Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1039dbc9-eb3c-4bd8-8b0a-d288257d1744.roa
File: 1039dbc9-eb3c-4bd8-8b0a-d288257d1744.roa (raw, json)
Hash identifier: zfe8MqyNRTOVasXr9FEc23ftJmcXV8pBJ1TPkyrsWEI=
Subject key identifier: 10:02:2E:06:DA:B7:13:05:84:1A:B3:9E:16:CD:80:1C:57:B4:5A:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B1E01146A1816B6E71DCD5ED822115297208355
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1039dbc9-eb3c-4bd8-8b0a-d288257d1744.roa
Signing time: Wed 09 Sep 2026 16:15:18 +0000
ROA not before: Wed 09 Sep 2026 16:15:18 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1e:01:14:6a:18:16:b6:e7:1d:cd:5e:d8:22:11:52:97:20:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:18 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=c871aba5a7129bca8aa857b2fba2ac24ad05a2c6db66e5d0950a31e0b457056a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:bd:fa:9e:7c:8c:8e:3e:e8:54:c7:9e:14:
fe:22:e9:38:c2:49:b1:2c:8a:e4:9e:27:27:d2:1f:
89:f1:43:30:4c:b5:04:16:24:d8:a7:89:16:8c:fe:
9d:19:98:fe:6b:1e:b7:e9:ce:33:8e:1e:05:92:3f:
18:b7:16:a4:3a:ce:d5:c2:5f:e4:de:38:65:ce:45:
fa:4a:58:df:eb:ce:c6:f0:45:72:82:bd:ab:a8:7b:
55:b9:d8:e0:c2:39:1b:66:54:67:eb:40:ae:ed:71:
f8:0f:59:dd:6c:35:2c:69:f3:55:9f:2f:09:c9:1b:
44:23:af:c2:22:1f:5a:ca:4b:6e:ae:81:e1:03:84:
a7:66:b3:28:d8:47:8b:63:92:c0:75:12:17:9c:4b:
e1:86:2e:91:cf:a8:0b:b8:4f:5a:d4:44:d3:1f:40:
c4:da:42:94:8e:5e:97:2d:e3:45:ff:2a:50:e2:3d:
73:fe:ac:13:d6:aa:17:75:4a:f3:78:28:47:12:91:
4d:ff:af:50:b9:f2:19:02:5f:93:c0:75:24:3c:66:
22:c3:49:3e:3d:d7:ea:6f:51:a2:b0:ee:93:b9:d0:
56:a1:a1:a3:b8:88:5f:63:5d:57:d7:ec:ad:3b:fa:
1e:04:a3:2d:5f:05:42:04:34:74:53:05:10:bc:f6:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:2E:06:DA:B7:13:05:84:1A:B3:9E:16:CD:80:1C:57:B4:5A:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1039dbc9-eb3c-4bd8-8b0a-d288257d1744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:4800::/40
Signature Algorithm: sha256WithRSAEncryption
a7:1d:04:98:77:6a:61:7b:2c:8f:54:d1:d5:a4:3e:12:bc:53:
c8:11:50:8a:7d:70:38:27:45:2a:06:22:df:ae:85:f8:14:18:
6b:b0:cf:54:53:88:47:31:fa:dd:1c:0f:fc:a5:d8:9e:b6:27:
a5:1e:db:5a:2d:9b:3c:10:cb:1c:cf:e8:3f:7f:aa:c8:92:df:
59:d6:81:34:88:a6:95:86:69:83:e3:28:cd:60:77:32:41:55:
87:cf:24:cb:a8:99:ba:74:94:a3:74:07:4b:fe:6a:a8:0e:f4:
a8:eb:57:61:a3:d4:10:c6:c7:ca:5c:fa:1c:fa:c5:1a:76:5a:
55:2b:09:87:a9:8a:fd:98:e6:f1:31:94:67:38:9f:8b:d0:44:
70:a3:07:06:5e:2e:fd:92:85:ac:8c:06:94:aa:72:16:0c:1f:
c9:38:ef:ad:b5:52:f0:a2:30:0f:64:0b:c1:f5:18:5e:f9:73:
2e:cf:16:33:42:c7:1f:cd:14:e6:22:c4:8c:12:6d:37:a1:23:
27:7a:3c:43:de:8a:04:1a:4d:18:8a:21:49:ba:b4:5d:66:6a:
f7:40:2e:95:2e:cb:8f:ab:b9:03:d0:6a:20:26:64:4a:ab:bc:
36:35:3c:1b:2f:a5:cb:b0:be:de:68:43:0d:b9:9f:9d:b4:e5:
cd:35:e5:11
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUax4BFGoYFrbnHc1e2CIRUpcgg1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE1MThaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGM4NzFhYmE1YTcxMjliY2E4YWE4NTdiMmZiYTJhYzI0YWQwNWEyYzZkYjY2
ZTVkMDk1MGEzMWUwYjQ1NzA1NmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXJvfqefIyOPuhUx54U/iLpOMJJsSyK5J4nJ9IfifFDMEy1BBYk2KeJFoz+
nRmY/mset+nOM44eBZI/GLcWpDrO1cJf5N44Zc5F+kpY3+vOxvBFcoK9q6h7VbnY
4MI5G2ZUZ+tAru1x+A9Z3Ww1LGnzVZ8vCckbRCOvwiIfWspLbq6B4QOEp2azKNhH
i2OSwHUSF5xL4YYukc+oC7hPWtRE0x9AxNpClI5ely3jRf8qUOI9c/6sE9aqF3VK
83goRxKRTf+vULnyGQJfk8B1JDxmIsNJPj3X6m9RorDuk7nQVqGho7iIX2NdV9fs
rTv6HgSjLV8FQgQ0dFMFELz2EXUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQQAi4G
2rcTBYQas54WzYAcV7RaXjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTAzOWRiYzktZWIzYy00YmQ4LThiMGEtZDI4ODI1N2QxNzQ0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FhI
MA0GCSqGSIb3DQEBCwUAA4IBAQCnHQSYd2pheyyPVNHVpD4SvFPIEVCKfXA4J0Uq
BiLfroX4FBhrsM9UU4hHMfrdHA/8pdietielHttaLZs8EMscz+g/f6rIkt9Z1oE0
iKaVhmmD4yjNYHcyQVWHzyTLqJm6dJSjdAdL/mqoDvSo61dho9QQxsfKXPoc+sUa
dlpVKwmHqYr9mObxMZRnOJ+L0ERwowcGXi79koWsjAaUqnIWDB/JOO+ttVLwojAP
ZAvB9Rhe+XMuzxYzQscfzRTmIsSMEm03oSMnejxD3ooEGk0YiiFJurRdZmr3QC6V
LsuPq7kD0GogJmRKq7w2NTwbL6XLsL7eaEMNuZ+dtOXNNeUR
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:29 2026 by rpki-client