Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12a93e2e-ca83-45d1-85ed-1d83aa082045.roa
File: 12a93e2e-ca83-45d1-85ed-1d83aa082045.roa (raw, json)
Hash identifier: BjW18CAAQESCpMz6AkQuiaYxDkVexaglpxaBYsPkuGk=
Subject key identifier: 8F:BA:F4:09:35:E1:9E:14:65:42:9D:5E:51:3A:9E:91:9D:AB:C8:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 673C29D10B8310DE45B1F1596A173BDDCC85C023
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12a93e2e-ca83-45d1-85ed-1d83aa082045.roa
Signing time: Wed 09 Sep 2026 16:16:36 +0000
ROA not before: Wed 09 Sep 2026 16:16:36 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3c:29:d1:0b:83:10:de:45:b1:f1:59:6a:17:3b:dd:cc:85:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:36 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=47d0a95bd845b919852ac9170cdc73ed8ac3e5ca19d949c8b8cb54c1a25d01a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:07:4f:bb:1c:aa:cd:47:eb:0d:c6:c3:11:
43:88:24:39:12:82:fc:7b:30:8a:b1:c0:90:40:bc:
0c:52:6e:4b:39:0b:52:5d:19:fb:3c:b0:d9:ae:60:
08:ad:f3:3f:5d:cf:cc:de:ad:9e:50:42:69:f6:f6:
68:5e:0d:aa:1e:b4:e6:eb:ee:fd:b4:b0:98:c3:9d:
93:50:ee:f8:60:bd:7b:f1:59:c5:76:5f:7a:ca:ec:
85:48:4c:c5:67:56:f4:28:03:89:cd:b0:98:31:6b:
86:76:4e:ff:a4:f9:bf:ab:03:75:22:e5:11:33:14:
80:62:06:48:f9:ef:95:83:7b:61:8a:87:1e:a1:c7:
50:6c:19:6a:81:a7:7d:e1:17:b4:b3:5d:f4:e6:cb:
36:ba:16:97:4d:b7:7d:aa:11:b0:f3:b5:c4:a5:92:
f0:3b:ee:45:19:1a:a6:3d:85:2c:a0:4a:84:48:47:
66:20:a5:60:55:97:e0:56:6b:bc:8c:57:7c:37:50:
c6:d2:9a:77:16:4f:94:a3:c3:f1:f2:9d:bd:a9:14:
2f:3d:4e:c8:52:00:46:8d:b7:6f:17:bf:de:dd:5e:
7f:ef:5f:78:42:3f:22:23:ea:51:57:28:27:5c:37:
c9:be:0a:16:5f:36:96:27:fe:4e:42:bd:ea:41:a0:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:F4:09:35:E1:9E:14:65:42:9D:5E:51:3A:9E:91:9D:AB:C8:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12a93e2e-ca83-45d1-85ed-1d83aa082045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8800::/40
Signature Algorithm: sha256WithRSAEncryption
9a:3c:ed:0f:98:48:fe:ea:da:6e:d4:65:92:43:8d:7a:a4:fe:
ad:90:cc:68:27:b5:fb:bf:81:2c:93:ee:46:c1:89:7f:36:62:
f1:d5:f5:c4:96:d2:f4:4b:7a:70:9a:a8:99:4e:4e:0b:c2:88:
32:32:cd:23:db:a5:56:6f:89:04:a4:3b:81:ae:f7:48:22:e8:
dc:0d:8f:53:3f:8f:ba:5d:58:e0:25:bc:f5:d4:db:7d:76:e4:
75:ef:5f:a3:2a:2e:18:bc:96:58:1a:b1:c0:4c:d5:ce:8a:37:
44:51:f6:d9:a4:19:52:84:3b:bd:58:90:fc:73:dd:3e:55:da:
eb:18:cb:ad:05:fc:51:87:25:36:6a:a3:f2:5e:a6:13:ba:b9:
9b:b5:71:17:92:96:6f:53:81:91:8d:c3:61:4f:8a:77:61:db:
5b:fc:b8:f1:b5:93:9c:ea:2d:9c:6c:ef:4b:fe:f4:b9:80:d1:
9e:3e:ea:c6:d8:91:f7:fd:43:87:6d:ed:82:fd:e9:5e:2c:00:
87:90:e0:f8:ad:4e:b9:b7:82:65:43:3e:a6:70:73:25:93:95:
86:82:b1:b2:1a:1c:a4:51:5b:dd:36:7e:47:91:b8:e0:1e:a6:
c2:f3:23:27:1f:92:a5:fb:8a:f1:37:ce:16:3c:58:31:0f:40:
75:f9:68:fe
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZzwp0QuDEN5FsfFZahc73cyFwCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE2MzZaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ3ZDBhOTViZDg0NWI5MTk4NTJhYzkxNzBjZGM3M2VkOGFjM2U1Y2ExOWQ5
NDljOGI4Y2I1NGMxYTI1ZDAxYTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKD7B0+7HKrNR+sNxsMRQ4gkORKC/HswirHAkEC8DFJuSzkLUl0Z+zyw2a5g
CK3zP13PzN6tnlBCafb2aF4Nqh605uvu/bSwmMOdk1Du+GC9e/FZxXZfesrshUhM
xWdW9CgDic2wmDFrhnZO/6T5v6sDdSLlETMUgGIGSPnvlYN7YYqHHqHHUGwZaoGn
feEXtLNd9ObLNroWl023faoRsPO1xKWS8DvuRRkapj2FLKBKhEhHZiClYFWX4FZr
vIxXfDdQxtKadxZPlKPD8fKdvakULz1OyFIARo23bxe/3t1ef+9feEI/IiPqUVco
J1w3yb4KFl82lif+TkK96kGgGuMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSPuvQJ
NeGeFGVCnV5ROp6RnavINTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTJhOTNlMmUtY2E4My00NWQxLTg1ZWQtMWQ4M2FhMDgyMDQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HaI
MA0GCSqGSIb3DQEBCwUAA4IBAQCaPO0PmEj+6tpu1GWSQ416pP6tkMxoJ7X7v4Es
k+5GwYl/NmLx1fXEltL0S3pwmqiZTk4LwogyMs0j26VWb4kEpDuBrvdIIujcDY9T
P4+6XVjgJbz11Nt9duR171+jKi4YvJZYGrHATNXOijdEUfbZpBlShDu9WJD8c90+
VdrrGMutBfxRhyU2aqPyXqYTurmbtXEXkpZvU4GRjcNhT4p3Ydtb/LjxtZOc6i2c
bO9L/vS5gNGePurG2JH3/UOHbe2C/eleLACHkOD4rU65t4JlQz6mcHMlk5WGgrGy
GhykUVvdNn5HkbjgHqbC8yMnH5Kl+4rxN84WPFgxD0B1+Wj+
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:30 2026 by rpki-client