Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0c69ec51-0eb2-441a-84a8-155bc398f41a.roa
File: 0c69ec51-0eb2-441a-84a8-155bc398f41a.roa (raw, json)
Hash identifier: bNCDMo6BX8qEqT4Mkwc2xz5PG+Ky3rJ5zFVaFene0Zk=
Subject key identifier: 5F:D9:F7:87:C0:DA:2F:68:5C:B1:14:42:A2:6A:6D:75:5D:2B:5A:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A0235EAA0A1606CB1C5BF3D7C3DC1048178C93F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0c69ec51-0eb2-441a-84a8-155bc398f41a.roa
Signing time: Wed 09 Sep 2026 16:15:19 +0000
ROA not before: Wed 09 Sep 2026 16:15:19 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:02:35:ea:a0:a1:60:6c:b1:c5:bf:3d:7c:3d:c1:04:81:78:c9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:19 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=98b857e99d02f61c83bc63ce637e07d03bc37bb7cc1581fcca60582c6c75e402, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:99:7a:85:ac:93:28:f2:57:c1:ef:ef:b0:
16:b4:2b:99:51:74:ac:6e:ad:5e:06:7a:af:f4:eb:
74:d2:e0:24:b4:98:0b:a3:6a:ac:4f:0e:99:ce:fe:
8f:f2:f0:52:e7:fa:28:ca:6f:67:32:de:9e:2e:4e:
cf:da:51:cf:c5:97:07:b4:3a:79:dc:11:0f:0b:37:
a9:e8:04:47:fc:62:3c:be:93:77:b9:9a:17:24:1c:
48:d0:f0:f8:39:d8:38:48:9f:78:e7:a1:d7:54:5f:
1e:9b:79:06:3b:ab:d2:53:60:01:9e:37:e9:67:53:
65:a0:f1:6f:65:82:48:05:d0:7c:e1:a6:b8:c9:82:
cb:20:d3:44:33:b6:2c:11:69:e1:2b:be:4c:56:e6:
ee:b3:3b:d1:01:58:d8:47:86:c8:c4:25:62:6e:b9:
12:f8:ac:d2:84:25:48:3e:83:e3:ce:28:4b:64:23:
2a:3b:ab:c0:7b:70:54:71:2e:a3:95:6d:6b:17:74:
84:99:b3:75:f0:1f:e4:06:c9:70:13:8e:65:4b:21:
ca:84:a9:36:06:56:aa:ba:62:fa:44:b1:4f:5c:f8:
c5:92:37:32:60:93:1f:90:20:00:63:71:fb:59:7b:
f0:1d:c6:57:7b:c9:82:ac:25:f2:1b:9c:5b:29:19:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:F7:87:C0:DA:2F:68:5C:B1:14:42:A2:6A:6D:75:5D:2B:5A:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0c69ec51-0eb2-441a-84a8-155bc398f41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:4800::/40
Signature Algorithm: sha256WithRSAEncryption
36:53:8b:ed:3e:89:91:b4:3a:4b:4e:37:fd:01:06:d5:25:8e:
2b:c2:3f:b6:62:61:8a:77:01:7c:f5:ca:3e:72:3a:42:7e:72:
de:7e:b2:02:e8:f9:10:6e:48:68:c3:1b:04:a7:2d:a4:d0:df:
18:a7:8d:4b:8d:01:34:d3:73:17:e2:8e:a8:53:6a:2e:08:95:
8c:2a:e0:d2:41:2b:29:ba:e5:71:6f:80:6a:78:b5:08:41:b1:
c6:4f:ae:92:e9:ff:1b:8b:11:76:5f:a0:7b:1b:ca:64:11:22:
56:4e:ab:05:37:b1:d4:15:d7:a1:4c:b2:33:36:6c:fe:7b:45:
c1:23:ea:a2:4a:ec:18:07:21:e7:e1:99:06:b5:56:94:eb:bf:
ec:24:9e:ba:b8:2a:a8:81:55:2c:3f:98:7c:b9:35:5b:53:b7:
48:db:56:f4:ff:39:1c:ba:0d:e3:e9:04:9a:56:bd:39:79:6a:
fe:ca:38:32:36:0a:a0:0a:10:c0:51:e1:4a:65:40:52:18:13:
5d:63:be:4f:bf:26:06:58:34:31:83:13:dc:c8:ae:ad:75:21:
17:93:d0:b1:d9:67:aa:80:49:07:b5:b6:16:d4:5e:d8:6a:cd:
fb:a9:41:de:29:c1:66:b7:2a:8f:e2:ff:62:79:03:ac:80:f8:
7a:70:69:9e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWgI16qChYGyxxb89fD3BBIF4yT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE1MTlaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDk4Yjg1N2U5OWQwMmY2MWM4M2JjNjNjZTYzN2UwN2QwM2JjMzdiYjdjYzE1
ODFmY2NhNjA1ODJjNmM3NWU0MDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2/mXqFrJMo8lfB7++wFrQrmVF0rG6tXgZ6r/TrdNLgJLSYC6NqrE8Omc7+
j/LwUuf6KMpvZzLeni5Oz9pRz8WXB7Q6edwRDws3qegER/xiPL6Td7maFyQcSNDw
+DnYOEifeOeh11RfHpt5Bjur0lNgAZ436WdTZaDxb2WCSAXQfOGmuMmCyyDTRDO2
LBFp4Su+TFbm7rM70QFY2EeGyMQlYm65Evis0oQlSD6D484oS2QjKjurwHtwVHEu
o5Vtaxd0hJmzdfAf5AbJcBOOZUshyoSpNgZWqrpi+kSxT1z4xZI3MmCTH5AgAGNx
+1l78B3GV3vJgqwl8hucWykZBOUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRf2feH
wNovaFyxFEKiam11XStazTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGM2OWVjNTEtMGViMi00NDFhLTg0YTgtMTU1YmMzOThmNDFhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FpI
MA0GCSqGSIb3DQEBCwUAA4IBAQA2U4vtPomRtDpLTjf9AQbVJY4rwj+2YmGKdwF8
9co+cjpCfnLefrIC6PkQbkhowxsEpy2k0N8Yp41LjQE003MX4o6oU2ouCJWMKuDS
QSspuuVxb4BqeLUIQbHGT66S6f8bixF2X6B7G8pkESJWTqsFN7HUFdehTLIzNmz+
e0XBI+qiSuwYByHn4ZkGtVaU67/sJJ66uCqogVUsP5h8uTVbU7dI21b0/zkcug3j
6QSaVr05eWr+yjgyNgqgChDAUeFKZUBSGBNdY75PvyYGWDQxgxPcyK6tdSEXk9Cx
2WeqgEkHtbYW1F7Yas37qUHeKcFmtyqP4v9ieQOsgPh6cGme
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:57 2026 by rpki-client