Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa
File: 09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa (raw, json)
Hash identifier: 0Cy326VlL6A5AlbbbuK2LszY967g8fnf2wC48Rtx6Is=
Subject key identifier: 95:CC:5B:86:3E:67:97:1E:F7:17:FA:4B:46:7D:DE:9C:90:3E:A5:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28F95A3FD182A0ECC9E0C5C7AA8732E172C6D3A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa
Signing time: Fri 07 Aug 2026 05:10:22 +0000
ROA not before: Fri 07 Aug 2026 05:10:22 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f9:5a:3f:d1:82:a0:ec:c9:e0:c5:c7:aa:87:32:e1:72:c6:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:22 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b7216bcfcedbf4a2e540e12112487a1d3e4cd855210f77e1166ea6c0fe7accea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:d8:88:90:7a:03:ba:69:24:3e:8d:da:b0:
f2:d4:6b:d4:34:2f:41:5f:3c:3f:0c:21:f2:ec:bf:
00:01:65:fc:17:eb:46:d9:7a:99:aa:89:d2:a3:32:
6b:73:a4:a4:63:e1:79:21:0d:7e:8e:cc:9f:67:35:
48:16:43:a3:59:78:5d:46:3d:1c:51:5e:78:cc:10:
62:e8:42:bf:0f:91:4d:b5:e6:76:26:95:f7:8c:a1:
ce:c2:2c:c1:4a:8d:ac:7b:35:65:75:ee:64:2d:42:
52:68:bc:78:b6:08:e3:61:f7:14:9f:fd:4b:0d:63:
76:e3:2a:d7:f8:ab:11:ce:39:11:62:70:84:55:a6:
5d:4a:8f:26:f4:0c:f0:cb:e1:f8:4f:b1:23:3f:ac:
dc:b6:3c:8c:e8:68:eb:67:9a:8a:b2:83:69:15:bf:
d5:c0:f1:70:14:6a:3d:b2:b9:1a:89:b1:66:f9:5d:
5d:bf:0c:38:1f:ee:e8:61:12:af:6f:d4:0d:e2:9f:
3f:2d:5b:51:44:4d:e0:fd:74:b5:85:9a:7d:6e:26:
b0:8b:3f:65:49:5c:6d:16:4b:2b:69:6a:2d:a0:3c:
39:38:8b:86:d8:53:54:0f:1b:39:10:db:d6:5a:64:
a4:18:6b:de:75:bf:5b:d2:79:ec:35:23:0e:9f:31:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:5B:86:3E:67:97:1E:F7:17:FA:4B:46:7D:DE:9C:90:3E:A5:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8020::/48
Signature Algorithm: sha256WithRSAEncryption
41:33:26:f4:1d:1c:c6:1e:d7:23:79:32:2d:70:44:ab:69:ff:
f8:d4:f1:4e:c4:d5:87:1a:47:2a:a0:0f:f2:12:d7:8f:82:54:
56:15:eb:35:e4:7d:98:7e:13:91:4a:eb:e1:87:de:39:cf:ee:
80:d8:46:cb:1e:8b:cd:98:db:f1:de:f8:ac:2c:43:88:fc:f6:
35:f5:4f:5c:fd:48:eb:a1:bd:25:be:c5:cc:62:bf:e5:2b:b0:
54:f4:77:5a:f3:ac:09:00:28:22:82:c2:59:0b:b6:25:c5:76:
ac:ba:1f:84:c3:d9:2c:69:40:bf:41:ae:de:b1:40:9d:2b:3a:
0d:47:da:c3:65:1e:37:cb:43:08:41:9a:b4:5b:56:2c:e2:c5:
b7:06:38:a6:ae:b5:42:ae:31:52:e6:03:6e:cc:2a:05:5b:fe:
52:49:40:28:b3:f4:77:c6:ba:c4:97:9a:9c:cd:49:61:98:0d:
2c:9a:21:ab:e3:e3:00:f0:4e:d9:82:79:18:98:4d:38:5f:cc:
a2:8b:b6:e1:3c:cd:76:42:f4:50:40:16:09:ed:96:90:a2:e3:
ea:b5:85:83:7c:2b:00:b9:c0:43:74:79:31:52:61:33:95:c4:
57:f9:d4:c6:bb:0a:b9:cf:28:50:1e:f2:e0:02:56:ce:ce:ec:
fc:1b:62:7e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKPlaP9GCoOzJ4MXHqocy4XLG06kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTEwMjJaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGI3MjE2YmNmY2VkYmY0YTJlNTQwZTEyMTEyNDg3YTFkM2U0Y2Q4NTUyMTBm
NzdlMTE2NmVhNmMwZmU3YWNjZWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMqt2IiQegO6aSQ+jdqw8tRr1DQvQV88Pwwh8uy/AAFl/BfrRtl6maqJ0qMy
a3OkpGPheSENfo7Mn2c1SBZDo1l4XUY9HFFeeMwQYuhCvw+RTbXmdiaV94yhzsIs
wUqNrHs1ZXXuZC1CUmi8eLYI42H3FJ/9Sw1jduMq1/irEc45EWJwhFWmXUqPJvQM
8Mvh+E+xIz+s3LY8jOho62eairKDaRW/1cDxcBRqPbK5GomxZvldXb8MOB/u6GES
r2/UDeKfPy1bUURN4P10tYWafW4msIs/ZUlcbRZLK2lqLaA8OTiLhthTVA8bORDb
1lpkpBhr3nW/W9J57DUjDp8xP1UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSVzFuG
PmeXHvcX+ktGfd6ckD6lojAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDlmNjRlZGEtMmI5Yy00Yzg5LThlYjQtN2NmYjA4YjJiYTA4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DiA
IDANBgkqhkiG9w0BAQsFAAOCAQEAQTMm9B0cxh7XI3kyLXBEq2n/+NTxTsTVhxpH
KqAP8hLXj4JUVhXrNeR9mH4TkUrr4YfeOc/ugNhGyx6LzZjb8d74rCxDiPz2NfVP
XP1I66G9Jb7FzGK/5SuwVPR3WvOsCQAoIoLCWQu2JcV2rLofhMPZLGlAv0Gu3rFA
nSs6DUfaw2UeN8tDCEGatFtWLOLFtwY4pq61Qq4xUuYDbswqBVv+UklAKLP0d8a6
xJeanM1JYZgNLJohq+PjAPBO2YJ5GJhNOF/Moou24TzNdkL0UEAWCe2WkKLj6rWF
g3wrALnAQ3R5MVJhM5XEV/nUxrsKuc8oUB7y4AJWzs7s/Btifg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:53 2026 by rpki-client