd89fc0a3fdb4f472ecfbffbfae57c0a98e752a0d276accdd8956e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:ba:32:59:69:b7:ed:d4:6d:58:09:d7:28:
c9:be:c4:cb:c0:9f:5f:a7:f2:53:77:9a:46:f6:a6:
7d:db:24:8e:b1:3c:80:1e:68:d2:e4:44:6e:bd:8a:
22:86:dd:ee:6b:91:95:f5:4c:70:f9:51:5e:b2:a0:
e2:9b:be:91:5d:fd:f1:69:8f:60:0e:0d:57:cc:d2:
5b:f0:98:fe:34:3e:57:65:59:be:dc:bd:b2:46:5c:
35:99:5f:da:5d:c9:be:6a:b3:7d:68:9f:20:b1:21:
48:f5:ad:68:75:52:7a:0f:13:bc:97:28:03:30:83:
ea:66:76:19:61:1b:c7:7c:8e:27:34:e6:30:bb:76:
8f:fd:cc:3d:9f:a5:6a:83:e0:3f:0c:89:46:50:e8:
d3:35:91:b2:71:66:39:d8:ec:62:2a:7e:11:99:70:
53:36:75:61:59:b6:b9:34:c9:3b:fd:ee:23:07:af:
c1:81:91:b1:33:4c:df:9b:ca:42:da:13:b9:e2:0d:
a6:27:6d:68:28:26:3c:cc:50:60:d0:aa:f2:ee:f9:
58:5a:8e:bb:cf:ff:28:14:fa:b7:dd:c0:98:e2:af:
eb:2b:85:22:30:bf:8d:96:3a:6e:b1:88:07:14:56:
45:6e:ee:69:96:22:e0:9a:0c:21:df:56:78:00:17:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C0:E3:0C:9C:DE:66:7F:10:15:49:9A:AD:F2:44:E8:F3:57:94:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/075bdd7a-ba79-4543-9f8e-ac092351419b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
53:27:29:da:64:43:e8:a2:0b:1f:56:4d:76:fd:87:81:8d:ab:
ce:ca:5f:4a:23:2e:69:da:0e:f5:28:83:aa:03:13:08:7f:98:
44:2e:87:ed:b2:4d:63:9e:d1:06:72:f1:70:dc:40:5a:da:03:
fe:9c:ef:d6:06:89:ad:43:89:6d:fc:68:1d:4a:22:fc:99:e0:
35:8e:df:d5:f4:93:22:2a:78:90:43:03:9a:05:11:1c:41:be:
aa:bd:b8:4c:35:39:5e:84:ee:ad:57:c1:c7:0d:ba:74:e6:6a:
c9:af:df:40:b7:82:5e:c7:16:25:58:9f:fb:1c:56:5d:0c:a1:
16:79:68:72:47:d4:e0:ec:f6:e6:84:81:13:d6:a6:59:d7:81:
94:c1:92:3e:8b:09:2e:5c:35:a1:c3:d3:c9:63:65:a5:39:63:
bf:ea:31:e0:d9:d8:be:f5:8c:65:60:82:22:c7:ce:c6:e4:0e:
01:07:a9:0d:e2:73:2c:9a:cc:b6:b9:11:07:09:9f:93:e8:fc:
a0:d5:b7:6d:74:c5:84:fb:09:29:50:2a:f0:09:46:ad:82:db:
0f:f1:e6:32:4c:f0:89:11:c0:b6:c1:46:f4:2f:2b:2f:9b:33:
f2:10:d0:84:d9:09:72:80:dd:28:01:8e:52:a2:32:52:b3:cd:
fe:1d:32:02
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAorfF+Q5lmsIEnaHn4RRL+CEta0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTIwMDVaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDBkZGVlMmNlYmJkODlmYzBhM2ZkYjRmNDcyZWNmYmZmYmZhZTU3YzBhOThl
NzUyYTBkMjc2YWNjZGQ4OTU2ZTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANNRujJZabft1G1YCdcoyb7Ey8CfX6fyU3eaRvamfdskjrE8gB5o0uREbr2K
Iobd7muRlfVMcPlRXrKg4pu+kV398WmPYA4NV8zSW/CY/jQ+V2VZvty9skZcNZlf
2l3JvmqzfWifILEhSPWtaHVSeg8TvJcoAzCD6mZ2GWEbx3yOJzTmMLt2j/3MPZ+l
aoPgPwyJRlDo0zWRsnFmOdjsYip+EZlwUzZ1YVm2uTTJO/3uIwevwYGRsTNM35vK
QtoTueINpidtaCgmPMxQYNCq8u75WFqOu8//KBT6t93AmOKv6yuFIjC/jZY6brGI
BxRWRW7uaZYi4JoMId9WeAAXFDcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR5wOMM
nN5mfxAVSZqt8kTo81eUTjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDc1YmRkN2EtYmE3OS00NTQzLTlmOGUtYWMwOTIzNTE0MTliLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gpg
MA0GCSqGSIb3DQEBCwUAA4IBAQBTJynaZEPoogsfVk12/YeBjavOyl9KIy5p2g71
KIOqAxMIf5hELoftsk1jntEGcvFw3EBa2gP+nO/WBomtQ4lt/GgdSiL8meA1jt/V
9JMiKniQQwOaBREcQb6qvbhMNTlehO6tV8HHDbp05mrJr99At4JexxYlWJ/7HFZd
DKEWeWhyR9Tg7PbmhIET1qZZ14GUwZI+iwkuXDWhw9PJY2WlOWO/6jHg2di+9Yxl
YIIix87G5A4BB6kN4nMsmsy2uREHCZ+T6Pyg1bdtdMWE+wkpUCrwCUatgtsP8eYy
TPCJEcC2wUb0LysvmzPyENCE2QlygN0oAY5SojJSs83+HTIC
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:28 2026 by rpki-client