Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa
File: 1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa (raw, json)
Hash identifier: r11JOxG1ta6PB/Lmg/KCiZkkJ6S+sGSUGy2Z19dQfgY=
Subject key identifier: 19:9F:94:04:5D:01:1B:8F:90:F9:DA:A8:C0:D5:E6:70:3F:FE:C3:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68A60F9E320697A00742DBE33FC2BAC08D9E9A5F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa
Signing time: Fri 07 Aug 2026 05:20:40 +0000
ROA not before: Fri 07 Aug 2026 05:20:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a6:0f:9e:32:06:97:a0:07:42:db:e3:3f:c2:ba:c0:8d:9e:9a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ff7f502a0c81dd132fd95a4352397f3751f9ec5019af99cda581c6e66ba94282, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:b6:a4:54:27:48:9d:7f:76:d4:25:7d:27:
e8:34:ce:82:1f:df:1a:48:a8:a9:76:ae:c0:57:18:
bf:6d:4d:6c:20:51:3b:ca:40:77:92:56:ab:b3:a2:
3f:aa:ec:2d:6e:34:ee:e9:b6:19:60:a3:fa:86:15:
c4:89:aa:af:bd:1b:fc:5f:e3:b2:7e:bd:ca:89:be:
ec:c5:b2:80:19:58:d8:0f:d3:3c:57:8f:e6:90:c8:
e2:d1:8b:ae:a9:66:e5:1e:fc:86:7e:0a:38:fc:d9:
9d:c3:cb:4e:6d:28:de:d9:b5:92:fa:76:0f:d0:b5:
f5:d8:e8:53:3e:a8:f4:7b:04:68:e3:88:5a:8f:22:
fe:c1:28:68:cd:e4:5c:f4:ea:cf:94:be:87:24:d6:
60:b4:af:6d:3a:a5:36:9d:c1:fe:af:db:28:78:b4:
02:57:0e:66:4a:57:bf:46:38:6c:fd:7d:56:68:79:
ec:2e:2b:c6:5d:27:fa:a1:4c:99:7d:3f:c2:27:87:
c6:a5:ed:7f:2f:b8:40:56:82:83:1e:a9:c5:3c:cb:
58:81:38:fb:a2:31:d6:18:45:1d:b4:8f:3d:26:ca:
9c:18:e6:91:8f:43:30:6a:8d:ac:80:7b:b7:44:6a:
fb:0a:c2:b0:69:75:63:a4:ab:3b:77:fe:17:5b:b2:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9F:94:04:5D:01:1B:8F:90:F9:DA:A8:C0:D5:E6:70:3F:FE:C3:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c81ae85-a97a-41c4-97f7-3327ccf0dc21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a040::/48
Signature Algorithm: sha256WithRSAEncryption
bd:33:08:61:a9:90:16:fc:53:a5:46:7b:af:c5:c7:9a:6c:16:
59:6a:70:40:59:18:87:64:30:6a:38:48:ea:95:7d:0c:c5:f7:
89:86:8d:8a:b1:97:8e:b4:ca:6d:5f:2e:c1:c3:5b:a1:83:a5:
ba:e8:92:3f:48:dd:18:1f:40:53:a8:3b:f5:37:c6:ea:d0:a4:
43:81:dd:b2:9d:40:13:1a:fb:fd:f7:0b:c8:1c:bd:10:ce:66:
97:88:06:23:ce:62:4e:89:3b:46:cb:09:c3:85:0b:98:6b:c6:
47:c1:4d:ba:35:ac:1b:6e:29:86:b2:5f:63:1a:2b:d6:93:df:
87:40:b0:69:6a:1d:06:1e:7a:40:48:1a:7d:31:d4:de:55:f6:
4d:e1:d5:6d:ab:b3:0f:a6:8d:7b:88:87:99:1e:f4:b5:cc:5c:
4b:b7:05:8e:0a:53:e1:73:49:d4:28:88:73:38:e4:f6:b8:54:
cd:1d:3f:b8:cb:fd:9c:43:da:33:28:29:11:23:e1:08:6c:7c:
a7:97:a9:2a:84:be:8f:1f:f6:0a:88:78:75:3d:7a:51:83:76:
1f:09:b4:38:25:b9:ea:9e:7c:c2:0a:fb:2b:85:fe:a2:a4:21:
6e:9d:66:d9:0d:7c:b8:42:0c:73:0d:c8:28:e6:f2:25:bc:76:
b5:d4:ed:33
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUaKYPnjIGl6AHQtvjP8K6wI2eml8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTIwNDBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGZmN2Y1MDJhMGM4MWRkMTMyZmQ5NWE0MzUyMzk3ZjM3NTFmOWVjNTAxOWFm
OTljZGE1ODFjNmU2NmJhOTQyODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZdtqRUJ0idf3bUJX0n6DTOgh/fGkioqXauwFcYv21NbCBRO8pAd5JWq7Oi
P6rsLW407um2GWCj+oYVxImqr70b/F/jsn69yom+7MWygBlY2A/TPFeP5pDI4tGL
rqlm5R78hn4KOPzZncPLTm0o3tm1kvp2D9C19djoUz6o9HsEaOOIWo8i/sEoaM3k
XPTqz5S+hyTWYLSvbTqlNp3B/q/bKHi0AlcOZkpXv0Y4bP19Vmh57C4rxl0n+qFM
mX0/wieHxqXtfy+4QFaCgx6pxTzLWIE4+6Ix1hhFHbSPPSbKnBjmkY9DMGqNrIB7
t0Rq+wrCsGl1Y6SrO3f+F1uyR5kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQZn5QE
XQEbj5D52qjA1eZwP/7DJDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWM4MWFlODUtYTk3YS00MWM0LTk3ZjctMzMyN2NjZjBkYzIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACg
QDANBgkqhkiG9w0BAQsFAAOCAQEAvTMIYamQFvxTpUZ7r8XHmmwWWWpwQFkYh2Qw
ajhI6pV9DMX3iYaNirGXjrTKbV8uwcNboYOluuiSP0jdGB9AU6g79TfG6tCkQ4Hd
sp1AExr7/fcLyBy9EM5ml4gGI85iTok7RssJw4ULmGvGR8FNujWsG24phrJfYxor
1pPfh0CwaWodBh56QEgafTHU3lX2TeHVbauzD6aNe4iHmR70tcxcS7cFjgpT4XNJ
1CiIczjk9rhUzR0/uMv9nEPaMygpESPhCGx8p5epKoS+jx/2Coh4dT16UYN2Hwm0
OCW56p58wgr7K4X+oqQhbp1m2Q18uEIMcw3IKObyJbx2tdTtMw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:49 2026 by rpki-client